This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c978bb35-59fb-371f-b799-039bff207386.roa File: c978bb35-59fb-371f-b799-039bff207386.roa (raw, json) Hash identifier: L+oKJO7R2dTf4lqiIJYfvRfz14XAyclE65HcmcKUHbg= Subject key identifier: 19:BF:27:87:0B:01:19:E3:EE:03:EB:A3:0C:50:C2:D2:03:F2:0C:CE Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584BFA45EC5C225A6F5463DAE3C0 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c978bb35-59fb-371f-b799-039bff207386.roa Signing time: Tue 25 Nov 2025 14:00:36 +0000 ROA not before: Tue 25 Nov 2025 14:00:36 +0000 ROA not after: Mon 23 Feb 2026 14:00:36 +0000 asID: 398823 IP address blocks: 107.149.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:45:ec:5c:22:5a:6f:54:63:da:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Nov 25 14:00:36 2025 GMT Not After : Feb 23 14:00:36 2026 GMT Subject: CN=40a66a94-eee7-4616-8910-45b72568af87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9d:ef:8c:4c:7c:0d:28:97:3f:67:e0:5c:56: 94:32:e6:51:7b:87:56:28:02:25:66:bb:9a:d4:fe: 41:7d:0b:14:b0:6d:6c:0b:2d:96:b0:95:4d:3c:d3: 75:ba:cf:e0:ea:a1:fe:e7:82:f8:bb:07:75:de:b0: 84:57:94:ee:43:3d:e7:6e:a2:37:1f:6f:f1:8a:fe: 94:4d:1b:2a:c8:8c:66:8a:cf:76:7d:54:fe:35:97: 11:9b:e3:14:74:a1:cd:1d:a3:18:f1:9c:ba:cf:9b: 98:36:61:06:da:61:93:8b:cf:c1:74:67:81:db:99: ba:39:ab:25:24:b3:ca:dc:a8:8b:91:32:5d:c8:fd: 76:c3:92:93:df:d6:f8:d7:ee:8a:3e:0c:fa:e1:c9: 23:9b:11:d3:b6:dc:75:d8:a2:66:22:c1:72:d6:11: eb:bd:99:49:e2:1d:fe:0e:6a:f6:8b:0b:4d:e2:94: c6:bd:d3:19:92:36:f3:36:68:98:3f:88:80:3d:51: 7b:ee:cf:3e:17:f2:16:63:95:7e:8d:e8:cc:3f:a9: 81:72:88:89:ce:bd:63:36:5e:80:05:da:ea:97:78: 85:dc:5c:ad:8e:f5:6e:38:5a:b3:4f:45:6a:f3:0f: 70:40:81:8e:0b:3f:93:c1:0e:8c:5e:13:f1:cd:f0: 1f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BF:27:87:0B:01:19:E3:EE:03:EB:A3:0C:50:C2:D2:03:F2:0C:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c978bb35-59fb-371f-b799-039bff207386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:25:9f:56:a1:a1:e4:75:a5:0c:2b:70:f2:00:d7:fd:65:f0: 26:06:9c:24:6e:55:56:66:9e:9c:c7:4e:02:40:1d:51:98:b8: 4e:bb:09:cf:6c:49:a6:0a:2a:77:37:c8:d9:d2:35:5d:af:c4: e1:89:d7:70:96:27:23:13:e6:61:b2:e1:82:64:22:88:43:dd: a4:62:94:90:95:1e:50:3f:ee:26:a1:b4:b8:88:e2:20:e9:14: 0c:a0:76:97:80:a3:f8:e2:b0:be:c0:8e:97:3a:46:41:b9:68: a1:ab:e5:94:65:06:ec:24:0c:f4:f9:a8:ed:c9:29:95:15:96: 71:31:8c:a8:6c:e2:28:cd:5b:a0:35:5c:47:e0:ef:61:6f:99: 79:d2:5a:d1:72:ac:5c:e5:da:11:37:1f:41:6e:a3:e3:b8:14: 1a:57:ed:d9:e8:09:7e:e8:fd:ec:c2:7d:98:8e:77:6a:d4:20: 60:f7:24:20:48:9e:b9:94:06:37:0d:fc:83:df:03:33:63:4f: 2d:47:e8:11:bf:42:0a:d8:61:5a:64:5b:6a:75:5d:f5:d5:b8: 0f:e8:8b:a8:f2:77:00:5b:e1:73:ab:79:af:80:85:c4:da:77: 46:72:b2:09:4d:7e:2b:03:e5:12:dc:cd:8d:6e:6e:cf:7c:7a: 3f:81:c3:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv6RexcIlpvVGPa48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MTEyNTE0MDAzNloXDTI2MDIyMzE0MDAzNlowLzEtMCsGA1UEAxMk NDBhNjZhOTQtZWVlNy00NjE2LTg5MTAtNDViNzI1NjhhZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh53vjEx8DSiXP2fgXFaUMuZRe4dWKAIlZrua 1P5BfQsUsG1sCy2WsJVNPNN1us/g6qH+54L4uwd13rCEV5TuQz3nbqI3H2/xiv6U TRsqyIxmis92fVT+NZcRm+MUdKHNHaMY8Zy6z5uYNmEG2mGTi8/BdGeB25m6Oasl JLPK3KiLkTJdyP12w5KT39b41+6KPgz64ckjmxHTttx12KJmIsFy1hHrvZlJ4h3+ Dmr2iwtN4pTGvdMZkjbzNmiYP4iAPVF77s8+F/IWY5V+jejMP6mBcoiJzr1jNl6A Bdrql3iF3FytjvVuOFqzT0Vq8w9wQIGOCz+TwQ6MXhPxzfAfLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBm/J4cLARnj7gProwxQwtID8gzOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYzk3OGJiMzUtNTlmYi0z NzFmLWI3OTktMDM5YmZmMjA3Mzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5WeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMln1ahoeR1pQwrcPIA1/1l8CYGnCRuVVZmnpzHTgJAHVGYuE67Cc9s SaYKKnc3yNnSNV2vxOGJ13CWJyMT5mGy4YJkIohD3aRilJCVHlA/7iahtLiI4iDp FAygdpeAo/jisL7Ajpc6RkG5aKGr5ZRlBuwkDPT5qO3JKZUVlnExjKhs4ijNW6A1 XEfg72FvmXnSWtFyrFzl2hE3H0Fuo+O4FBpX7dnoCX7o/ezCfZiOd2rUIGD3JCBI nrmUBjcN/IPfAzNjTy1H6BG/QgrYYVpkW2p1XfXVuA/oi6jydwBb4XOrea+AhcTa d0ZysglNfisD5RLczY1ubs98ej+Bw6U= -----END CERTIFICATE-----Generated at Sat Dec 6 19:43:46 2025 by rpki-client