This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa File: d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa (raw, json) Hash identifier: yBiNS3JGuehVQB6g/OGqi4uvCASblLRO0LilEZs0AyU= Subject key identifier: 28:2C:3B:4F:2B:5B:A8:3A:26:91:9D:CF:0D:68:6A:44:96:A0:0B:50 Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Certificate serial: 010D0C9F4328584BF0807B5BBA3191193BDD5880 Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa Signing time: Sat 22 Nov 2025 02:00:30 +0000 ROA not before: Sat 22 Nov 2025 02:00:30 +0000 ROA not after: Fri 20 Feb 2026 02:00:30 +0000 asID: 14618 IP address blocks: 147.124.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f0:80:7b:5b:ba:31:91:19:3b:dd:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06 Validity Not Before: Nov 22 02:00:30 2025 GMT Not After : Feb 20 02:00:30 2026 GMT Subject: CN=0deccc61-00f4-49b1-ba0b-b60037ddcc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fc:29:77:9b:06:a4:35:a4:9c:d3:9a:1a:02: 91:f1:d7:01:5b:10:0e:28:60:6c:da:ab:85:57:ef: 5a:4d:26:86:ba:f5:17:e5:de:2c:98:26:9b:e6:e9: 98:10:7b:6a:0b:26:11:51:a4:8a:b6:c7:75:ed:3b: d3:63:96:8b:ad:03:ba:c7:d3:eb:16:08:ca:28:b3: 5b:81:fb:02:4e:0e:66:4a:dd:e5:35:82:38:09:d0: 03:8d:ee:b1:dd:42:0d:40:77:64:a6:9e:79:8b:4d: 45:d7:73:3a:58:e0:1c:a2:ab:81:4d:d3:4d:de:5f: 64:5f:e2:39:a2:13:b3:5b:2c:3a:a1:04:09:60:b9: 9d:88:e5:f6:fd:8c:62:ee:5c:1e:ef:64:5b:64:07: 1b:4f:4f:b2:66:47:42:d5:5b:5c:53:30:36:c9:27: 6e:8b:4f:8a:3d:a9:1c:b9:e3:83:a2:14:bf:8d:81: 1b:fb:76:f7:db:5b:2b:ed:f7:53:a3:75:fa:75:bc: 0b:36:d0:8d:e9:62:bf:44:93:de:6c:da:fa:7e:c2: e0:5c:34:3b:01:56:9b:51:54:58:6a:0c:45:63:d0: 21:1b:db:7f:ec:0a:89:83:d1:5b:f9:fc:44:72:3e: 8d:bb:c6:28:4d:4a:88:de:94:c8:de:5b:92:1f:ad: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:3B:4F:2B:5B:A8:3A:26:91:9D:CF:0D:68:6A:44:96:A0:0B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d7cb008a-69d9-3335-964e-4d13c6e6f9c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl X509v3 Authority Key Identifier: keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer sbgp-ipAddrBlock: critical IPv4: 147.124.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:85:ff:8b:e1:3d:ad:16:fc:35:57:0e:74:73:e4:f9:d4:cf: e1:69:99:a1:4a:4e:2b:19:81:0a:48:3b:5c:97:cb:73:a7:64: b2:1e:76:1f:cd:b5:f6:41:12:04:55:64:9c:eb:5a:7a:6a:7f: 24:08:04:7b:c2:25:d6:f7:24:b4:51:69:ec:ef:d3:dd:1f:04: 8b:f4:f7:2a:a2:1a:6f:6a:38:41:3f:08:6f:e2:02:48:89:d1: 3a:69:22:51:7f:31:57:43:f5:d8:5d:50:18:5f:41:b2:e9:d5: 88:c1:81:d2:6a:0d:c0:ab:98:c7:4f:99:c1:2d:77:5b:bd:14: 83:32:29:8a:bf:01:e7:83:13:d2:88:cd:8f:f3:fd:ac:90:e1: 4d:32:0b:d8:f1:95:41:38:e5:b3:dd:80:99:64:f9:a3:b5:aa: 4b:c8:68:dc:c8:90:83:76:30:e2:1e:0d:ab:23:57:f1:a4:82: 93:70:3b:a6:ce:19:ba:f3:4f:86:ee:f9:45:60:74:63:8f:c5: 24:3d:7e:02:11:65:a9:fd:e0:70:1a:6d:9d:b4:df:f9:1c:55: 7b:34:ac:47:8d:32:5a:f7:38:8f:57:e2:01:25:c2:17:fe:43: 0d:99:3c:01:a4:cf:a9:1c:b2:f7:17:e0:1e:de:b0:97:0c:05: 0a:84:58:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvwgHtbujGRGTvdWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFhZmY1ZDctY2NlMy00ZDg2LThjMWEtNmY4ODZiZjZk ZjA2MB4XDTI1MTEyMjAyMDAzMFoXDTI2MDIyMDAyMDAzMFowLzEtMCsGA1UEAxMk MGRlY2NjNjEtMDBmNC00OWIxLWJhMGItYjYwMDM3ZGRjYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/wpd5sGpDWknNOaGgKR8dcBWxAOKGBs2quF V+9aTSaGuvUX5d4smCab5umYEHtqCyYRUaSKtsd17TvTY5aLrQO6x9PrFgjKKLNb gfsCTg5mSt3lNYI4CdADje6x3UINQHdkpp55i01F13M6WOAcoquBTdNN3l9kX+I5 ohOzWyw6oQQJYLmdiOX2/Yxi7lwe72RbZAcbT0+yZkdC1VtcUzA2ySdui0+KPakc ueODohS/jYEb+3b321sr7fdTo3X6dbwLNtCN6WK/RJPebNr6fsLgXDQ7AVabUVRY agxFY9AhG9t/7AqJg9Fb+fxEcj6Nu8YoTUqI3pTI3luSH63fywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgsO08rW6g6JpGdzw1oakSWoAtQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFm ZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4NmJmNmRmMDYvZDdjYjAwOGEtNjlkOS0z MzM1LTk2NGUtNGQxM2M2ZTZmOWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWFhZmY1ZDctY2NlMy00ZDg2LThj MWEtNmY4ODZiZjZkZjA2LzFhYWZmNWQ3LWNjZTMtNGQ4Ni04YzFhLTZmODg2YmY2 ZGYwNi5jcmwwHwYDVR0jBBgwFoAUFqMBO7VfB+pI9pfyRvlsxTUqaxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYWFmZjVkNy1jY2UzLTRkODYtOGMxYS02Zjg4 NmJmNmRmMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3yqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKF/4vhPa0W/DVXDnRz5PnUz+FpmaFKTisZgQpIO1yXy3OnZLIedh/N tfZBEgRVZJzrWnpqfyQIBHvCJdb3JLRRaezv090fBIv09yqiGm9qOEE/CG/iAkiJ 0TppIlF/MVdD9dhdUBhfQbLp1YjBgdJqDcCrmMdPmcEtd1u9FIMyKYq/AeeDE9KI zY/z/ayQ4U0yC9jxlUE45bPdgJlk+aO1qkvIaNzIkIN2MOIeDasjV/GkgpNwO6bO GbrzT4bu+UVgdGOPxSQ9fgIRZan94HAabZ203/kcVXs0rEeNMlr3OI9X4gElwhf+ Qw2ZPAGkz6kcsvcX4B7esJcMBQqEWC4= -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:39 2025 by rpki-client