This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa File: ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa (raw, json) Hash identifier: /SauFb5Imh57kGLleNlw2hluQkAhGTqEZL4XCGPEEI8= Subject key identifier: 13:42:D9:33:D0:B1:07:E3:7D:14:DB:B7:EE:C0:F7:F5:A0:B6:75:51 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584C56670E83EEBC6E48A36D2700 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 398156 IP address blocks: 158.120.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:0e:83:ee:bc:6e:48:a3:6d:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=59c445c4-fd35-4a81-982b-700c1ba7838a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1c:6c:2f:cb:54:ef:7e:35:68:78:01:66:11: 6b:9f:a0:0c:06:5d:c9:2d:51:cf:a0:d4:93:4d:34: a4:df:a2:bf:70:23:16:3a:0e:22:b6:d3:ce:be:43: 79:08:dc:05:cb:14:2e:f6:db:99:6e:e0:6a:58:f7: aa:8a:53:2f:5c:d9:a6:0e:f4:35:40:7d:56:fc:4c: c0:be:53:4c:e1:15:d5:86:36:45:e0:5f:00:c1:32: d0:c5:ac:fd:13:36:68:50:f4:68:5d:45:3a:99:d6: 77:9c:0f:33:e6:db:5e:c1:20:15:19:1e:b9:a6:4c: 30:c8:4a:ec:08:e3:af:a8:2d:d2:40:03:11:bb:dc: 0c:e8:47:00:8d:8d:06:a3:2e:f6:b6:f4:46:d5:db: e9:2c:11:13:49:45:35:0d:b0:bb:6c:90:5b:bd:79: 10:6f:1b:0a:5f:b1:d5:3b:eb:73:0a:da:2a:fa:27: 91:09:b6:9d:9b:ae:31:d6:ac:9b:77:a1:b6:9b:e2: 00:ad:aa:31:e1:1a:83:52:f4:48:0d:11:e4:93:cf: ed:b4:bd:c9:05:6d:51:9b:49:1b:a4:40:e5:c7:8a: 9a:c7:db:06:32:51:3a:ff:c7:51:23:e3:85:6c:5c: a3:b1:9a:92:85:15:94:44:01:ab:6a:43:6b:a2:9f: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:42:D9:33:D0:B1:07:E3:7D:14:DB:B7:EE:C0:F7:F5:A0:B6:75:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/ca815087-0620-3b2e-9ce7-febc77a5d6a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 158.120.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:4d:e2:a7:04:27:65:0d:fd:5c:fd:23:d7:f9:3e:49:5d:b4: f2:4e:05:cc:54:57:ea:14:b8:14:0d:89:ce:70:69:99:7f:5c: 59:ed:1b:31:40:6a:32:67:83:5a:fc:a5:41:9e:48:b8:39:3c: f9:5c:1d:1b:59:a3:28:31:98:2f:2f:df:bf:ea:4b:83:b5:92: 6c:3d:a4:e9:47:92:ab:d3:d6:a2:53:d3:23:8a:2e:d7:8e:7d: 1f:8e:cd:25:31:7f:1a:2f:5e:ca:3b:f3:1a:94:ba:2b:3c:b7: bb:22:71:b3:14:94:1a:48:19:90:0f:75:de:4a:6d:f1:fc:75: 09:b9:ca:7a:e6:05:16:ad:7b:24:c6:30:c2:3b:22:05:f9:4d: f2:a3:6d:34:d1:16:8e:ca:33:66:94:43:70:58:09:19:37:f5: 7e:85:d6:68:58:96:6a:cc:27:a3:91:26:20:73:c6:24:7f:59: 3f:1b:c5:e6:d5:35:35:4d:32:15:6b:a7:42:43:a2:71:4d:7e: 9b:ff:06:32:b1:64:aa:56:ad:4c:e1:91:71:a3:3f:8a:93:ac: b9:e1:36:5c:56:a8:cc:04:bd:7b:6e:81:6a:ea:ab:57:23:8f: 75:66:fe:ec:e5:43:27:3b:83:0b:d2:7b:f5:b6:98:6b:5a:4e: b0:dd:33:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZw6D7rxuSKNtJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk NTljNDQ1YzQtZmQzNS00YTgxLTk4MmItNzAwYzFiYTc4MzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hxsL8tU7341aHgBZhFrn6AMBl3JLVHPoNST TTSk36K/cCMWOg4ittPOvkN5CNwFyxQu9tuZbuBqWPeqilMvXNmmDvQ1QH1W/EzA vlNM4RXVhjZF4F8AwTLQxaz9EzZoUPRoXUU6mdZ3nA8z5ttewSAVGR65pkwwyErs COOvqC3SQAMRu9wM6EcAjY0Goy72tvRG1dvpLBETSUU1DbC7bJBbvXkQbxsKX7HV O+tzCtoq+ieRCbadm64x1qybd6G2m+IAraox4RqDUvRIDRHkk8/ttL3JBW1Rm0kb pEDlx4qax9sGMlE6/8dRI+OFbFyjsZqShRWURAGrakNrop8e+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNC2TPQsQfjfRTbt+7A9/WgtnVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvY2E4MTUwODctMDYyMC0z YjJlLTljZTctZmViYzc3YTVkNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZN4qcEJ2UN/Vz9I9f5PkldtPJOBcxUV+oUuBQNic5waZl/XFntGzFA ajJng1r8pUGeSLg5PPlcHRtZoygxmC8v37/qS4O1kmw9pOlHkqvT1qJT0yOKLteO fR+OzSUxfxovXso78xqUuis8t7sicbMUlBpIGZAPdd5KbfH8dQm5ynrmBRateyTG MMI7IgX5TfKjbTTRFo7KM2aUQ3BYCRk39X6F1mhYlmrMJ6ORJiBzxiR/WT8bxebV NTVNMhVrp0JDonFNfpv/BjKxZKpWrUzhkXGjP4qTrLnhNlxWqMwEvXtugWrqq1cj j3Vm/uzlQyc7gwvSe/W2mGtaTrDdMwA= -----END CERTIFICATE-----Generated at Sun Jan 25 14:14:26 2026 by rpki-client