This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa File: aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa (raw, json) Hash identifier: jI2Ksz9/Qlfuv+Z7nFec2YCUHJ2MBP3aNN2gQnaDmuU= Subject key identifier: 91:6D:17:FD:65:A3:B4:F0:7F:94:E0:65:57:AA:05:7F:77:CB:A3:26 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584BEC50B7C172C2081D15790D60 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 30387 IP address blocks: 156.40.53.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:b7:c1:72:c2:08:1d:15:79:0d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=3d9bfa80-a544-4a56-95b4-726c565d86d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:33:c1:a3:59:60:5c:71:b3:4a:99:ad:2a: d3:3e:1d:a1:a0:6d:bd:e7:2a:e9:61:90:ee:47:7a: 15:4b:42:f9:38:82:56:06:07:a5:f4:fd:c9:88:8f: eb:f5:1a:34:fe:b6:ee:3b:61:d7:94:22:a1:57:a5: 38:05:e4:17:25:76:7c:a1:25:c6:d2:b2:5f:5c:00: 65:a6:28:23:d3:c8:62:d8:6f:27:26:48:06:c2:ca: 25:d2:a6:6e:b2:43:4f:02:8a:95:a9:89:92:f7:e6: 9c:b2:74:cb:56:2f:a9:fc:47:e7:34:59:d7:59:2d: 3e:4d:0a:e8:e6:9b:92:5d:d6:53:ee:40:b8:4d:c3: 6d:35:bc:f3:5a:de:7a:ec:fd:42:3f:f7:4d:aa:6a: 32:17:91:8a:f6:03:b5:5f:20:6f:a3:7f:33:c1:27: 52:8c:a5:3a:a3:2f:3f:ed:42:95:50:33:cd:27:a3: 1e:69:21:3f:a4:d3:70:52:fe:76:2f:c6:7f:3d:f9: a3:cd:0c:e3:7c:47:f6:8d:f3:81:28:d8:e7:cb:90: 5a:1e:a1:fa:1e:fd:ce:a7:93:0d:94:c4:b7:6b:62: 5c:92:00:16:c1:26:23:e9:e2:a4:26:e1:f1:97:f5: 14:4c:dc:79:0d:91:25:ce:12:7b:65:fa:c9:28:04: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6D:17:FD:65:A3:B4:F0:7F:94:E0:65:57:AA:05:7F:77:CB:A3:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 156.40.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:36:14:2b:dd:78:dc:ec:95:3e:8f:60:ad:54:a0:4a:f0:8f: f2:e3:c1:5c:86:a2:a8:af:3e:24:e3:9e:91:dc:d2:b1:4c:3b: f0:7a:7f:15:6b:91:bd:76:c3:1b:35:78:6e:ec:25:82:99:d3: 38:b4:01:75:8a:77:f3:87:2d:f9:e8:e0:1c:a5:a5:77:ed:3a: 15:93:ca:09:44:06:d7:5b:e6:c3:7d:59:2f:08:bd:64:40:c4: 72:1c:48:ce:5c:78:2f:a9:b7:f7:18:4f:91:0c:69:30:47:11: b4:7c:2e:e2:14:1b:dc:9f:1a:b5:66:94:13:0d:ac:a4:37:32: d5:37:ff:82:ae:2f:54:02:cb:12:bc:94:c6:53:bd:b0:6d:2d: 01:1e:37:5f:60:ea:7a:fd:5b:a9:3c:17:c7:be:0f:f0:e1:96: 19:80:b1:a4:fb:51:04:94:19:57:ba:fd:f5:ad:e0:e8:f6:fe: 80:b4:d6:cb:9b:ec:0c:c8:0a:64:e4:0b:59:e9:bb:8f:b4:c3: 20:76:06:60:86:c5:ae:7f:26:62:24:97:79:20:38:01:5e:56: 2e:9d:a2:4a:94:42:a5:c4:b4:16:83:3e:04:52:4a:85:8f:8b: d3:66:a2:41:86:f1:6d:c1:bb:45:68:e1:b4:cf:33:83:0e:b0: a2:c3:5c:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsULfBcsIIHRV5DWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk M2Q5YmZhODAtYTU0NC00YTU2LTk1YjQtNzI2YzU2NWQ4NmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPAzwaNZYFxxs0qZrSrTPh2hoG295yrpYZDu R3oVS0L5OIJWBgel9P3JiI/r9Ro0/rbuO2HXlCKhV6U4BeQXJXZ8oSXG0rJfXABl pigj08hi2G8nJkgGwsol0qZuskNPAoqVqYmS9+acsnTLVi+p/EfnNFnXWS0+TQro 5puSXdZT7kC4TcNtNbzzWt567P1CP/dNqmoyF5GK9gO1XyBvo38zwSdSjKU6oy8/ 7UKVUDPNJ6MeaSE/pNNwUv52L8Z/PfmjzQzjfEf2jfOBKNjny5BaHqH6Hv3Op5MN lMS3a2JckgAWwSYj6eKkJuHxl/UUTNx5DZElzhJ7ZfrJKAQ1TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFtF/1lo7Twf5TgZVeqBX93y6MmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYWVhMmVjYjEtMjQyYS0z NGEwLWEwZDItNzI0MGNhMzhhZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnCg1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJw2FCvdeNzslT6PYK1UoErwj/LjwVyGoqivPiTjnpHc0rFMO/B6fxVr kb12wxs1eG7sJYKZ0zi0AXWKd/OHLfno4BylpXftOhWTyglEBtdb5sN9WS8IvWRA xHIcSM5ceC+pt/cYT5EMaTBHEbR8LuIUG9yfGrVmlBMNrKQ3MtU3/4KuL1QCyxK8 lMZTvbBtLQEeN19g6nr9W6k8F8e+D/DhlhmAsaT7UQSUGVe6/fWt4Oj2/oC01sub 7AzICmTkC1npu4+0wyB2BmCGxa5/JmIkl3kgOAFeVi6dokqUQqXEtBaDPgRSSoWP i9NmokGG8W3Bu0Vo4bTPM4MOsKLDXFo= -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:14 2025 by rpki-client