This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa File: 43d529a5-06fc-3596-b306-3805ee39efec.roa (raw, json) Hash identifier: 3Rxq6BYFOh/laul13CKlm25DIjy0jgW15iT9/Lnaidc= Subject key identifier: 34:F4:90:8D:43:49:C5:CE:98:E4:92:D4:75:F8:56:85:94:48:A7:09 Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584C0B06138FD14E4FE81F58DC40 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 7029 IP address blocks: 134.195.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:13:8f:d1:4e:4f:e8:1f:58:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=b17894fd-1a8b-48ac-b8ba-b35576fc61f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:95:51:af:af:d2:e6:dd:c9:b2:e8:e0:dd:65: b0:f0:c0:4f:05:25:d9:e1:81:07:fe:8f:d8:03:b0: da:fe:a4:25:2c:18:58:c9:47:91:01:d7:28:07:85: b1:8e:95:8e:74:53:76:2d:fa:29:2e:8c:8c:3d:82: 93:ad:39:ac:d1:ed:e5:26:fe:e0:49:a2:a6:5f:75: e2:d5:42:a1:e9:11:40:d6:ad:fa:31:10:f5:c8:7d: 5c:76:8e:32:14:9f:ef:c8:62:35:94:43:0c:08:b1: e6:3a:b7:f2:a9:5a:b9:31:7f:5a:c2:d1:0f:74:66: b1:1b:84:fe:a0:55:00:c9:92:62:e9:f5:90:92:19: c5:68:dd:e2:f0:46:ac:d2:96:a6:39:20:82:94:60: b9:5d:a8:e0:1f:59:a4:c5:01:af:19:8b:d5:17:fe: 5d:5f:e1:09:84:5e:58:05:d7:cc:85:c7:8b:09:72: a1:e2:f8:3a:bc:64:a6:d8:a8:66:27:00:14:41:3d: 9b:0a:50:f8:2b:e8:3b:6e:8e:c0:5e:61:19:cf:88: 8d:9b:1e:7f:50:4c:6c:a7:98:08:77:84:d4:37:64: b6:55:e0:3e:3c:4e:9b:e1:87:2e:da:13:a4:b2:12: bb:ec:ee:43:2c:99:e3:04:67:75:0d:01:f6:f1:30: 87:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F4:90:8D:43:49:C5:CE:98:E4:92:D4:75:F8:56:85:94:48:A7:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/43d529a5-06fc-3596-b306-3805ee39efec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: 134.195.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:7b:2d:be:ed:20:31:9e:53:73:bf:70:a1:cd:5f:45:9f:d2: 34:ac:71:07:f8:e6:4f:84:ea:75:8a:28:56:f0:41:d1:18:db: 3a:ef:00:86:f7:7d:ba:53:b2:99:fe:8f:b3:06:b6:f1:43:1a: 8f:00:86:c3:be:8d:85:82:df:08:59:75:71:8a:d0:06:8b:c5: 9b:33:c8:db:38:e9:ce:9a:cd:cd:65:e6:72:8d:a6:31:79:d6: 5c:3c:a3:c6:c4:78:36:99:75:09:a3:5a:93:4c:a5:b7:9b:92: 87:d8:dd:f9:f2:9a:03:71:a3:7c:46:6e:f6:a8:30:48:2f:b4: 8d:d8:9f:2a:bd:c8:9c:20:59:ab:2a:2f:28:bb:a6:7b:49:b6: 27:89:10:8b:ec:34:ee:c4:99:e1:3c:07:5f:f7:4b:68:8f:50: f8:8e:dd:bd:7f:03:6d:a8:61:96:ef:ec:03:c1:eb:b0:a4:e4: b8:2d:c4:bb:41:40:30:41:3f:f1:5d:ea:7e:07:62:7f:9f:2f: ca:03:c0:2a:70:7b:52:92:49:e3:d5:9a:19:ea:a5:64:a4:b7: e4:6a:98:43:17:20:74:cf:5b:62:7e:d5:70:0e:63:15:af:d5: 90:a3:df:c1:9d:dd:d0:61:c7:20:50:b9:b4:b2:44:e0:56:a8: 09:83:da:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBhOP0U5P6B9Y3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk YjE3ODk0ZmQtMWE4Yi00OGFjLWI4YmEtYjM1NTc2ZmM2MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5VRr6/S5t3Jsujg3WWw8MBPBSXZ4YEH/o/Y A7Da/qQlLBhYyUeRAdcoB4WxjpWOdFN2LfopLoyMPYKTrTms0e3lJv7gSaKmX3Xi 1UKh6RFA1q36MRD1yH1cdo4yFJ/vyGI1lEMMCLHmOrfyqVq5MX9awtEPdGaxG4T+ oFUAyZJi6fWQkhnFaN3i8Eas0pamOSCClGC5XajgH1mkxQGvGYvVF/5dX+EJhF5Y BdfMhceLCXKh4vg6vGSm2KhmJwAUQT2bClD4K+g7bo7AXmEZz4iNmx5/UExsp5gI d4TUN2S2VeA+PE6b4Ycu2hOkshK77O5DLJnjBGd1DQH28TCHGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT0kI1DScXOmOSS1HX4VoWUSKcJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvNDNkNTI5YTUtMDZmYy0z NTk2LWIzMDYtMzgwNWVlMzllZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN7Lb7tIDGeU3O/cKHNX0Wf0jSscQf45k+E6nWKKFbwQdEY2zrvAIb3 fbpTspn+j7MGtvFDGo8AhsO+jYWC3whZdXGK0AaLxZszyNs46c6azc1l5nKNpjF5 1lw8o8bEeDaZdQmjWpNMpbebkofY3fnymgNxo3xGbvaoMEgvtI3Ynyq9yJwgWasq Lyi7pntJtieJEIvsNO7EmeE8B1/3S2iPUPiO3b1/A22oYZbv7APB67Ck5LgtxLtB QDBBP/Fd6n4HYn+fL8oDwCpwe1KSSePVmhnqpWSkt+RqmEMXIHTPW2J+1XAOYxWv 1ZCj38Gd3dBhxyBQubSyROBWqAmD2uw= -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:13 2025 by rpki-client