This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/d44967c2-66bc-333c-a074-0781737fb57c.roa File: d44967c2-66bc-333c-a074-0781737fb57c.roa (raw, json) Hash identifier: bnOrFiLnk4JDN/GsbfxZVC2CK0LN8G8okx0TexxihRM= Subject key identifier: 8E:DA:59:E0:51:A8:B1:33:89:FF:07:C5:73:99:78:C1:B8:22:9C:27 Certificate issuer: /CN=0f9fa158-6175-4fe8-be8e-bcfccfc26553 Certificate serial: 010D0C9F4328584BC27050C7F5FBABBF0E48FC80 Authority key identifier: 19:36:54:0C:48:D0:41:BD:2D:39:05:04:5B:DC:5A:9E:05:85:10:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/d44967c2-66bc-333c-a074-0781737fb57c.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 398565 IP address blocks: 23.161.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/0f9fa158-6175-4fe8-be8e-bcfccfc26553.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/0f9fa158-6175-4fe8-be8e-bcfccfc26553.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:50:c7:f5:fb:ab:bf:0e:48:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9fa158-6175-4fe8-be8e-bcfccfc26553 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=e4302901-c52c-40f6-955a-efa0e07cdc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:01:a6:c9:e6:d9:23:bc:59:d2:dd:91:70:b1: 81:b5:31:57:c8:e4:3d:be:40:d4:d3:0e:53:62:e0: 44:d0:b3:24:fd:46:5a:e9:ed:c5:43:13:aa:e6:14: 13:f2:e2:c9:f5:06:d0:8d:73:b5:b3:64:09:18:af: e9:6d:1f:c6:15:7e:3c:87:17:08:59:91:22:d2:f2: 99:92:34:6e:93:9e:6e:87:43:dc:b4:7b:a7:9d:bc: 17:97:ab:f4:3a:30:05:67:05:6f:0a:9a:30:67:ff: 0f:b6:56:99:73:c2:5c:25:47:75:fb:c5:8b:17:15: 7c:f1:a6:0e:82:4a:ed:a2:ea:ee:72:a4:07:59:81: 57:25:08:ad:02:c3:7e:fb:d8:87:1e:2a:b0:78:b5: 57:38:1c:21:3e:f7:c5:f8:93:14:68:76:b0:c9:8a: cf:3d:40:b3:b5:c9:93:ce:ee:49:be:46:73:fb:d4: f1:3c:6a:57:51:e0:82:69:54:eb:8a:bf:ba:1c:4b: 3f:8d:65:59:d6:fa:9d:27:4f:05:fb:d5:24:2e:f8: bc:b1:a5:63:99:ca:8d:32:b7:23:1d:dc:d2:62:1f: cb:23:85:5d:e4:c7:de:74:00:04:f7:2c:e2:41:f1: fb:c1:d2:a0:df:08:bc:4a:ec:23:fd:a4:c4:e3:24: 4f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DA:59:E0:51:A8:B1:33:89:FF:07:C5:73:99:78:C1:B8:22:9C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/d44967c2-66bc-333c-a074-0781737fb57c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/0f9fa158-6175-4fe8-be8e-bcfccfc26553.crl X509v3 Authority Key Identifier: keyid:19:36:54:0C:48:D0:41:BD:2D:39:05:04:5B:DC:5A:9E:05:85:10:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer sbgp-ipAddrBlock: critical IPv4: 23.161.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:28:56:d8:0f:fc:74:d7:04:65:f0:45:62:e2:79:ba:ba:34: f2:9c:ef:b7:f4:14:ec:69:f0:a1:c8:15:7c:03:e5:8f:4f:df: 44:9f:97:c4:2b:95:4e:73:af:6d:66:47:e3:e5:6d:48:9f:ec: 85:58:c4:b8:b0:a2:f5:cf:50:9c:41:1c:e8:28:8a:bd:66:08: 2a:3d:1d:d0:8a:a5:61:00:50:26:59:07:f4:28:8e:08:c7:73: 0a:e0:6b:6a:d8:f4:e1:a0:90:31:00:67:1d:dc:d8:b9:2c:ac: e4:66:72:0e:19:eb:e9:3c:e9:97:79:ae:01:2d:b4:69:5d:3e: 2d:5f:f8:55:10:7b:c6:ae:92:60:a5:93:14:95:eb:e2:ec:44: 3f:71:c5:96:00:c1:ac:59:ff:7c:fa:67:67:65:2e:db:b5:af: 54:73:5e:f3:ca:21:d8:0d:8d:b0:2a:02:ff:f3:24:3c:fd:b3: 87:6d:07:7b:cb:a3:87:6b:c8:44:54:40:22:81:d6:ac:35:b2: f8:97:20:45:15:8d:65:57:c4:fb:3e:d8:5e:78:20:34:9f:35: 36:82:ae:69:e2:23:ad:d4:6e:57:ae:4a:9d:d3:77:e1:60:95: 6a:f8:2c:39:40:23:c8:e3:64:db:83:18:1d:98:43:58:e4:00: d9:ef:23:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcFDH9furvw5I/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5ZmExNTgtNjE3NS00ZmU4LWJlOGUtYmNmY2NmYzI2 NTUzMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZTQzMDI5MDEtYzUyYy00MGY2LTk1NWEtZWZhMGUwN2NkYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gGmyebZI7xZ0t2RcLGBtTFXyOQ9vkDU0w5T YuBE0LMk/UZa6e3FQxOq5hQT8uLJ9QbQjXO1s2QJGK/pbR/GFX48hxcIWZEi0vKZ kjRuk55uh0PctHunnbwXl6v0OjAFZwVvCpowZ/8PtlaZc8JcJUd1+8WLFxV88aYO gkrtourucqQHWYFXJQitAsN++9iHHiqweLVXOBwhPvfF+JMUaHawyYrPPUCztcmT zu5JvkZz+9TxPGpXUeCCaVTrir+6HEs/jWVZ1vqdJ08F+9UkLvi8saVjmcqNMrcj HdzSYh/LI4Vd5MfedAAE9yziQfH7wdKg3wi8Suwj/aTE4yRPDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7aWeBRqLEzif8HxXOZeMG4IpwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjlm YTE1OC02MTc1LTRmZTgtYmU4ZS1iY2ZjY2ZjMjY1NTMvZDQ0OTY3YzItNjZiYy0z MzNjLWEwNzQtMDc4MTczN2ZiNTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5ZmExNTgtNjE3NS00ZmU4LWJl OGUtYmNmY2NmYzI2NTUzLzBmOWZhMTU4LTYxNzUtNGZlOC1iZThlLWJjZmNjZmMy NjU1My5jcmwwHwYDVR0jBBgwFoAUGTZUDEjQQb0tOQUEW9xangWFEJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjlmYTE1OC02MTc1LTRmZTgtYmU4ZS1iY2Zj Y2ZjMjY1NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6HQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYoVtgP/HTXBGXwRWLiebq6NPKc77f0FOxp8KHIFXwD5Y9P30Sfl8Qr lU5zr21mR+PlbUif7IVYxLiwovXPUJxBHOgoir1mCCo9HdCKpWEAUCZZB/QojgjH cwrga2rY9OGgkDEAZx3c2LksrORmcg4Z6+k86Zd5rgEttGldPi1f+FUQe8aukmCl kxSV6+LsRD9xxZYAwaxZ/3z6Z2dlLtu1r1RzXvPKIdgNjbAqAv/zJDz9s4dtB3vL o4dryERUQCKB1qw1sviXIEUVjWVXxPs+2F54IDSfNTaCrmniI63UbleuSp3Td+Fg lWr4LDlAI8jjZNuDGB2YQ1jkANnvI64= -----END CERTIFICATE-----Generated at Sun Dec 7 10:06:36 2025 by rpki-client