This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/028e2d88-c8ea-3c9e-81c3-0200aae5b782.roa File: 028e2d88-c8ea-3c9e-81c3-0200aae5b782.roa (raw, json) Hash identifier: X+6JU7ivpxRZRKp3ecHmrQyAvZpGpgXJ6AwmDWKs1z8= Subject key identifier: 25:28:3A:21:D1:7C:0C:11:57:40:87:E9:1E:FE:8D:BC:FD:EB:97:6E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C040B691635FFCA339E244900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/028e2d88-c8ea-3c9e-81c3-0200aae5b782.roa Signing time: Sat 29 Nov 2025 02:00:31 +0000 ROA not before: Sat 29 Nov 2025 02:00:31 +0000 ROA not after: Fri 27 Feb 2026 02:00:31 +0000 asID: 54253 IP address blocks: 134.185.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:04:0b:69:16:35:ff:ca:33:9e:24:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 29 02:00:31 2025 GMT Not After : Feb 27 02:00:31 2026 GMT Subject: CN=a134d060-bb7d-4633-bbf3-b86b8f83aa0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9f:26:86:26:9d:8e:1d:af:aa:d3:38:e8:e3: 19:80:8d:f1:b2:f4:c7:dd:f6:74:49:29:40:40:ab: 87:8b:4f:ea:5e:62:37:39:b6:db:38:e9:b2:28:ec: 32:a6:01:2d:2d:b7:1c:56:fa:c7:38:db:a5:d5:c0: b2:77:ae:7e:de:72:6e:77:2e:3e:5a:df:d1:87:7d: 62:59:da:cb:3c:4d:48:e9:1e:a4:95:cf:0d:54:70: 9c:be:6a:22:c0:d8:f3:a8:1e:bb:30:b2:77:9d:86: 56:3c:6f:db:97:c6:eb:13:28:b8:d6:3e:cc:05:77: e3:14:38:81:c8:6a:1b:2b:11:5d:c0:7c:a6:e1:f3: 62:af:2e:b4:d9:20:18:d8:13:8a:00:c1:9b:87:1b: 54:86:e6:d0:ee:bc:a3:ed:cd:38:91:3f:9e:53:43: 74:36:14:ef:87:d7:e7:d3:95:e9:31:7e:56:20:6e: 25:dc:99:19:65:9c:37:98:03:60:f4:56:bb:bf:aa: 2c:d9:a7:34:c0:62:c4:58:e0:13:99:cc:c3:a3:9d: 5f:b9:05:d7:49:1e:2b:52:8c:71:e1:3a:d7:fc:96: 76:5c:35:b0:82:11:0d:90:5a:15:df:28:52:34:c3: ea:eb:c8:5e:81:95:e6:c4:93:8f:76:0b:27:c2:23: 0d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:28:3A:21:D1:7C:0C:11:57:40:87:E9:1E:FE:8D:BC:FD:EB:97:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/028e2d88-c8ea-3c9e-81c3-0200aae5b782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.185.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:1f:82:7c:f2:71:7f:42:ab:40:2f:f4:58:23:c9:59:c0:63: 4b:68:1a:d9:9c:5b:0d:d5:21:c4:01:99:c2:17:1b:08:e7:24: dc:3c:de:9d:48:7f:2c:24:9a:4e:44:3f:e4:5d:eb:04:d8:c6: b2:98:9d:7d:98:cb:c9:04:8d:e9:c8:bf:eb:06:e4:a5:8d:26: 4b:f4:f8:8c:ea:6d:a2:03:5a:74:b6:29:57:cb:0f:3f:6f:f5: 7d:06:70:57:24:0c:aa:e5:b7:9c:0b:9c:65:7b:57:b3:58:83: 16:ce:61:ef:ed:69:30:18:f9:0d:b3:71:3b:d0:02:3a:30:ef: cf:10:f7:56:62:39:e6:9c:5a:26:bf:0a:de:37:95:05:3f:aa: a4:45:8e:6f:f1:ac:52:06:49:52:d6:58:aa:a1:c4:42:f1:a7: eb:5a:5d:6e:ee:66:f9:1d:9e:0c:d0:66:80:93:e4:a0:03:64: 15:bf:d3:11:1b:9a:55:eb:e6:59:47:c6:af:30:7b:ea:71:42: 21:db:92:38:78:47:dd:67:b8:24:7e:76:00:99:15:97:85:cc: bb:5c:9b:f7:b5:44:42:42:12:83:6d:bc:b3:ad:94:f8:75:b2: a1:01:5c:f8:2b:fd:db:52:06:39:7a:75:6a:9f:b8:09:9e:fd: f8:52:cf:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwEC2kWNf/KM54kSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEyOTAyMDAzMVoXDTI2MDIyNzAyMDAzMVowLzEtMCsGA1UEAxMk YTEzNGQwNjAtYmI3ZC00NjMzLWJiZjMtYjg2YjhmODNhYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p8mhiadjh2vqtM46OMZgI3xsvTH3fZ0SSlA QKuHi0/qXmI3ObbbOOmyKOwypgEtLbccVvrHONul1cCyd65+3nJudy4+Wt/Rh31i WdrLPE1I6R6klc8NVHCcvmoiwNjzqB67MLJ3nYZWPG/bl8brEyi41j7MBXfjFDiB yGobKxFdwHym4fNiry602SAY2BOKAMGbhxtUhubQ7ryj7c04kT+eU0N0NhTvh9fn 05XpMX5WIG4l3JkZZZw3mANg9Fa7v6os2ac0wGLEWOATmczDo51fuQXXSR4rUoxx 4TrX/JZ2XDWwghENkFoV3yhSNMPq68hegZXmxJOPdgsnwiMNQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUoOiHRfAwRV0CH6R7+jbz965duMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDI4ZTJkODgtYzhlYS0z YzllLTgxYzMtMDIwMGFhZTViNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhrkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcfgnzycX9Cq0Av9FgjyVnAY0toGtmcWw3VIcQBmcIXGwjnJNw83p1I fywkmk5EP+Rd6wTYxrKYnX2Yy8kEjenIv+sG5KWNJkv0+IzqbaIDWnS2KVfLDz9v 9X0GcFckDKrlt5wLnGV7V7NYgxbOYe/taTAY+Q2zcTvQAjow788Q91ZiOeacWia/ Ct43lQU/qqRFjm/xrFIGSVLWWKqhxELxp+taXW7uZvkdngzQZoCT5KADZBW/0xEb mlXr5llHxq8we+pxQiHbkjh4R91nuCR+dgCZFZeFzLtcm/e1REJCEoNtvLOtlPh1 sqEBXPgr/dtSBjl6dWqfuAme/fhSz/w= -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:12 2025 by rpki-client