This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/651fe16b-339d-3318-ba58-ee4cace1b054.roa File: 651fe16b-339d-3318-ba58-ee4cace1b054.roa (raw, json) Hash identifier: F2FsGlGo1Uh4lKuKZwnzLiGp6a7u+49fw77SESwRIIw= Subject key identifier: 99:D5:B1:C2:16:87:A0:E5:B7:40:1E:35:C3:17:92:0C:9D:85:21:C9 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C42DBC1ECF6A1E7C2BE40B210 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/651fe16b-339d-3318-ba58-ee4cace1b054.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 12041 IP address blocks: 199.249.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:c1:ec:f6:a1:e7:c2:be:40:b2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=591cfd33-5147-4e2d-af7f-0fa4f4c00114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:80:d6:d4:76:dd:db:ac:83:5a:6f:0f:e1:a4: 26:73:b4:8b:b0:40:28:d8:e4:67:82:4e:ca:4a:e4: b5:19:50:6f:7d:28:af:39:3b:20:9e:9c:f8:80:c5: 5e:9e:0c:c8:47:83:91:a9:06:2e:7b:d2:e3:d6:84: 70:73:33:81:21:1d:19:42:ef:4a:f9:76:d6:cc:df: 80:67:7f:41:ba:b1:af:9a:40:9e:01:9b:f3:d2:86: 11:ef:67:eb:b3:6b:9c:88:ab:f6:75:56:a1:b7:f4: be:cd:92:a0:0d:b4:83:ca:70:79:e5:68:13:64:52: ed:1b:fe:b4:8b:21:c1:34:a1:7c:b1:88:ed:3c:1a: 3f:d5:44:66:99:5b:9e:6a:53:4f:b2:0e:51:8b:45: 45:35:77:d1:33:86:92:1a:49:3d:0b:33:d6:8f:8d: b8:a8:96:9b:f7:ed:fe:57:93:65:48:7e:50:35:ab: e8:93:65:f3:0f:82:75:92:99:d0:a6:15:02:38:3b: 48:1c:57:52:52:ed:76:9f:b4:75:18:4a:46:b5:45: a6:0f:25:1f:9b:85:04:98:77:e6:49:26:96:37:3e: dd:7e:7c:fc:0b:4f:da:78:af:e5:fa:dc:8b:26:23: 19:8e:33:d9:4a:44:ec:30:40:63:a9:cd:4b:23:2a: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D5:B1:C2:16:87:A0:E5:B7:40:1E:35:C3:17:92:0C:9D:85:21:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/651fe16b-339d-3318-ba58-ee4cace1b054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5a:01:13:8f:b1:ec:1e:f9:1b:84:49:72:fa:46:65:30:ac: 34:9e:62:ea:8b:45:fb:68:2c:66:60:1f:16:c9:70:56:2d:72: 95:70:b3:36:1a:6a:b5:e3:d9:21:2f:13:12:87:4d:a6:a5:fa: fc:a6:7f:35:9a:20:5a:55:9a:05:8f:23:cd:64:77:f0:5b:60: dc:5b:a4:34:f1:c9:48:9d:31:0e:5d:88:17:4a:15:03:70:38: f4:63:b2:75:14:79:16:94:31:8b:c0:86:1f:d6:82:76:d3:59: c9:d8:a0:37:28:14:a4:31:01:5a:74:ae:96:28:b4:53:14:75: 37:82:78:86:12:5c:6b:1e:3e:97:01:94:cb:67:e4:a1:51:91: 20:39:7d:50:19:18:c9:7f:3c:df:26:20:d7:07:09:29:e8:2d: a0:74:64:69:bb:a0:02:08:a3:d7:dc:8a:58:91:30:5c:6b:e7: c0:2a:ac:83:76:e5:7d:b5:4a:54:73:0f:71:d4:d5:42:a0:f1: 75:7f:c1:23:39:84:93:2e:15:f3:ad:5f:d2:25:d3:4d:06:a1: 25:3c:39:4c:39:c1:c7:69:8e:cc:15:21:34:88:e9:d7:37:9e: 79:87:4e:e6:11:4e:56:02:b8:a7:6a:01:2f:63:43:24:85:f3: 88:35:cd:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC28Hs9qHnwr5AshAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NTkxY2ZkMzMtNTE0Ny00ZTJkLWFmN2YtMGZhNGY0YzAwMTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64DW1Hbd26yDWm8P4aQmc7SLsEAo2ORngk7K SuS1GVBvfSivOTsgnpz4gMVengzIR4ORqQYue9Lj1oRwczOBIR0ZQu9K+XbWzN+A Z39BurGvmkCeAZvz0oYR72frs2uciKv2dVaht/S+zZKgDbSDynB55WgTZFLtG/60 iyHBNKF8sYjtPBo/1URmmVuealNPsg5Ri0VFNXfRM4aSGkk9CzPWj424qJab9+3+ V5NlSH5QNavok2XzD4J1kpnQphUCODtIHFdSUu12n7R1GEpGtUWmDyUfm4UEmHfm SSaWNz7dfnz8C0/aeK/l+tyLJiMZjjPZSkTsMEBjqc1LIyq0IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnVscIWh6Dlt0AeNcMXkgydhSHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjUxZmUxNmItMzM5ZC0z MzE4LWJhNTgtZWU0Y2FjZTFiMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpaAROPsewe+RuESXL6RmUwrDSeYuqLRftoLGZgHxbJcFYtcpVwszYa arXj2SEvExKHTaal+vymfzWaIFpVmgWPI81kd/BbYNxbpDTxyUidMQ5diBdKFQNw OPRjsnUUeRaUMYvAhh/WgnbTWcnYoDcoFKQxAVp0rpYotFMUdTeCeIYSXGsePpcB lMtn5KFRkSA5fVAZGMl/PN8mINcHCSnoLaB0ZGm7oAIIo9fciliRMFxr58AqrIN2 5X21SlRzD3HU1UKg8XV/wSM5hJMuFfOtX9Il000GoSU8OUw5wcdpjswVITSI6dc3 nnmHTuYRTlYCuKdqAS9jQySF84g1zZQ= -----END CERTIFICATE-----Generated at Sun Jan 25 17:10:56 2026 by rpki-client