This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/7c9ee320-8947-3b64-ae6a-b8bb2e0feb68.roa File: 7c9ee320-8947-3b64-ae6a-b8bb2e0feb68.roa (raw, json) Hash identifier: Br2NMuBgqXRtF5Ww0fWXz8OP7tdn+WkWKko5ZCi/Qws= Subject key identifier: 10:1F:B2:FF:B9:17:90:C1:93:94:A0:4D:AF:38:71:E3:52:0F:8A:4C Certificate issuer: /CN=f63b7eb8-acba-44a7-b922-bd22a4513564 Certificate serial: 010D0C9F4328584C22108C2A675DDFC7F010E480 Authority key identifier: DD:15:DE:7C:46:31:9A:F3:CF:DA:3D:DA:D9:D5:18:98:2C:71:0B:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/7c9ee320-8947-3b64-ae6a-b8bb2e0feb68.roa Signing time: Tue 09 Dec 2025 20:05:28 +0000 ROA not before: Tue 09 Dec 2025 20:05:28 +0000 ROA not after: Mon 09 Mar 2026 19:05:28 +0000 asID: 19318 IP address blocks: 131.143.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:10:8c:2a:67:5d:df:c7:f0:10:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63b7eb8-acba-44a7-b922-bd22a4513564 Validity Not Before: Dec 9 20:05:28 2025 GMT Not After : Mar 9 19:05:28 2026 GMT Subject: CN=2ecddf13-defe-424e-8891-70d978076da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:0c:7e:f3:0d:86:98:5e:cd:e9:82:ae:69: bb:e8:ca:cd:db:d7:b0:e9:44:35:0e:58:c6:a2:2c: f8:ba:cd:71:56:44:de:dd:8c:fc:a6:60:c5:12:66: 05:c7:71:88:20:91:08:77:25:78:14:44:f4:43:25: a8:0b:aa:1f:4d:36:41:b6:9c:b0:26:c7:08:9b:56: 32:82:71:bb:aa:9b:36:dd:12:33:1e:ae:15:fc:15: 6c:0b:74:b5:84:db:6f:0a:63:69:59:62:24:d8:eb: c8:46:9f:41:be:e7:80:18:60:c4:b0:b9:87:2c:05: 07:c3:01:ec:40:b5:c2:19:d0:c4:8f:60:46:c0:3b: 53:8a:2a:74:12:06:3b:32:db:e9:00:41:d9:c6:05: de:7d:38:24:50:e5:72:a5:9a:46:87:8f:7e:00:35: e3:79:b5:57:0e:4f:3f:d0:69:d5:3b:cc:e9:b3:7e: a7:53:d3:b0:6f:ae:aa:18:31:fe:1a:a9:36:63:6d: 99:9e:55:3e:5d:6f:a0:d4:38:11:ff:91:e0:10:5f: 02:60:03:a4:40:e6:98:d1:93:66:1f:54:45:50:14: 87:6d:93:c8:c1:64:52:fd:ec:01:67:c7:eb:6d:bb: a8:66:d2:f8:4a:da:5a:3f:5c:c6:50:eb:eb:6f:0b: 61:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1F:B2:FF:B9:17:90:C1:93:94:A0:4D:AF:38:71:E3:52:0F:8A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/7c9ee320-8947-3b64-ae6a-b8bb2e0feb68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.crl X509v3 Authority Key Identifier: keyid:DD:15:DE:7C:46:31:9A:F3:CF:DA:3D:DA:D9:D5:18:98:2C:71:0B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer sbgp-ipAddrBlock: critical IPv4: 131.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2b:9e:5f:9f:2d:98:13:3d:02:22:cb:3f:ac:f7:39:a1:32: 23:cc:57:86:18:ab:2e:9a:cd:8c:35:f0:c1:37:d2:78:71:fc: 37:01:55:71:37:94:20:99:27:b4:c6:d5:30:93:f8:56:c4:c5: 5e:b1:90:9f:b3:38:2d:18:15:91:60:39:1f:59:59:87:0b:d1: f0:77:16:6a:f9:e9:57:b4:56:30:63:3e:fe:67:95:42:e6:e1: 99:cd:ef:95:20:81:3a:ad:f2:17:6c:7d:84:0b:f5:57:aa:0b: 67:5a:cb:6a:da:9f:3c:69:bf:85:ed:93:d1:0f:41:6c:d1:a9: 46:7d:bf:d6:ef:98:a3:83:5e:5e:9a:23:02:15:80:c3:8f:c1: 95:a6:ec:5c:20:36:1a:a6:dd:fd:b8:01:20:c4:94:e6:06:a9: fc:94:8b:b1:17:30:10:42:30:bc:d7:df:c6:8c:24:a0:16:35: da:e8:62:ac:c4:c2:f5:67:05:ca:7d:f3:6e:cd:50:0b:e0:8c: 33:8f:a3:0b:66:e3:8c:6f:de:e7:2b:5a:17:cb:ef:26:9c:c5: 01:fd:77:69:b3:cd:35:9c:8e:e0:99:18:df:bf:44:d4:5e:ff: 12:df:41:a3:98:7a:d5:07:22:fb:1a:bf:6f:29:24:a2:b8:ab: 85:cf:0b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwiEIwqZ13fx/AQ5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzYjdlYjgtYWNiYS00NGE3LWI5MjItYmQyMmE0NTEz NTY0MB4XDTI1MTIwOTIwMDUyOFoXDTI2MDMwOTE5MDUyOFowLzEtMCsGA1UEAxMk MmVjZGRmMTMtZGVmZS00MjRlLTg4OTEtNzBkOTc4MDc2ZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngUMfvMNhphezemCrmm76MrN29ew6UQ1DljG oiz4us1xVkTe3Yz8pmDFEmYFx3GIIJEIdyV4FET0QyWoC6ofTTZBtpywJscIm1Yy gnG7qps23RIzHq4V/BVsC3S1hNtvCmNpWWIk2OvIRp9BvueAGGDEsLmHLAUHwwHs QLXCGdDEj2BGwDtTiip0EgY7MtvpAEHZxgXefTgkUOVypZpGh49+ADXjebVXDk8/ 0GnVO8zps36nU9Owb66qGDH+Gqk2Y22ZnlU+XW+g1DgR/5HgEF8CYAOkQOaY0ZNm H1RFUBSHbZPIwWRS/ewBZ8frbbuoZtL4StpaP1zGUOvrbwthXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAfsv+5F5DBk5SgTa84ceNSD4pMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNjNi N2ViOC1hY2JhLTQ0YTctYjkyMi1iZDIyYTQ1MTM1NjQvN2M5ZWUzMjAtODk0Ny0z YjY0LWFlNmEtYjhiYjJlMGZlYjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjYzYjdlYjgtYWNiYS00NGE3LWI5 MjItYmQyMmE0NTEzNTY0L2Y2M2I3ZWI4LWFjYmEtNDRhNy1iOTIyLWJkMjJhNDUx MzU2NC5jcmwwHwYDVR0jBBgwFoAU3RXefEYxmvPP2j3a2dUYmCxxC5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNjNiN2ViOC1hY2JhLTQ0YTctYjkyMi1iZDIy YTQ1MTM1NjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMrnl+fLZgTPQIiyz+s9zmhMiPMV4YYqy6azYw18ME30nhx/DcBVXE3 lCCZJ7TG1TCT+FbExV6xkJ+zOC0YFZFgOR9ZWYcL0fB3Fmr56Ve0VjBjPv5nlULm 4ZnN75UggTqt8hdsfYQL9VeqC2day2ranzxpv4Xtk9EPQWzRqUZ9v9bvmKODXl6a IwIVgMOPwZWm7FwgNhqm3f24ASDElOYGqfyUi7EXMBBCMLzX38aMJKAWNdroYqzE wvVnBcp9827NUAvgjDOPowtm44xv3ucrWhfL7yacxQH9d2mzzTWcjuCZGN+/RNRe /xLfQaOYetUHIvsav28pJKK4q4XPCxQ= -----END CERTIFICATE-----Generated at Wed Dec 17 20:07:19 2025 by rpki-client