This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa File: 996680e8-cf66-37bf-a1d6-3f519c7383ea.roa (raw, json) Hash identifier: pqI2t9H/+rQxEkeI8aQSMdaGucSEyxWRa3kmD2J1xrs= Subject key identifier: 2B:46:21:FA:B8:81:27:BC:AC:F8:D2:90:49:B5:13:D8:36:5C:07:2A Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584C0B06432B55AE590397E77B00 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 14114 IP address blocks: 157.133.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:43:2b:55:ae:59:03:97:e7:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=523e3d2c-a410-4f67-83a9-72662320b5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3e:ef:29:a6:20:6d:c0:28:f7:49:9a:1f:2d: 61:5e:3d:0b:8e:49:5b:d1:22:dc:d7:d0:fd:5d:45: ac:5b:d4:e9:c4:2c:dc:1a:14:24:d4:a3:04:0a:e0: 8d:1a:18:38:52:84:06:8e:48:a2:22:7e:85:79:05: f6:10:f2:72:d4:74:90:f8:2a:a8:74:9d:06:3d:8b: 8c:3c:9d:00:48:56:d0:dd:a6:1e:c5:a5:2b:ab:a9: 29:60:b2:14:50:53:de:e1:0e:56:a5:0b:92:57:79: 96:11:be:33:b3:1d:87:0b:24:b5:63:8e:c4:9d:67: fb:33:8b:20:2f:3d:96:0d:5b:96:4f:b0:67:61:00: 6b:20:97:bd:c4:13:c4:09:e8:bc:4c:02:67:1e:e5: 5e:19:97:0c:52:b7:f6:01:05:47:c2:c0:ed:6a:ac: e6:ae:27:8c:df:d7:fb:bb:77:a4:04:93:62:48:a8: 0c:c2:8e:af:28:88:f5:a4:49:e6:d1:5c:d9:e6:b1: 22:3e:b9:7f:b6:09:87:31:98:96:5c:3f:40:49:9f: 33:42:4c:ec:ad:50:86:a8:b4:c2:2c:7b:95:67:13: 7d:96:2b:cc:d5:48:a6:5c:16:5e:71:7d:18:d9:ea: 13:08:f3:4c:36:ee:8f:a2:2a:06:5e:05:e3:24:43: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:46:21:FA:B8:81:27:BC:AC:F8:D2:90:49:B5:13:D8:36:5C:07:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 157.133.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:02:0a:2a:69:4e:6a:6f:3e:e2:43:0c:45:53:6a:36:75:8b: 15:3d:da:18:65:17:aa:f8:54:d7:2d:a9:c9:b1:14:db:69:3c: ed:11:c3:f8:3f:df:8e:92:2a:de:6b:88:41:88:42:a9:fc:37: a0:f5:4a:df:7a:87:68:87:cf:c5:58:86:af:0d:e7:10:84:be: c7:51:aa:e5:6a:8f:cd:69:c6:76:d0:d9:eb:96:f2:66:ec:6d: eb:20:5c:06:32:a8:0b:d5:53:45:fa:68:98:7a:19:ed:fe:5e: 66:58:2d:d4:40:e8:cb:c7:40:37:10:a0:de:33:89:84:cf:ea: 18:4e:03:8c:e8:69:ec:50:57:a6:ad:d7:97:17:1e:95:a2:ef: 7c:5f:17:02:59:b3:67:7a:0f:82:65:9a:13:12:8a:c6:38:d3: 89:ff:65:71:b9:d0:32:da:a5:0d:d9:bc:36:85:ec:d7:46:1f: 6f:38:f5:dd:a9:d1:c4:de:5d:fe:94:8d:33:f7:e0:d7:ff:58: 42:89:51:ea:f5:0b:75:6c:42:47:a5:01:ef:77:7a:e2:cf:ef: 9c:37:60:5f:87:fc:1f:2f:21:48:de:a6:c3:38:2c:7a:a2:7a: 97:4c:4c:35:3c:2b:39:f4:19:04:65:70:af:22:39:e1:ac:22: f0:d2:84:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBkMrVa5ZA5fnewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk NTIzZTNkMmMtYTQxMC00ZjY3LTgzYTktNzI2NjIzMjBiNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D7vKaYgbcAo90maHy1hXj0Ljklb0SLc19D9 XUWsW9TpxCzcGhQk1KMECuCNGhg4UoQGjkiiIn6FeQX2EPJy1HSQ+CqodJ0GPYuM PJ0ASFbQ3aYexaUrq6kpYLIUUFPe4Q5WpQuSV3mWEb4zsx2HCyS1Y47EnWf7M4sg Lz2WDVuWT7BnYQBrIJe9xBPECei8TAJnHuVeGZcMUrf2AQVHwsDtaqzmrieM39f7 u3ekBJNiSKgMwo6vKIj1pEnm0VzZ5rEiPrl/tgmHMZiWXD9ASZ8zQkzsrVCGqLTC LHuVZxN9livM1UimXBZecX0Y2eoTCPNMNu6PoioGXgXjJEMGhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtGIfq4gSe8rPjSkEm1E9g2XAcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvOTk2NjgwZTgtY2Y2Ni0z N2JmLWExZDYtM2Y1MTljNzM4M2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMCCippTmpvPuJDDEVTajZ1ixU92hhlF6r4VNctqcmxFNtpPO0Rw/g/ 346SKt5riEGIQqn8N6D1St96h2iHz8VYhq8N5xCEvsdRquVqj81pxnbQ2euW8mbs besgXAYyqAvVU0X6aJh6Ge3+XmZYLdRA6MvHQDcQoN4ziYTP6hhOA4zoaexQV6at 15cXHpWi73xfFwJZs2d6D4JlmhMSisY404n/ZXG50DLapQ3ZvDaF7NdGH2849d2p 0cTeXf6UjTP34Nf/WEKJUer1C3VsQkelAe93euLP75w3YF+H/B8vIUjepsM4LHqi epdMTDU8Kzn0GQRlcK8iOeGsIvDShCs= -----END CERTIFICATE-----Generated at Sat Dec 6 14:40:06 2025 by rpki-client