This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa File: f84f7d22-eb77-3b0c-9804-527be438dbd6.roa (raw, json) Hash identifier: UyKHHy3avNqhsPuKRsY8wkkunMtdln1Qa2GXFewJ3vY= Subject key identifier: AA:12:61:A7:81:CA:22:7D:A1:EB:CD:87:C3:F5:8A:A7:92:D2:24:99 Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Certificate serial: 010D0C9F4328584BCD9B27E64791E3C743D9D800 Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 32746 IP address blocks: 192.122.149.0/24 maxlen: 24 209.209.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:27:e6:47:91:e3:c7:43:d9:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=66b0287f-6878-4b55-83fa-ddb952d7c24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:00:4b:e0:74:96:4b:ff:38:48:b5:f5:3a:2d: dd:32:09:57:6d:12:d8:88:b8:c9:c5:78:03:41:0e: a9:52:53:ae:a2:1c:98:06:d2:06:74:02:99:cb:fa: 78:07:8d:d5:d6:4a:c7:9e:61:c1:3b:eb:c0:6d:a3: e6:5d:e3:2c:d6:61:6d:1e:bb:fa:83:3e:3e:6f:b0: 4f:b0:e8:24:f2:42:d8:83:a3:d5:31:fb:fe:fe:88: 6f:6c:17:14:23:43:ab:02:c0:ae:46:69:9c:2a:b6: 20:5a:16:43:c9:ae:89:a8:27:b5:b9:3b:2c:6e:af: 2a:9f:db:2b:f2:34:db:17:6a:f0:1a:d9:f5:16:53: a3:23:42:aa:fd:4d:c4:93:bf:89:d3:6b:0b:b0:38: fb:a4:9f:8a:ca:98:84:97:93:07:9a:8a:6b:bc:72: 25:93:6b:04:a2:07:34:33:5d:98:55:71:80:16:5e: 2b:7b:b9:a0:7f:d3:44:1f:f2:a1:8b:d8:d1:42:3f: 70:8e:fc:fd:47:c8:10:2e:c0:e8:4a:7c:f0:3a:40: 90:0b:ed:dd:03:bc:a9:62:99:e4:01:45:17:35:85: a3:3a:5a:df:fa:c3:24:a5:17:71:94:70:e9:78:a3: 37:70:46:5b:4d:d6:68:bb:2e:44:91:c4:cf:ea:a2: 64:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:12:61:A7:81:CA:22:7D:A1:EB:CD:87:C3:F5:8A:A7:92:D2:24:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/f84f7d22-eb77-3b0c-9804-527be438dbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl X509v3 Authority Key Identifier: keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer sbgp-ipAddrBlock: critical IPv4: 192.122.149.0/24 209.209.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:3a:5c:54:98:24:82:f0:45:f7:1b:27:da:c8:40:71:aa:fb: 1e:02:17:f4:af:5f:20:97:01:60:57:84:0a:e5:6d:e2:12:74: fa:33:c5:b3:6d:26:da:04:34:3a:fa:80:ba:cf:af:26:39:a2: b3:19:ae:1e:fc:da:e8:5c:34:c5:10:3f:f2:01:1b:b9:cd:7e: c9:d9:22:fc:b6:c7:38:15:80:c7:99:fd:3d:a2:ad:97:c5:16: 5c:52:28:e9:e9:ee:68:d2:9b:5e:42:f5:d8:0d:96:06:ac:f3: 2f:69:60:27:1e:2c:61:6e:5a:f7:06:f5:2b:d7:a8:79:5f:87: 45:c3:62:fe:cc:19:3c:76:03:43:e8:3d:a2:bb:71:d6:ee:77: 91:21:d0:7b:81:c6:74:e2:a8:9f:21:1a:36:0c:d6:e4:bb:e2: 76:01:42:21:89:4e:fb:cf:86:8e:85:10:f0:26:03:a4:16:8a: 7d:c9:dd:d0:60:28:e2:ec:e1:d6:ea:88:14:ad:47:12:16:dd: 04:a8:b7:3e:0a:57:c9:44:e3:f8:83:a9:7f:34:2e:91:7e:30: 7e:e3:c1:be:6f:f4:37:00:90:c8:5e:2d:c3:de:2a:2c:4a:e0: e4:3e:32:2e:9e:52:7d:4a:05:6d:5a:18:9a:20:7d:20:c6:54: f4:0c:1e:ed -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvNmyfmR5Hjx0PZ2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMWFhNTctYmRiMC00OGEzLWFhMTgtMzMyZTZiZDlm Mjk1MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk NjZiMDI4N2YtNjg3OC00YjU1LTgzZmEtZGRiOTUyZDdjMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwBL4HSWS/84SLX1Oi3dMglXbRLYiLjJxXgD QQ6pUlOuohyYBtIGdAKZy/p4B43V1krHnmHBO+vAbaPmXeMs1mFtHrv6gz4+b7BP sOgk8kLYg6PVMfv+/ohvbBcUI0OrAsCuRmmcKrYgWhZDya6JqCe1uTssbq8qn9sr 8jTbF2rwGtn1FlOjI0Kq/U3Ek7+J02sLsDj7pJ+KypiEl5MHmoprvHIlk2sEogc0 M12YVXGAFl4re7mgf9NEH/Khi9jRQj9wjvz9R8gQLsDoSnzwOkCQC+3dA7ypYpnk AUUXNYWjOlrf+sMkpRdxlHDpeKM3cEZbTdZouy5EkcTP6qJkMwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKoSYaeByiJ9oevNh8P1iqeS0iSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGIx YWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJlNmJkOWYyOTUvZjg0ZjdkMjItZWI3Ny0z YjBjLTk4MDQtNTI3YmU0MzhkYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBiMWFhNTctYmRiMC00OGEzLWFh MTgtMzMyZTZiZDlmMjk1LzQwYjFhYTU3LWJkYjAtNDhhMy1hYTE4LTMzMmU2YmQ5 ZjI5NS5jcmwwHwYDVR0jBBgwFoAUJAsldyWcBjpGAjy2RYfvhs1+BPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGIxYWE1Ny1iZGIwLTQ4YTMtYWExOC0zMzJl NmJkOWYyOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwHqVAwQA 0dEDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAK06XFSYJILwRfcbJ9rIQHGq+x4CF/SvXyCXAWBXhArlbeIS dPozxbNtJtoENDr6gLrPryY5orMZrh782uhcNMUQP/IBG7nNfsnZIvy2xzgVgMeZ /T2irZfFFlxSKOnp7mjSm15C9dgNlgas8y9pYCceLGFuWvcG9SvXqHlfh0XDYv7M GTx2A0PoPaK7cdbud5Eh0HuBxnTiqJ8hGjYM1uS74nYBQiGJTvvPho6FEPAmA6QW in3J3dBgKOLs4dbqiBStRxIW3QSotz4KV8lE4/iDqX80LpF+MH7jwb5v9DcAkMhe LcPeKixK4OQ+Mi6eUn1KBW1aGJogfSDGVPQMHu0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:35 2025 by rpki-client