This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c9d76cb3-1b84-3452-b2a6-be5200321631.roa File: c9d76cb3-1b84-3452-b2a6-be5200321631.roa (raw, json) Hash identifier: DcXj0SWiAfrhIJgAGMYi+ibVngzarG8rXlEl4FTh4fg= Subject key identifier: 80:7E:F6:49:60:54:F5:BB:01:F7:BB:88:29:25:FB:7D:22:3D:D4:86 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584BEF1B47C3D67E389F88A7F980 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c9d76cb3-1b84-3452-b2a6-be5200321631.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 398993 IP address blocks: 107.149.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:47:c3:d6:7e:38:9f:88:a7:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=9a29a068-cce9-4223-83dd-408a6a9d016e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:18:b7:25:60:85:8a:be:30:4a:c4:03:5b:86: 25:c2:9f:02:20:ef:6b:ce:ca:ce:35:17:9c:bd:44: 82:87:a5:41:b1:df:12:92:45:b9:9e:92:c9:83:dc: 57:bc:f7:dc:fa:f2:05:dd:d6:a6:13:75:67:3c:b1: 46:ca:92:7a:19:bd:f1:b4:bc:47:c1:0f:94:e6:23: 14:82:2b:ab:c1:b4:68:0f:41:43:8f:4c:96:91:fe: 71:39:50:47:27:df:a5:59:01:2f:01:bb:4a:43:8f: e9:c3:2a:64:1a:ac:6e:26:79:bb:a6:75:0f:7f:73: d4:29:60:a1:a4:88:6b:cc:20:73:6c:df:9b:92:dc: 8a:96:7a:b3:7d:90:1a:e9:02:93:d4:20:4a:72:2b: 76:96:41:f1:eb:cf:42:8b:ca:bf:ac:08:03:8d:f4: fb:88:22:f5:e6:4f:59:b4:50:32:7d:5f:10:3e:41: 8a:81:2a:24:49:88:8c:62:e8:67:58:88:85:d8:b9: 00:fd:a7:9a:d3:bd:20:29:13:26:02:86:41:da:c8: 92:41:d5:d4:1b:bd:70:d1:65:e7:c1:8c:43:61:b0: 94:a2:0f:c3:1f:12:39:4b:54:e0:a8:2b:c3:6b:ef: 93:ee:c8:b7:dc:1e:22:65:a9:f9:11:08:c7:10:87: 9f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7E:F6:49:60:54:F5:BB:01:F7:BB:88:29:25:FB:7D:22:3D:D4:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c9d76cb3-1b84-3452-b2a6-be5200321631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:37:80:c7:75:a9:6a:1c:af:f2:bc:dc:f0:20:ab:fa:fd:85: ce:a5:6d:d8:fc:23:45:91:ad:5c:c4:4d:b3:d6:5d:1d:96:01: 86:86:13:cf:9a:35:a0:30:8d:8f:51:10:65:d4:21:bf:64:ab: 6e:cf:fe:e4:de:b8:3b:2a:f3:2d:c7:19:89:3e:8d:a9:42:e5: b9:73:bc:88:65:5c:d3:6e:58:51:5f:33:c3:13:ba:1a:c8:f8: 7b:97:88:a1:86:d7:bf:5e:9d:06:71:f3:fe:ef:9a:72:a2:e4: 40:ce:61:a1:ce:db:7e:71:30:9d:41:1d:8f:bf:b2:12:04:d4: 64:d8:02:ed:e9:54:df:c5:ae:4a:2d:c5:af:cf:bf:25:74:ce: e0:22:ce:ea:7d:26:42:85:75:1b:3e:c3:80:e7:14:29:17:c2: 70:41:23:d1:15:6e:75:77:e3:ce:d9:69:2d:6a:ab:ed:8f:5a: c4:94:b3:7a:58:c4:aa:72:0a:93:85:3b:b4:20:67:65:14:d6: 5c:8c:8f:f0:34:47:b2:e7:1a:9b:b4:68:73:ca:d7:e0:ca:9e: d4:bd:32:87:2c:2b:17:e4:3d:74:e6:97:ae:4e:ef:ce:77:22: 70:46:1b:18:2e:e5:43:f6:f3:36:bf:29:16:ed:af:d5:f9:d7: 0b:4c:9d:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvG0fD1n44n4in+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk OWEyOWEwNjgtY2NlOS00MjIzLTgzZGQtNDA4YTZhOWQwMTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xi3JWCFir4wSsQDW4Ylwp8CIO9rzsrONRec vUSCh6VBsd8SkkW5npLJg9xXvPfc+vIF3damE3VnPLFGypJ6Gb3xtLxHwQ+U5iMU giurwbRoD0FDj0yWkf5xOVBHJ9+lWQEvAbtKQ4/pwypkGqxuJnm7pnUPf3PUKWCh pIhrzCBzbN+bktyKlnqzfZAa6QKT1CBKcit2lkHx689Ci8q/rAgDjfT7iCL15k9Z tFAyfV8QPkGKgSokSYiMYuhnWIiF2LkA/aea070gKRMmAoZB2siSQdXUG71w0WXn wYxDYbCUog/DHxI5S1TgqCvDa++T7si33B4iZan5EQjHEIefgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIB+9klgVPW7Afe7iCkl+30iPdSGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYzlkNzZjYjMtMWI4NC0z NDUyLWIyYTYtYmU1MjAwMzIxNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5WcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc3gMd1qWocr/K83PAgq/r9hc6lbdj8I0WRrVzETbPWXR2WAYaGE8+a NaAwjY9REGXUIb9kq27P/uTeuDsq8y3HGYk+jalC5blzvIhlXNNuWFFfM8MTuhrI +HuXiKGG179enQZx8/7vmnKi5EDOYaHO235xMJ1BHY+/shIE1GTYAu3pVN/Frkot xa/PvyV0zuAizup9JkKFdRs+w4DnFCkXwnBBI9EVbnV3487ZaS1qq+2PWsSUs3pY xKpyCpOFO7QgZ2UU1lyMj/A0R7LnGpu0aHPK1+DKntS9MocsKxfkPXTml65O7853 InBGGxgu5UP28za/KRbtr9X51wtMnVo= -----END CERTIFICATE-----Generated at Sat Dec 6 13:08:02 2025 by rpki-client