This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ebf9d27e-3e88-3dce-842f-4a5702c02b47.roa File: ebf9d27e-3e88-3dce-842f-4a5702c02b47.roa (raw, json) Hash identifier: EIUHMNAvN6qOv2jsaN3ugxlLml0WQ/xm+nD8Kx4vc0A= Subject key identifier: FA:8E:D3:8C:5C:5C:5A:1E:E6:FE:39:37:DA:41:6A:3B:8D:2F:B7:F3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C179623ED67B4CD78856DB140 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ebf9d27e-3e88-3dce-842f-4a5702c02b47.roa Signing time: Sat 06 Dec 2025 02:00:31 +0000 ROA not before: Sat 06 Dec 2025 02:00:31 +0000 ROA not after: Fri 06 Mar 2026 02:00:31 +0000 asID: 54253 IP address blocks: 149.118.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:96:23:ed:67:b4:cd:78:85:6d:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Dec 6 02:00:31 2025 GMT Not After : Mar 6 02:00:31 2026 GMT Subject: CN=ae5b7670-6277-49a0-93cc-1115abaec8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:85:d7:23:e6:36:de:be:55:bf:1d:eb:68: 70:f2:2c:ae:9d:80:3c:77:42:55:00:7b:b5:4e:20: 5f:09:c2:9a:67:41:9b:8b:00:96:b3:a9:1e:dc:dd: 3f:98:c8:d4:9c:9e:00:0d:62:e9:30:eb:bc:9d:4b: d3:de:5c:bd:c2:48:3f:a6:21:4f:e1:5a:43:73:6f: ff:8d:27:fc:f9:a3:e2:fb:e4:d2:53:4a:89:b4:b4: 76:ea:f8:a8:46:ae:cd:cf:39:28:9e:ac:d3:58:9a: 68:8f:ee:2d:77:3b:30:cb:90:3e:3c:6e:b9:1f:f0: 3d:47:12:dc:b9:96:c5:2f:3d:72:b2:18:55:5d:f3: ab:d3:c3:b7:3e:e4:0f:8a:0c:6a:72:40:6e:e6:55: d9:a9:04:56:3b:ba:98:87:8d:df:fa:d5:71:a0:61: 17:8c:15:be:e6:33:16:f3:d9:2e:e9:04:f2:8a:1e: 70:72:57:14:db:89:4c:aa:e7:b9:fc:ee:cd:0a:ed: 60:f5:ed:89:2c:3e:21:d2:1f:62:85:7c:f1:65:01: 1d:6e:2a:82:71:46:34:1e:b5:ca:17:31:39:dd:f8: 20:be:79:cb:ad:48:fb:d5:59:a3:69:bb:1e:93:5d: 9b:70:e1:e8:3f:9b:fb:1d:35:9e:52:8b:0c:0e:8d: 69:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8E:D3:8C:5C:5C:5A:1E:E6:FE:39:37:DA:41:6A:3B:8D:2F:B7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ebf9d27e-3e88-3dce-842f-4a5702c02b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.118.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:36:cf:0f:d2:81:a4:ed:11:8d:71:58:6c:01:12:49:96:7b: 5e:33:7e:be:ce:c5:cd:4f:07:f2:d7:08:84:1b:ec:66:b8:bb: 2c:0d:bd:5b:cd:91:bf:b7:18:a6:21:7e:51:fe:29:49:4f:69: 21:92:27:5f:a7:fb:89:ce:80:61:79:3a:21:af:bc:55:72:ce: 71:cb:fc:40:90:ea:79:59:2d:98:f9:31:61:46:f0:2e:73:b6: 7b:b1:fe:29:46:61:56:7a:1b:d8:9a:9f:cb:c4:a4:d7:2e:12: d6:26:2a:d1:44:b2:e3:63:ee:fc:ea:f7:89:a7:f3:e1:c0:14: 38:cc:e7:29:27:a9:b9:73:d9:09:a5:fc:73:72:e8:34:ab:48: 9f:e1:da:04:76:f2:d0:4a:ee:5d:70:ee:8e:47:ee:85:57:8e: d7:f7:68:fa:c9:42:1c:4f:8a:de:1d:d0:5b:92:98:55:5e:5b: 00:de:30:e8:1d:71:27:82:20:d5:71:c7:8e:dc:84:7a:e2:74: 58:0b:5f:c0:3e:19:25:27:d3:0e:e8:c6:84:b5:72:d1:48:0c: c6:f4:71:de:69:81:d9:55:35:cd:52:3c:fc:65:cd:ca:84:6c: 2a:8e:29:b5:9c:2d:da:62:ef:d3:a2:bd:98:45:a1:d8:03:3d: a0:6a:21:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwXliPtZ7TNeIVtsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTIwNjAyMDAzMVoXDTI2MDMwNjAyMDAzMVowLzEtMCsGA1UEAxMk YWU1Yjc2NzAtNjI3Ny00OWEwLTkzY2MtMTExNWFiYWVjOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+uF1yPmNt6+Vb8d62hw8iyunYA8d0JVAHu1 TiBfCcKaZ0GbiwCWs6ke3N0/mMjUnJ4ADWLpMOu8nUvT3ly9wkg/piFP4VpDc2// jSf8+aPi++TSU0qJtLR26vioRq7NzzkonqzTWJpoj+4tdzswy5A+PG65H/A9RxLc uZbFLz1yshhVXfOr08O3PuQPigxqckBu5lXZqQRWO7qYh43f+tVxoGEXjBW+5jMW 89ku6QTyih5wclcU24lMque5/O7NCu1g9e2JLD4h0h9ihXzxZQEdbiqCcUY0HrXK FzE53fggvnnLrUj71Vmjabsek12bcOHoP5v7HTWeUosMDo1pvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqO04xcXFoe5v45N9pBajuNL7fzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWJmOWQyN2UtM2U4OC0z ZGNlLTg0MmYtNGE1NzAyYzAyYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXbzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw2zw/SgaTtEY1xWGwBEkmWe14zfr7Oxc1PB/LXCIQb7Ga4uywNvVvN kb+3GKYhflH+KUlPaSGSJ1+n+4nOgGF5OiGvvFVyznHL/ECQ6nlZLZj5MWFG8C5z tnux/ilGYVZ6G9ian8vEpNcuEtYmKtFEsuNj7vzq94mn8+HAFDjM5yknqblz2Qml /HNy6DSrSJ/h2gR28tBK7l1w7o5H7oVXjtf3aPrJQhxPit4d0FuSmFVeWwDeMOgd cSeCINVxx47chHridFgLX8A+GSUn0w7oxoS1ctFIDMb0cd5pgdlVNc1SPPxlzcqE bCqOKbWcLdpi79OivZhFodgDPaBqIdM= -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:57 2025 by rpki-client