This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa File: ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa (raw, json) Hash identifier: hYeDTcLv19kT8wxarrw4U7yJ8MEp/PS8I/CLpB325Kg= Subject key identifier: 43:4B:95:F0:A9:3A:55:11:3C:46:3D:97:90:3C:05:3B:4C:CA:D8:98 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F4328584C4B3BD4480B74FD6CB3A9D870 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa Signing time: Wed 24 Dec 2025 14:00:40 +0000 ROA not before: Wed 24 Dec 2025 14:00:40 +0000 ROA not after: Tue 24 Mar 2026 13:00:40 +0000 asID: 14618 IP address blocks: 149.72.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:3b:d4:48:0b:74:fd:6c:b3:a9:d8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Dec 24 14:00:40 2025 GMT Not After : Mar 24 13:00:40 2026 GMT Subject: CN=ce1f5fe2-557f-4edc-85e5-3ee263c8cfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:31:fe:75:f6:ce:91:b7:7a:88:5a:a3:ef:1e: 96:64:c2:ef:e9:78:0e:80:36:4d:65:13:15:43:d5: e6:c5:f3:41:b4:8f:ad:8c:0d:ec:13:e3:49:bf:4b: ef:43:61:75:d9:d2:bc:5c:74:59:10:ab:2a:8f:cd: ed:a7:34:05:39:8f:c0:eb:fb:58:31:74:91:21:97: ca:35:2d:0f:92:a7:ab:23:ea:3f:be:4d:01:62:ae: 4b:f4:e5:03:d8:98:e8:8f:e2:bc:fb:3c:b0:fe:b0: 38:0a:6a:19:51:f8:ac:a9:a4:d6:0b:87:51:2c:42: 30:07:25:e7:71:c3:05:99:12:ce:ef:4f:da:f2:23: 40:5a:e4:91:15:a8:7c:0c:fb:fe:7b:fd:44:fa:12: d3:f2:f0:1b:15:49:d3:55:fd:b6:00:23:9e:d0:98: f5:e6:16:b0:f1:ce:b8:a9:b0:55:da:04:09:81:75: 94:69:d6:3a:1c:82:94:f0:97:b3:d8:0e:a1:d2:b9: 3d:53:c4:02:e4:60:24:fd:24:75:be:93:99:75:82: 00:28:84:24:36:ae:42:34:ce:d6:c8:04:e6:72:9b: 6b:10:59:6f:9f:fb:5a:ad:7b:9e:0f:ed:4e:5a:86: 5c:e2:db:21:c9:a5:89:17:ef:c7:91:67:61:06:e5: 75:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4B:95:F0:A9:3A:55:11:3C:46:3D:97:90:3C:05:3B:4C:CA:D8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/ffa52c60-da95-31b1-bfe9-acbd4e5985d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:14:b6:07:1c:82:f9:8c:de:d4:0f:2a:08:48:38:03:82:30: 74:03:4d:91:67:46:11:8c:15:cc:b4:cf:83:ab:44:26:13:ad: 9d:32:86:8a:e4:ea:98:39:0a:57:b5:9f:87:a9:e6:1d:12:83: d6:7d:c5:8d:76:39:2c:e9:63:86:f0:f2:2c:b5:0d:80:5d:94: 9c:43:e3:82:ae:7e:bd:53:cb:22:ab:ff:32:89:f0:8d:00:a5: 9a:13:72:25:4e:9b:be:4d:49:6b:d7:3d:fe:54:ad:82:37:f2: d6:95:03:d1:0d:14:d9:af:8e:24:60:a9:3f:13:89:4c:96:9f: 77:5d:44:66:a7:22:43:44:03:b0:7f:27:55:df:89:a2:87:2d: f6:d2:67:ef:cc:ac:45:b6:8b:4f:a9:8e:5c:ef:28:e4:12:da: df:73:e7:bf:e7:99:62:78:07:50:f1:0c:ca:e3:fb:b8:ec:6a: c6:4d:24:8e:b2:f7:9c:fb:84:e9:e8:42:92:82:c2:75:ac:4a: 71:07:40:d3:49:ef:25:69:d6:34:2a:96:3d:3c:a5:70:23:ef: 83:4f:fe:c7:18:c0:2c:8f:95:1d:8c:1d:0a:49:df:25:74:1f: fd:fb:52:8b:2d:65:39:fe:50:4d:46:31:e8:48:f7:1d:95:f4: e2:f4:a8:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExLO9RIC3T9bLOp2HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MTIyNDE0MDA0MFoXDTI2MDMyNDEzMDA0MFowLzEtMCsGA1UEAxMk Y2UxZjVmZTItNTU3Zi00ZWRjLTg1ZTUtM2VlMjYzYzhjZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDH+dfbOkbd6iFqj7x6WZMLv6XgOgDZNZRMV Q9XmxfNBtI+tjA3sE+NJv0vvQ2F12dK8XHRZEKsqj83tpzQFOY/A6/tYMXSRIZfK NS0PkqerI+o/vk0BYq5L9OUD2Jjoj+K8+zyw/rA4CmoZUfisqaTWC4dRLEIwByXn ccMFmRLO70/a8iNAWuSRFah8DPv+e/1E+hLT8vAbFUnTVf22ACOe0Jj15haw8c64 qbBV2gQJgXWUadY6HIKU8Jez2A6h0rk9U8QC5GAk/SR1vpOZdYIAKIQkNq5CNM7W yATmcptrEFlvn/tarXueD+1OWoZc4tshyaWJF+/HkWdhBuV17QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENLlfCpOlURPEY9l5A8BTtMytiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvZmZhNTJjNjAtZGE5NS0z MWIxLWJmZTktYWNiZDRlNTk4NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlUgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsUtgccgvmM3tQPKghIOAOCMHQDTZFnRhGMFcy0z4OrRCYTrZ0yhork 6pg5Cle1n4ep5h0Sg9Z9xY12OSzpY4bw8iy1DYBdlJxD44Kufr1TyyKr/zKJ8I0A pZoTciVOm75NSWvXPf5UrYI38taVA9ENFNmvjiRgqT8TiUyWn3ddRGanIkNEA7B/ J1XfiaKHLfbSZ+/MrEW2i0+pjlzvKOQS2t9z57/nmWJ4B1DxDMrj+7jsasZNJI6y 95z7hOnoQpKCwnWsSnEHQNNJ7yVp1jQqlj08pXAj74NP/scYwCyPlR2MHQpJ3yV0 H/37UostZTn+UE1GMehI9x2V9OL0qLE= -----END CERTIFICATE-----Generated at Sun Jan 25 09:31:05 2026 by rpki-client