This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa File: a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa (raw, json) Hash identifier: TEh6G33e5YLINs9laWt3iGbzvwxq3qnqM7cycdhnErA= Subject key identifier: 13:1C:55:CB:5F:CC:AA:E5:A0:0A:81:2F:25:EA:DE:01:2A:FC:E6:51 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584BC53B37FAD7491DDE2E011800 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 63293 IP address blocks: 157.240.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:37:fa:d7:49:1d:de:2e:01:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=98facab5-a4d7-4eb0-9b7c-acd6c0c467d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b6:dc:18:ca:82:da:b9:a9:29:70:81:ee:3d: e2:98:f4:1c:0d:67:e2:fd:a4:ae:52:ba:6b:29:1c: d7:57:14:00:98:78:83:dc:52:14:e5:fa:71:bd:73: 0f:2c:f0:37:c0:0f:72:01:24:99:65:d2:f1:e7:38: 11:48:66:d8:b6:a9:cb:3c:46:7a:82:89:c9:8f:90: 6b:f1:2c:62:f2:ba:04:d6:12:0d:1e:72:e0:01:a6: ea:9c:a2:d8:1c:23:8a:c2:b6:87:a0:c7:f1:a0:cd: 20:52:7d:55:56:34:4d:8e:6a:d7:fd:5f:0b:0e:b9: d1:24:d6:3d:64:48:ec:22:23:12:79:b4:b4:27:37: c0:83:b0:cb:29:09:d9:c4:e0:36:4c:5e:70:24:9a: af:14:74:96:7e:80:ac:c9:7d:81:80:a1:72:ca:c7: 17:69:68:8e:84:e6:91:e9:97:a6:bf:12:c2:e4:1f: 29:0b:24:9f:7a:b3:39:7e:b7:26:7d:2f:9f:2a:92: 5d:98:12:d6:e5:46:04:6d:15:14:52:15:eb:1d:09: 2e:83:cc:a0:49:92:88:e8:7b:33:cb:9d:4b:6a:cd: fa:98:9a:fd:3e:67:af:71:83:c9:99:1d:d9:de:2c: 49:68:3a:0f:f3:de:0e:7f:16:3e:b1:71:53:72:fd: 00:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1C:55:CB:5F:CC:AA:E5:A0:0A:81:2F:25:EA:DE:01:2A:FC:E6:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/a2cb31dc-d379-3c6b-b2a3-24605c2a4827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 157.240.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e1:85:1a:cd:b6:59:13:72:63:3b:e5:b9:12:ca:48:fc:65: fd:f7:6f:91:34:ad:73:14:5a:62:18:4d:95:55:f7:ce:6a:5c: d1:bd:52:5a:9c:e5:da:d6:91:1b:3c:cc:ce:71:a8:64:f7:ed: 77:4a:4e:64:af:c5:44:3b:69:e2:cc:aa:e8:64:11:2f:ac:6a: e6:51:3a:af:19:12:72:c9:7d:d9:b6:65:0f:53:84:ff:18:be: e5:d6:15:2d:28:19:e9:2d:08:5e:73:47:1e:42:fc:4e:ee:c1: f7:e5:82:72:fd:bb:ff:b7:19:32:4f:77:c2:fc:bf:a2:54:95: 6e:ee:fa:75:b5:a5:a8:9c:ec:1b:0d:27:1a:4e:2c:55:75:e6: 7e:da:e8:f3:d1:24:64:cd:fc:45:a0:d3:42:28:00:47:7a:e5: 83:25:aa:07:87:5e:ea:27:c1:ee:55:77:b9:1b:e6:88:a7:5c: 0e:57:3d:10:5c:f8:65:8c:3a:d3:1e:f9:fc:03:fe:24:a8:6a: 45:d0:22:25:52:af:aa:59:79:94:8c:70:34:5a:4c:c9:47:35: 89:be:2e:e5:2b:e9:6b:25:be:35:a9:a8:4b:ed:eb:17:a7:c9: 3f:b9:e1:fe:33:01:f3:11:c0:30:dc:90:1b:33:ed:dd:78:c8: 3c:1b:f2:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOzf610kd3i4BGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk OThmYWNhYjUtYTRkNy00ZWIwLTliN2MtYWNkNmMwYzQ2N2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7bcGMqC2rmpKXCB7j3imPQcDWfi/aSuUrpr KRzXVxQAmHiD3FIU5fpxvXMPLPA3wA9yASSZZdLx5zgRSGbYtqnLPEZ6gonJj5Br 8Sxi8roE1hINHnLgAabqnKLYHCOKwraHoMfxoM0gUn1VVjRNjmrX/V8LDrnRJNY9 ZEjsIiMSebS0JzfAg7DLKQnZxOA2TF5wJJqvFHSWfoCsyX2BgKFyyscXaWiOhOaR 6ZemvxLC5B8pCySferM5frcmfS+fKpJdmBLW5UYEbRUUUhXrHQkug8ygSZKI6Hsz y51Las36mJr9PmevcYPJmR3Z3ixJaDoP894OfxY+sXFTcv0AfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMcVctfzKrloAqBLyXq3gEq/OZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvYTJjYjMxZGMtZDM3OS0z YzZiLWIyYTMtMjQ2MDVjMmE0ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfhhRrNtlkTcmM75bkSykj8Zf33b5E0rXMUWmIYTZVV985qXNG9Ulqc 5drWkRs8zM5xqGT37XdKTmSvxUQ7aeLMquhkES+sauZROq8ZEnLJfdm2ZQ9ThP8Y vuXWFS0oGektCF5zRx5C/E7uwfflgnL9u/+3GTJPd8L8v6JUlW7u+nW1paic7BsN JxpOLFV15n7a6PPRJGTN/EWg00IoAEd65YMlqgeHXuonwe5Vd7kb5oinXA5XPRBc +GWMOtMe+fwD/iSoakXQIiVSr6pZeZSMcDRaTMlHNYm+LuUr6WslvjWpqEvt6xen yT+54f4zAfMRwDDckBsz7d14yDwb8sc= -----END CERTIFICATE-----Generated at Sat Dec 6 15:52:26 2025 by rpki-client