This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa File: cdaf3e33-82e0-3076-92c2-d497982c93fc.roa (raw, json) Hash identifier: JZdfyXswg2UlNR0SeINUxkEGBHhJdVexXXl8T4I8yjE= Subject key identifier: 47:22:BE:7B:5C:98:52:B8:FB:D2:1C:84:7A:3A:58:62:4F:F8:47:D3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C17962401FE3572E633257100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa Signing time: Sat 06 Dec 2025 02:00:31 +0000 ROA not before: Sat 06 Dec 2025 02:00:31 +0000 ROA not after: Fri 06 Mar 2026 02:00:31 +0000 asID: 54253 IP address blocks: 149.118.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:96:24:01:fe:35:72:e6:33:25:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Dec 6 02:00:31 2025 GMT Not After : Mar 6 02:00:31 2026 GMT Subject: CN=f453a909-7f33-4845-9d49-0f786b76471d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:03:49:e1:07:47:77:29:ae:a6:0e:b3:b2:32: 59:6e:c4:2f:b7:44:68:90:28:41:d6:0a:3f:7e:44: a9:a6:25:5e:22:c2:aa:0b:c3:b1:50:78:9d:db:89: 01:d8:07:34:eb:4a:63:94:52:2c:81:a5:3d:f8:9a: e4:6b:89:1c:fa:1d:74:b5:bd:82:61:59:21:a2:3c: 46:1d:fb:b2:c4:94:b7:97:3e:1e:a0:09:c2:63:53: 5a:c3:91:ca:49:a5:ef:d4:df:30:2c:49:0c:53:aa: 9b:57:79:64:7b:9d:b1:dc:ab:92:8c:e7:ad:02:d5: 25:e0:77:99:2a:34:f4:a5:05:6d:cd:c7:12:d7:b5: cc:b8:e3:7c:ba:59:7a:84:e4:7f:4f:5e:6a:58:0d: 79:60:c9:d8:43:6a:d9:e0:a3:8d:16:3a:47:4e:be: 43:8c:c5:00:b2:3f:ac:fa:57:4b:62:96:83:2d:90: c0:91:77:7d:85:c6:97:b4:ce:ae:ec:4b:11:27:e7: a8:d5:7e:8c:bf:cb:4b:4d:22:66:2b:38:68:00:c2: 87:5f:ac:a4:20:d8:8f:ec:07:4e:b6:00:7e:a2:a9: 9d:50:37:c0:dc:f7:25:50:87:ba:55:9c:bd:b6:fe: c5:4d:79:03:ec:37:a4:6c:28:b1:19:61:96:c3:89: 57:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:22:BE:7B:5C:98:52:B8:FB:D2:1C:84:7A:3A:58:62:4F:F8:47:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cdaf3e33-82e0-3076-92c2-d497982c93fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:14:dd:16:37:57:78:d9:5c:e8:58:e9:bc:86:fe:90:4b:57: 5c:42:d5:cb:cc:6f:6c:39:f9:c1:1b:33:4a:86:e6:22:3c:bb: 17:2f:f1:71:4a:96:2f:33:97:98:52:0d:5d:23:03:83:2f:1c: 10:00:a9:f2:42:67:5d:af:d8:09:60:a9:92:97:43:6c:8e:1e: 0f:13:80:cb:e1:80:26:49:44:63:73:cb:52:ac:10:9b:17:d2: f1:dc:b7:69:cd:ae:3e:8e:f1:46:b7:ae:8a:41:ac:18:c2:a0: 53:d2:13:e3:5f:f7:78:5b:71:49:6e:34:01:31:00:1b:57:70: e8:f9:1d:bd:2d:75:57:31:96:b7:d3:38:d0:7d:43:3c:6c:4c: e4:67:ea:73:3f:71:9b:d6:23:6f:68:96:f6:5d:28:14:2f:50: a7:88:9f:81:9e:67:d9:50:38:78:18:d3:aa:97:2c:cc:0b:c9: 0b:91:8f:cd:7b:d4:b1:de:15:fb:99:80:70:f7:46:41:86:15: 66:f5:a3:46:df:9d:ca:04:40:e6:c0:99:58:97:57:fa:08:81: 55:ac:77:b6:e9:65:39:f8:f2:cf:93:65:aa:7e:90:9d:1f:38: bf:9b:db:3f:6c:dc:fe:15:3b:7a:22:17:94:8f:58:d3:4d:51: 50:a8:48:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwXliQB/jVy5jMlcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTIwNjAyMDAzMVoXDTI2MDMwNjAyMDAzMVowLzEtMCsGA1UEAxMk ZjQ1M2E5MDktN2YzMy00ODQ1LTlkNDktMGY3ODZiNzY0NzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQNJ4QdHdymupg6zsjJZbsQvt0RokChB1go/ fkSppiVeIsKqC8OxUHid24kB2Ac060pjlFIsgaU9+Jrka4kc+h10tb2CYVkhojxG HfuyxJS3lz4eoAnCY1Naw5HKSaXv1N8wLEkMU6qbV3lke52x3KuSjOetAtUl4HeZ KjT0pQVtzccS17XMuON8ull6hOR/T15qWA15YMnYQ2rZ4KONFjpHTr5DjMUAsj+s +ldLYpaDLZDAkXd9hcaXtM6u7EsRJ+eo1X6Mv8tLTSJmKzhoAMKHX6ykINiP7AdO tgB+oqmdUDfA3PclUIe6VZy9tv7FTXkD7DekbCixGWGWw4lXpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcivntcmFK4+9IchHo6WGJP+EfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2RhZjNlMzMtODJlMC0z MDc2LTkyYzItZDQ5Nzk4MmM5M2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlXb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcU3RY3V3jZXOhY6byG/pBLV1xC1cvMb2w5+cEbM0qG5iI8uxcv8XFK li8zl5hSDV0jA4MvHBAAqfJCZ12v2AlgqZKXQ2yOHg8TgMvhgCZJRGNzy1KsEJsX 0vHct2nNrj6O8Ua3ropBrBjCoFPSE+Nf93hbcUluNAExABtXcOj5Hb0tdVcxlrfT ONB9QzxsTORn6nM/cZvWI29olvZdKBQvUKeIn4GeZ9lQOHgY06qXLMwLyQuRj817 1LHeFfuZgHD3RkGGFWb1o0bfncoEQObAmViXV/oIgVWsd7bpZTn48s+TZap+kJ0f OL+b2z9s3P4VO3oiF5SPWNNNUVCoSNQ= -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:53 2025 by rpki-client