This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa File: 3855a988-062b-3485-808c-4e1a37cecf3f.roa (raw, json) Hash identifier: 97fyQLg8Y+z51y53LV+AJVDNUxKYvOvERC4JdOG0OX4= Subject key identifier: BA:67:59:CA:37:7C:05:72:87:4B:52:81:81:53:EF:B9:FA:C5:C8:E1 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584BEF1B32CB6793E69FB3FA9C40 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 11377 IP address blocks: 149.72.1.0/24 maxlen: 24 149.72.4.0/22 maxlen: 22 149.72.8.0/22 maxlen: 22 149.72.12.0/22 maxlen: 22 149.72.19.0/24 maxlen: 24 149.72.20.0/22 maxlen: 22 149.72.24.0/21 maxlen: 21 149.72.32.0/19 maxlen: 19 149.72.64.0/19 maxlen: 19 167.89.0.0/18 maxlen: 18 167.89.64.0/19 maxlen: 19 167.89.96.0/20 maxlen: 20 167.89.112.0/24 maxlen: 24 167.89.114.0/23 maxlen: 23 167.89.116.0/24 maxlen: 24 167.89.117.0/24 maxlen: 24 167.89.118.0/24 maxlen: 24 167.89.119.0/24 maxlen: 24 167.89.120.0/23 maxlen: 23 167.89.122.0/23 maxlen: 23 167.89.124.0/23 maxlen: 23 167.89.126.0/23 maxlen: 23 168.245.0.0/18 maxlen: 18 168.245.64.0/20 maxlen: 20 168.245.80.0/22 maxlen: 22 168.245.84.0/22 maxlen: 22 168.245.88.0/22 maxlen: 22 168.245.92.0/22 maxlen: 22 168.245.96.0/19 maxlen: 19 192.254.112.0/20 maxlen: 20 198.21.0.0/21 maxlen: 21 198.37.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:32:cb:67:93:e6:9f:b3:fa:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=409bdb00-0d67-4160-b9c8-07916f6b9e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a9:02:a3:c3:a3:74:0d:d2:c5:06:04:48:04: dd:c7:92:55:2b:e5:dc:fe:ca:8c:75:40:10:35:61: ec:87:cc:81:a4:5f:9d:f7:56:f5:24:b7:de:f2:03: 1d:c8:d7:cd:ab:a1:83:49:a8:b4:0c:ca:4a:d9:ad: 15:5b:5d:4a:21:b9:6d:4a:f2:29:ca:ac:ff:81:e7: a6:fa:87:8b:53:e2:3c:81:b3:9c:dd:c3:e3:3f:c8: f9:84:f8:02:67:bf:08:72:1e:d5:df:34:c1:e5:09: 28:49:24:7e:4a:8f:d2:2e:de:4a:e8:5b:7a:72:8c: 23:20:bb:d2:3d:d0:7d:f9:f7:13:70:ce:5b:54:a6: 44:91:69:d8:3d:f4:be:6d:a4:64:e4:91:ec:31:3e: b7:b5:be:5a:d7:8e:fc:96:48:4e:07:d7:02:96:94: 03:62:24:6a:c4:42:05:6e:ee:08:0f:ff:a2:34:6b: 5b:44:b6:6a:91:e2:8b:30:f0:47:f3:4a:fc:44:d8: 1a:6d:cb:d1:ac:5e:e3:2c:b2:21:22:1c:35:3b:4c: ee:34:c4:dd:2f:8c:59:ce:26:8a:ac:6f:0a:9c:37: 0b:fe:9b:9f:c0:39:84:d2:88:60:5e:75:fd:7b:36: bb:a6:72:b1:4a:c8:d9:b8:27:5b:7e:44:a7:90:fd: e0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:67:59:CA:37:7C:05:72:87:4B:52:81:81:53:EF:B9:FA:C5:C8:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.1.0/24 149.72.4.0-149.72.15.255 149.72.19.0-149.72.95.255 167.89.0.0-167.89.112.255 167.89.114.0-167.89.127.255 168.245.0.0/17 192.254.112.0/20 198.21.0.0/21 198.37.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:56:76:da:86:d8:e4:33:f7:81:cf:9a:9c:da:d4:9b:ba:43: b8:9b:86:d0:58:30:4b:e2:d2:a9:05:db:05:74:56:37:e1:d8: c0:27:fd:c3:5a:16:4c:7a:82:37:73:b1:4e:53:ee:14:34:60: f1:75:26:4d:9e:7b:b1:08:d4:ee:f6:94:02:1e:58:68:fa:cf: 8a:71:95:e0:00:8e:49:53:e1:c5:cd:c3:92:3b:e5:1f:ef:61: 0e:4c:34:52:eb:c0:f3:aa:3c:ba:64:27:70:09:a4:ba:08:f1: d0:96:b1:d1:14:cb:5d:e0:43:65:ce:ab:51:df:6e:c9:7b:36: 04:69:5a:9f:5f:99:f6:32:d8:52:f3:a5:08:5c:2d:7a:f3:82: 16:57:fc:8d:a0:f9:4e:24:1c:58:89:47:1b:8d:b2:8e:15:03: 13:6c:87:44:48:05:88:d2:d0:3f:77:34:36:2c:78:6f:84:5b: 1d:28:f6:f9:78:51:f2:55:73:4b:5f:2d:c7:e4:14:1a:d1:67: 3f:d1:bd:0c:a7:70:ee:af:a9:bf:04:29:15:5d:a3:74:16:7e: 00:a6:ef:81:c5:b6:b3:f9:5b:d4:f4:04:1a:04:e1:13:be:ea: b4:14:7a:f3:8a:d3:5f:d7:6d:42:f7:b0:d8:7e:fa:2a:5c:0c: ff:a1:22:d6 -----BEGIN CERTIFICATE----- MIIGkjCCBXqgAwIBAgIUAQ0Mn0MoWEvvGzLLZ5Pmn7P6nEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk NDA5YmRiMDAtMGQ2Ny00MTYwLWI5YzgtMDc5MTZmNmI5ZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKkCo8OjdA3SxQYESATdx5JVK+Xc/sqMdUAQ NWHsh8yBpF+d91b1JLfe8gMdyNfNq6GDSai0DMpK2a0VW11KIbltSvIpyqz/geem +oeLU+I8gbOc3cPjP8j5hPgCZ78Ich7V3zTB5QkoSSR+So/SLt5K6Ft6cowjILvS PdB9+fcTcM5bVKZEkWnYPfS+baRk5JHsMT63tb5a1478lkhOB9cClpQDYiRqxEIF bu4ID/+iNGtbRLZqkeKLMPBH80r8RNgabcvRrF7jLLIhIhw1O0zuNMTdL4xZziaK rG8KnDcL/pufwDmE0ohgXnX9eza7pnKxSsjZuCdbfkSnkP3gNwIDAQABo4IDpDCC A6AwHQYDVR0OBBYEFLpnWco3fAVyh0tSgYFT77n6xcjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvMzg1NWE5ODgtMDYyYi0z NDg1LTgwOGMtNGUxYTM3Y2VjZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMG4GCCsGAQUFBwEHAQH/BF8wXTBbBAIAATBVAwQAlUgBMAwD BAKVSAQDBASVSAAwDAMEAJVIEwMEBZVIQDALAwMAp1kDBACnWXAwDAMEAadZcgME B6dZAAMEB6j1AAMEBMD+cAMEA8YVAAMEBMYlkDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABVnbahtjkM/eB z5qc2tSbukO4m4bQWDBL4tKpBdsFdFY34djAJ/3DWhZMeoI3c7FOU+4UNGDxdSZN nnuxCNTu9pQCHlho+s+KcZXgAI5JU+HFzcOSO+Uf72EOTDRS68Dzqjy6ZCdwCaS6 CPHQlrHRFMtd4ENlzqtR327JezYEaVqfX5n2MthS86UIXC1684IWV/yNoPlOJBxY iUcbjbKOFQMTbIdESAWI0tA/dzQ2LHhvhFsdKPb5eFHyVXNLXy3H5BQa0Wc/0b0M p3Dur6m/BCkVXaN0Fn4Apu+Bxbaz+VvU9AQaBOETvuq0FHrzitNf121C97DYfvoq XAz/oSLW -----END CERTIFICATE-----Generated at Sat Dec 6 21:35:43 2025 by rpki-client