This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/40627f49-e1a3-3fbd-a773-aabf40cb447d.roa File: 40627f49-e1a3-3fbd-a773-aabf40cb447d.roa (raw, json) Hash identifier: oPgi/n+6woVmPu1ZcdpvCM0NBWvTxyXsyl1LiMubGY8= Subject key identifier: AE:FD:6A:D6:DB:B0:CC:EF:5D:12:B2:81:21:65:02:64:E4:D6:07:8A Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584BD8C5CBB79D46FF473375DB00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/40627f49-e1a3-3fbd-a773-aabf40cb447d.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 130.35.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:cb:b7:9d:46:ff:47:33:75:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=9ce65dc9-6159-4bcc-a7a9-1b663064ecf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:82:d6:1b:07:5c:72:17:fc:28:1a:05:56: f4:5b:e7:b5:68:6d:ae:e6:64:da:f4:47:73:21:39: 42:f5:14:98:1e:ca:05:4d:b7:93:0c:65:f0:fd:3a: a2:12:8f:f1:1e:08:5c:95:d0:fa:c7:ed:30:89:72: 5c:18:e6:ab:98:9e:75:a5:a9:4d:c0:f9:d9:0c:f0: 46:a8:41:85:7a:24:19:67:73:56:2f:c7:be:a3:19: 94:b4:08:e2:af:b4:90:81:8e:db:3e:b2:e4:eb:fd: 86:92:a8:ba:fe:c4:49:29:ab:e8:1f:26:16:bf:f2: 3a:96:ad:fe:69:65:50:3e:91:df:88:5e:db:4d:ed: d4:f9:17:dd:b1:09:07:7c:20:65:b7:51:66:02:0a: f0:40:c5:22:e5:e0:d8:41:07:5e:7d:cd:c3:43:f3: 24:07:1c:cc:86:65:64:1a:2e:e5:f5:b6:33:7e:11: 55:a2:7e:17:41:fc:53:8d:32:dd:e5:ff:ac:50:6b: c5:69:e1:77:60:a6:0c:6d:09:3b:27:26:73:0f:49: ff:e4:95:51:4d:ef:70:e4:16:b7:b7:38:2b:66:28: 74:b4:2d:83:f7:9b:dd:97:5d:b5:a4:9d:6b:cc:6b: 6b:b3:aa:1e:2f:a8:25:7d:3e:8f:3d:a3:be:f3:72: 5f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FD:6A:D6:DB:B0:CC:EF:5D:12:B2:81:21:65:02:64:E4:D6:07:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/40627f49-e1a3-3fbd-a773-aabf40cb447d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:bc:3a:4b:f5:84:2f:b6:82:12:55:28:91:37:f1:74:cb:7d: 94:b0:56:c0:d1:94:01:87:75:52:d1:04:61:e6:1d:0f:53:e6: f2:e3:7c:50:3f:cf:a7:e2:aa:9f:cb:dd:44:72:82:d9:cd:bb: ea:b3:dc:69:55:f6:53:96:d6:9d:6a:b4:4d:99:be:14:2e:36: 52:09:3e:92:a0:9c:83:76:5c:1e:72:2c:50:22:b8:2f:70:45: 17:55:f8:5e:6c:8f:40:b0:17:90:74:79:16:95:6d:67:0c:3a: e7:43:1e:cf:04:79:76:a7:15:ee:ae:4f:e4:94:86:88:c7:41: 5b:e0:66:2b:f0:76:44:79:bf:cb:4c:8c:a8:e7:b4:e2:11:ff: 34:a2:46:0a:f6:1f:19:42:01:41:7c:66:2d:b2:3e:08:ce:ae: fe:09:39:ae:e3:6e:37:fb:d9:ac:d1:2c:f2:3e:52:f2:69:3e: 85:a6:9c:7b:55:cd:7a:c5:a1:a5:bd:76:e8:19:ad:f6:15:ed: 30:03:9c:53:72:cd:89:f6:15:ca:fc:5b:d7:dd:6c:75:f0:33: f9:8d:f4:b7:f5:c8:97:66:70:de:32:57:8d:69:43:ba:a0:5a: ae:04:a6:94:21:54:3c:12:a2:f7:36:b5:62:af:67:a9:4f:8b: b7:cf:35:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxcu3nUb/RzN12wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk OWNlNjVkYzktNjE1OS00YmNjLWE3YTktMWI2NjMwNjRlY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qSC1hsHXHIX/CgaBVb0W+e1aG2u5mTa9Edz ITlC9RSYHsoFTbeTDGXw/TqiEo/xHghcldD6x+0wiXJcGOarmJ51palNwPnZDPBG qEGFeiQZZ3NWL8e+oxmUtAjir7SQgY7bPrLk6/2Gkqi6/sRJKavoHyYWv/I6lq3+ aWVQPpHfiF7bTe3U+RfdsQkHfCBlt1FmAgrwQMUi5eDYQQdefc3DQ/MkBxzMhmVk Gi7l9bYzfhFVon4XQfxTjTLd5f+sUGvFaeF3YKYMbQk7JyZzD0n/5JVRTe9w5Ba3 tzgrZih0tC2D95vdl121pJ1rzGtrs6oeL6glfT6PPaO+83JfQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK79atbbsMzvXRKygSFlAmTk1geKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNDA2MjdmNDktZTFhMy0z ZmJkLWE3NzMtYWFiZjQwY2I0NDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgiN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF68Okv1hC+2ghJVKJE38XTLfZSwVsDRlAGHdVLRBGHmHQ9T5vLjfFA/ z6fiqp/L3URygtnNu+qz3GlV9lOW1p1qtE2ZvhQuNlIJPpKgnIN2XB5yLFAiuC9w RRdV+F5sj0CwF5B0eRaVbWcMOudDHs8EeXanFe6uT+SUhojHQVvgZivwdkR5v8tM jKjntOIR/zSiRgr2HxlCAUF8Zi2yPgjOrv4JOa7jbjf72azRLPI+UvJpPoWmnHtV zXrFoaW9dugZrfYV7TADnFNyzYn2Fcr8W9fdbHXwM/mN9Lf1yJdmcN4yV41pQ7qg Wq4EppQhVDwSovc2tWKvZ6lPi7fPNRc= -----END CERTIFICATE-----Generated at Sat Dec 6 23:59:44 2025 by rpki-client