This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/8c1a3a6d-e821-3f1f-b0ab-91124067f4d1.roa File: 8c1a3a6d-e821-3f1f-b0ab-91124067f4d1.roa (raw, json) Hash identifier: l9zFi7ikte0n1btQyEj0zfxsTxkU1MkCpau4kxU4G9c= Subject key identifier: C0:CA:69:52:1E:7F:02:4F:75:BD:5E:48:3E:4B:D2:B8:BA:BD:4B:38 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584BFADF173E36F798ED0091A680 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/8c1a3a6d-e821-3f1f-b0ab-91124067f4d1.roa Signing time: Tue 25 Nov 2025 19:07:10 +0000 ROA not before: Tue 25 Nov 2025 19:07:10 +0000 ROA not after: Mon 23 Feb 2026 19:07:10 +0000 asID: 14618 IP address blocks: 159.172.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:df:17:3e:36:f7:98:ed:00:91:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Nov 25 19:07:10 2025 GMT Not After : Feb 23 19:07:10 2026 GMT Subject: CN=20fe4ab2-4eac-4e73-b71d-67844f17df91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:1e:1d:0f:3d:a1:2b:83:25:0f:ca:d8:c0: bd:cb:6f:fa:3f:b7:b2:16:30:cb:21:4a:a8:a0:78: 77:78:78:32:24:fe:72:db:5d:e5:da:96:3c:47:be: 8d:a2:a1:10:ca:de:e7:58:ed:5d:6e:0a:ee:bb:95: 20:43:f1:8f:09:33:86:bf:18:46:04:d4:81:d9:d7: a9:aa:dd:44:6d:e5:cf:f7:c2:48:60:e7:d3:8b:03: 9f:6b:70:75:a7:2d:d0:18:f4:3a:be:38:1d:31:3d: 71:be:67:37:3a:5d:44:3f:93:fe:61:03:cc:53:fa: 78:f3:8f:50:9f:61:19:ca:83:83:ff:7a:42:1d:da: a8:92:07:cd:29:bd:e2:fe:15:17:85:59:a5:24:8f: 4d:5b:64:0b:c8:e1:18:ff:f8:e7:fe:60:73:48:a6: 36:c1:f7:09:60:c0:bf:a8:24:da:d5:65:93:77:26: ae:64:08:57:b4:4f:b1:a7:ff:17:dd:3c:81:90:a8: 6b:dc:f6:da:0e:34:52:00:2b:5f:69:39:f7:ca:db: 29:16:50:46:04:10:d5:eb:f7:c4:86:12:86:1c:f5: 78:8a:de:78:ba:56:aa:e1:4e:5e:c3:e2:34:c3:3b: ad:93:26:d1:67:e5:79:03:32:c7:a5:4d:49:71:07: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CA:69:52:1E:7F:02:4F:75:BD:5E:48:3E:4B:D2:B8:BA:BD:4B:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/8c1a3a6d-e821-3f1f-b0ab-91124067f4d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:39:47:5f:2b:37:15:ec:e2:4c:db:af:5e:2d:9f:48:aa:8b: 6c:c5:a0:70:4e:93:ab:20:f2:9e:25:ca:b1:8e:7e:6d:ad:8f: a9:cc:5c:a2:14:e2:c3:33:b5:a3:0a:bc:21:88:e6:0e:79:33: 7b:f6:36:cb:30:a6:71:de:4c:ee:87:86:1f:a2:01:c2:58:da: d8:c2:45:51:dd:bb:2a:52:3e:01:68:76:74:76:a2:b2:bb:8f: d0:11:74:e8:f1:c8:86:bc:a3:c2:bd:b8:32:46:be:3d:8d:dc: df:e0:9d:60:c3:44:0a:4c:52:20:25:c3:71:77:70:75:2a:38: d2:b3:6e:97:39:7b:0d:9e:5e:ca:78:0c:1b:79:3f:7a:1a:d6: aa:49:ba:43:fc:b4:20:22:a7:57:2f:70:e4:2f:86:a5:4d:fc: 27:00:78:6c:c5:a9:32:df:ae:3e:48:15:f3:b2:db:b7:06:34: 9b:3e:d9:0d:40:c3:63:55:07:b5:e0:59:bd:8e:d5:e4:8f:7e: 07:7d:bd:ff:49:45:4d:37:62:7a:c0:de:9e:37:8d:4f:01:a1: 71:a8:56:7d:56:2c:be:84:56:c1:ac:01:c6:a8:e1:8b:65:5b: b9:ef:05:96:3c:5d:32:6b:d1:8b:b6:6d:b2:19:49:8a:e7:f0: f3:5c:db:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv63xc+NveY7QCRpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MTEyNTE5MDcxMFoXDTI2MDIyMzE5MDcxMFowLzEtMCsGA1UEAxMk MjBmZTRhYjItNGVhYy00ZTczLWI3MWQtNjc4NDRmMTdkZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVceHQ89oSuDJQ/K2MC9y2/6P7eyFjDLIUqo oHh3eHgyJP5y213l2pY8R76NoqEQyt7nWO1dbgruu5UgQ/GPCTOGvxhGBNSB2dep qt1EbeXP98JIYOfTiwOfa3B1py3QGPQ6vjgdMT1xvmc3Ol1EP5P+YQPMU/p4849Q n2EZyoOD/3pCHdqokgfNKb3i/hUXhVmlJI9NW2QLyOEY//jn/mBzSKY2wfcJYMC/ qCTa1WWTdyauZAhXtE+xp/8X3TyBkKhr3PbaDjRSACtfaTn3ytspFlBGBBDV6/fE hhKGHPV4it54ulaq4U5ew+I0wzutkybRZ+V5AzLHpU1JcQdWaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDKaVIefwJPdb1eSD5L0ri6vUs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvOGMxYTNhNmQtZTgyMS0z ZjFmLWIwYWItOTExMjQwNjdmNGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn6w2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADk5R18rNxXs4kzbr14tn0iqi2zFoHBOk6sg8p4lyrGOfm2tj6nMXKIU 4sMztaMKvCGI5g55M3v2NsswpnHeTO6Hhh+iAcJY2tjCRVHduypSPgFodnR2orK7 j9ARdOjxyIa8o8K9uDJGvj2N3N/gnWDDRApMUiAlw3F3cHUqONKzbpc5ew2eXsp4 DBt5P3oa1qpJukP8tCAip1cvcOQvhqVN/CcAeGzFqTLfrj5IFfOy27cGNJs+2Q1A w2NVB7XgWb2O1eSPfgd9vf9JRU03YnrA3p43jU8BoXGoVn1WLL6EVsGsAcao4Ytl W7nvBZY8XTJr0Yu2bbIZSYrn8PNc240= -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:28 2025 by rpki-client