This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa File: 200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa (raw, json) Hash identifier: /aViyLpH9XckoVs+hEy5Wt0XqizPtlyOw1tgWfARUKo= Subject key identifier: 4F:2F:97:A7:47:26:0E:D7:7B:BD:77:B9:1B:58:A2:AB:03:DA:9D:78 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584BC53B01A1451A6610BDC99F00 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 398478 IP address blocks: 107.149.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:01:a1:45:1a:66:10:bd:c9:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=acafe416-a1cd-49a1-bd41-0b76f4f9fa49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:60:da:9f:7b:cd:d0:7e:73:e8:bd:70:b1:d7: 99:f8:14:5f:8f:ec:64:04:64:02:7e:31:44:66:db: 10:c8:90:b0:a2:8b:64:b7:3b:3e:11:db:4d:e3:5b: 9e:bd:9f:09:a7:bc:10:4d:e6:43:10:68:0d:c3:3d: e9:3e:b7:49:94:89:bb:e0:fa:2d:ae:43:d3:29:de: ec:b8:80:4f:e4:e2:52:68:ae:4d:1c:e4:62:db:16: 66:30:3d:7b:0f:4b:de:a2:a8:6f:3d:b7:42:ec:c4: 0e:62:de:41:a8:9f:a2:38:47:ee:34:f4:7f:97:ac: de:7a:62:0e:b8:b4:ee:12:08:a1:e5:59:fa:ed:7b: 7e:ec:2e:40:d8:a2:46:b3:32:db:de:31:0d:f8:2f: a9:4e:25:e2:4e:8e:8a:1f:9d:84:8a:2d:64:5a:e6: 30:a4:d2:ae:1c:27:48:0d:3a:a9:f6:31:1f:30:d8: 90:9d:04:71:49:6f:9d:67:bf:75:5b:f9:45:ad:c8: 99:c4:7d:ca:89:58:5c:63:5a:33:e5:de:10:29:3f: 0d:80:61:3e:3c:b3:12:79:cd:b6:4b:a7:b1:89:f4: a7:d9:bd:86:4e:12:37:9a:25:e6:1d:07:c7:87:6b: ba:1c:1e:0b:c7:dd:f6:29:cb:6b:e0:fe:e3:00:16: 65:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2F:97:A7:47:26:0E:D7:7B:BD:77:B9:1B:58:A2:AB:03:DA:9D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:0e:92:a3:3d:43:7a:ab:d2:7f:10:df:28:6a:51:7a:ee:e3: 63:5b:49:63:3a:25:6f:d4:ab:8f:51:29:6f:23:af:9e:47:f9: 67:f9:a7:91:66:f4:e4:c5:25:c0:3e:be:01:d6:41:44:62:2d: c3:0b:48:d9:22:51:c2:81:8c:f4:dd:25:37:4a:6f:bc:6a:c9: 6a:e6:f8:ab:15:1e:cf:20:94:2f:8a:94:1c:f3:f2:4c:60:39: 2d:c1:5a:3c:c6:d0:24:6f:05:02:57:78:ef:e2:d6:8f:59:4f: 83:ba:dd:72:84:66:78:a2:71:cf:0f:09:98:8d:23:11:eb:c0: ba:2a:f8:85:ef:6d:88:87:30:e0:70:3b:59:44:b9:f0:31:55: b9:f7:a7:15:2d:e1:e3:6a:c4:e2:14:1e:c0:78:d6:71:99:82: d7:f5:ac:11:c2:9d:fc:0f:ea:1e:36:1b:10:59:be:37:f6:9e: d7:7a:ed:69:c1:7c:42:91:20:ed:ce:c7:4a:89:92:be:8f:90: 3c:5a:2e:05:70:6b:26:19:4a:6f:9f:49:e8:8a:0c:15:18:f1: 39:45:4e:0e:44:b3:71:3a:cc:3e:3b:3f:bd:02:a3:99:7c:24: 02:7a:14:0e:29:31:1e:8e:e0:c1:a3:29:5b:04:9f:91:51:25: c8:fd:ea:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOwGhRRpmEL3JnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YWNhZmU0MTYtYTFjZC00OWExLWJkNDEtMGI3NmY0ZjlmYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2Dan3vN0H5z6L1wsdeZ+BRfj+xkBGQCfjFE ZtsQyJCwootktzs+EdtN41uevZ8Jp7wQTeZDEGgNwz3pPrdJlIm74PotrkPTKd7s uIBP5OJSaK5NHORi2xZmMD17D0veoqhvPbdC7MQOYt5BqJ+iOEfuNPR/l6zeemIO uLTuEgih5Vn67Xt+7C5A2KJGszLb3jEN+C+pTiXiTo6KH52Eii1kWuYwpNKuHCdI DTqp9jEfMNiQnQRxSW+dZ791W/lFrciZxH3KiVhcY1oz5d4QKT8NgGE+PLMSec22 S6exifSn2b2GThI3miXmHQfHh2u6HB4Lx932Kctr4P7jABZlkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8vl6dHJg7Xe713uRtYoqsD2p14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMjAwZGRkYjQtNDk4ZS0z ZmJkLTg0YWYtNDZkOWNjN2ZlMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEOkqM9Q3qr0n8Q3yhqUXru42NbSWM6JW/Uq49RKW8jr55H+Wf5p5Fm 9OTFJcA+vgHWQURiLcMLSNkiUcKBjPTdJTdKb7xqyWrm+KsVHs8glC+KlBzz8kxg OS3BWjzG0CRvBQJXeO/i1o9ZT4O63XKEZniicc8PCZiNIxHrwLoq+IXvbYiHMOBw O1lEufAxVbn3pxUt4eNqxOIUHsB41nGZgtf1rBHCnfwP6h42GxBZvjf2ntd67WnB fEKRIO3Ox0qJkr6PkDxaLgVwayYZSm+fSeiKDBUY8TlFTg5Es3E6zD47P70Co5l8 JAJ6FA4pMR6O4MGjKVsEn5FRJcj96tw= -----END CERTIFICATE-----Generated at Sat Dec 6 13:43:22 2025 by rpki-client