This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/81bb65a3-069f-3f93-a8c2-2b32b151491a.roa File: 81bb65a3-069f-3f93-a8c2-2b32b151491a.roa (raw, json) Hash identifier: Jo++nCjLKvW+QL4/j1GnThHHPR21B4+q2ORzrw4qbvE= Subject key identifier: 64:58:18:99:D6:3D:52:F0:B6:A5:D6:60:BD:EB:DF:87:BD:62:E9:6D Certificate issuer: /CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23 Certificate serial: 010D0C9F4328584BF1E5ECCDD4A87580E1864CE0 Authority key identifier: FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/81bb65a3-069f-3f93-a8c2-2b32b151491a.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 14618 IP address blocks: 148.59.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:ec:cd:d4:a8:75:80:e1:86:4c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce3c22e-2449-4367-bcc9-96ec877f3e23 Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=625a7d76-4360-4608-bba2-7375e4abfd06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:f4:28:bc:70:63:9f:9a:6f:df:97:2c:5c: 27:16:fc:6b:db:0a:89:2b:63:09:99:5d:79:fc:ed: f7:c4:7c:9e:5a:ec:40:1d:33:91:ff:30:79:08:5e: ff:37:12:72:0e:8d:4b:86:ac:3a:6d:0d:17:98:fc: 85:8f:bf:f3:61:7e:ed:43:82:fe:9f:95:3e:d5:fc: f1:4f:eb:e0:49:51:fa:5b:39:eb:b6:6d:19:70:36: c7:2e:f3:2d:fd:f4:d5:e2:dd:9f:b4:08:37:e5:4a: 0a:89:a7:6d:ab:a7:32:4a:05:3f:19:1e:7a:87:f8: 1b:88:5b:7a:9f:67:4e:d9:40:e9:aa:9f:17:f0:49: ed:1f:78:14:c4:a3:13:65:07:3e:6a:1f:84:b6:33: 75:ac:19:2f:97:74:a9:c4:90:7b:de:af:de:ff:c8: 93:77:d5:8b:78:d7:ad:fb:6b:51:79:e8:21:c0:78: 5c:0b:16:a4:b5:11:23:ce:24:75:bd:07:01:ee:d2: 02:2f:f3:ce:de:60:8f:a2:25:3c:dd:8c:40:64:62: 80:20:ef:0f:59:5d:95:a4:9d:a4:a9:6a:41:ba:a2: 0e:1b:c6:a3:d9:f9:3c:f6:f9:40:b3:d1:be:f5:69: 98:b4:61:37:e2:b2:0d:2d:cc:52:40:f5:cf:74:86: 83:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:58:18:99:D6:3D:52:F0:B6:A5:D6:60:BD:EB:DF:87:BD:62:E9:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/81bb65a3-069f-3f93-a8c2-2b32b151491a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23/4ce3c22e-2449-4367-bcc9-96ec877f3e23.crl X509v3 Authority Key Identifier: keyid:FA:5F:B7:2E:8E:85:81:CF:9B:DD:C7:DD:A2:E0:4C:7D:C4:10:8A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ce3c22e-2449-4367-bcc9-96ec877f3e23.cer sbgp-ipAddrBlock: critical IPv4: 148.59.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:89:76:ef:de:6f:e9:e2:17:76:93:e9:40:10:74:9e:e1:34: f6:90:2a:82:29:a5:a4:22:d2:d2:6b:63:5c:4e:ac:96:13:f9: db:a7:9f:5e:d9:43:59:28:38:87:f3:24:21:80:28:75:5e:ea: 0b:ac:f9:af:2f:47:e2:9d:4a:b0:a7:58:85:48:b5:49:40:de: 80:6f:25:8c:d7:0e:15:16:5b:76:26:ab:2b:26:23:4c:43:c6: 7d:94:6c:03:64:7c:04:24:11:33:d7:a0:6c:36:a1:b9:24:33: b4:23:ac:b5:ba:14:b6:dd:99:92:da:a1:38:28:3f:8b:89:4a: ab:10:9d:14:80:f1:59:e0:ae:18:e9:49:61:e6:af:09:32:a8: 47:4c:a0:3c:69:74:44:46:17:55:6c:27:c3:4e:d4:94:ca:aa: 11:c0:7b:bd:5c:98:da:4f:62:b2:93:d3:5c:a4:31:dd:b9:9c: c3:b5:af:1c:a0:ae:39:2f:c5:dc:6d:cb:69:e6:9b:77:dd:db: cb:7b:42:56:7d:56:e1:f0:e6:a8:18:74:e0:48:23:a0:be:99: b7:b4:52:3d:a6:1d:18:db:d9:54:9c:6b:96:f1:9f:53:9c:ec: b6:7b:5e:65:9f:27:83:2a:fa:e7:14:82:99:49:c5:ed:77:c4: b0:2d:20:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvx5ezN1Kh1gOGGTOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNlM2MyMmUtMjQ0OS00MzY3LWJjYzktOTZlYzg3N2Yz ZTIzMB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk NjI1YTdkNzYtNDM2MC00NjA4LWJiYTItNzM3NWU0YWJmZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7/0KLxwY5+ab9+XLFwnFvxr2wqJK2MJmV15 /O33xHyeWuxAHTOR/zB5CF7/NxJyDo1Lhqw6bQ0XmPyFj7/zYX7tQ4L+n5U+1fzx T+vgSVH6Wznrtm0ZcDbHLvMt/fTV4t2ftAg35UoKiadtq6cySgU/GR56h/gbiFt6 n2dO2UDpqp8X8EntH3gUxKMTZQc+ah+EtjN1rBkvl3SpxJB73q/e/8iTd9WLeNet +2tReeghwHhcCxaktREjziR1vQcB7tICL/PO3mCPoiU83YxAZGKAIO8PWV2VpJ2k qWpBuqIOG8aj2fk89vlAs9G+9WmYtGE34rINLcxSQPXPdIaDYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRYGJnWPVLwtqXWYL3r34e9YultMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80Y2Uz YzIyZS0yNDQ5LTQzNjctYmNjOS05NmVjODc3ZjNlMjMvODFiYjY1YTMtMDY5Zi0z ZjkzLWE4YzItMmIzMmIxNTE0OTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGNlM2MyMmUtMjQ0OS00MzY3LWJj YzktOTZlYzg3N2YzZTIzLzRjZTNjMjJlLTI0NDktNDM2Ny1iY2M5LTk2ZWM4Nzdm M2UyMy5jcmwwHwYDVR0jBBgwFoAU+l+3Lo6Fgc+b3cfdouBMfcQQirowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80Y2UzYzIyZS0yNDQ5LTQzNjctYmNjOS05NmVj ODc3ZjNlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDurMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2Jdu/eb+niF3aT6UAQdJ7hNPaQKoIppaQi0tJrY1xOrJYT+dunn17Z Q1koOIfzJCGAKHVe6gus+a8vR+KdSrCnWIVItUlA3oBvJYzXDhUWW3YmqysmI0xD xn2UbANkfAQkETPXoGw2obkkM7QjrLW6FLbdmZLaoTgoP4uJSqsQnRSA8Vngrhjp SWHmrwkyqEdMoDxpdERGF1VsJ8NO1JTKqhHAe71cmNpPYrKT01ykMd25nMO1rxyg rjkvxdxty2nmm3fd28t7QlZ9VuHw5qgYdOBII6C+mbe0Uj2mHRjb2VSca5bxn1Oc 7LZ7XmWfJ4Mq+ucUgplJxe13xLAtIMY= -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:56 2025 by rpki-client