This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa File: 23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa (raw, json) Hash identifier: YKT/ETeYBIMyPjLOuMqHs+I5xwey4km8uE2T0naApLc= Subject key identifier: 4C:75:B6:B4:2B:38:AB:F2:25:52:5D:88:84:78:A2:73:00:7D:61:08 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BC96B0E07506895FA4B4A5078 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 31898 IP address blocks: 129.148.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6b:0e:07:50:68:95:fa:4b:4a:50:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=1e3348bd-ec46-4a0e-afd8-fac681e1ddcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a5:4e:a9:8c:b8:31:57:ac:92:5d:d0:8c:8a: 2a:3f:7e:56:01:f9:64:d1:70:e3:94:4a:4c:db:db: 02:40:af:cd:fb:1b:64:c6:47:11:1f:3e:d6:1a:e4: 00:55:0b:e8:3c:18:52:1e:42:49:a0:1d:fc:6b:f4: ee:3b:0d:a6:d8:0b:0b:fc:21:9b:40:85:c8:ba:3e: ae:df:39:51:0c:63:2c:4c:b9:9a:ca:bf:7a:48:8e: ed:a5:71:cd:74:4f:84:a2:93:6a:81:88:f4:9f:17: d1:66:ab:4c:2e:78:9f:66:f2:b0:93:57:13:84:3a: ee:ef:09:41:a1:a1:25:00:de:7e:cf:68:69:8f:8c: 65:63:19:50:ba:d1:72:dc:e1:19:8c:9a:ba:b6:68: ce:a4:c8:7b:07:d9:98:39:98:6e:dc:34:af:7b:b9: a1:82:e4:58:9a:e6:0e:86:32:d8:1a:e6:6d:c0:da: 44:6e:e4:01:26:24:64:38:83:d5:a7:e2:96:7c:65: 49:e2:0b:11:22:0b:23:7f:23:0e:c3:1c:74:3b:12: 6b:aa:71:8c:08:b3:aa:21:b6:3c:bb:28:ac:b4:b8: 5f:2d:e6:9d:27:21:8b:bc:8c:b0:a5:0b:cd:21:0a: 7e:3b:2c:22:69:2e:ac:5f:ab:ab:ff:8a:de:3b:a7: 07:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:75:B6:B4:2B:38:AB:F2:25:52:5D:88:84:78:A2:73:00:7D:61:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/23d2d458-ed89-3a7e-bf6d-66360612a7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:9d:95:14:9c:8c:62:0a:03:9a:e0:71:86:9d:7b:37:b1:6a: fa:e1:cb:d5:ca:18:39:e5:37:62:91:23:18:23:24:ab:dd:3f: 78:c2:8a:22:84:03:75:60:1d:94:df:7e:b8:07:56:f4:a6:77: fe:8e:89:90:d3:45:64:1f:86:cd:d2:d8:31:04:4e:f7:4b:bb: ed:6a:dd:8f:1a:f3:3c:69:48:ff:3f:d4:78:82:68:6e:36:a3: 4d:8e:17:42:2d:17:53:66:b7:d0:a0:36:69:ff:11:65:4e:b4: 4a:37:97:9b:57:a1:b7:d5:97:3e:cd:4e:77:2f:dd:a1:de:94: dc:1e:73:51:73:10:46:3e:01:23:c4:95:27:dc:bc:e9:0d:96: 8b:b9:c0:ce:66:f2:48:f3:3a:f9:f7:97:0f:4a:16:c5:17:fd: 25:81:fd:f6:2f:0c:84:48:dc:b9:83:d2:b5:fc:5e:ce:4b:f4: a7:cc:3b:4d:02:a9:e5:ef:82:a1:1f:2e:97:14:49:63:6a:c4: 0b:cb:8f:a3:92:50:b3:e1:f2:d6:04:90:18:c1:bc:64:5b:d8: 0f:cf:89:b8:31:94:e8:e7:31:02:e4:66:45:36:28:63:38:80: c9:21:20:dd:50:45:68:b3:15:41:8e:3e:7b:b3:08:5c:a4:d5: b1:ca:a4:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvJaw4HUGiV+ktKUHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk MWUzMzQ4YmQtZWM0Ni00YTBlLWFmZDgtZmFjNjgxZTFkZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaVOqYy4MVeskl3QjIoqP35WAflk0XDjlEpM 29sCQK/N+xtkxkcRHz7WGuQAVQvoPBhSHkJJoB38a/TuOw2m2AsL/CGbQIXIuj6u 3zlRDGMsTLmayr96SI7tpXHNdE+EopNqgYj0nxfRZqtMLnifZvKwk1cThDru7wlB oaElAN5+z2hpj4xlYxlQutFy3OEZjJq6tmjOpMh7B9mYOZhu3DSve7mhguRYmuYO hjLYGuZtwNpEbuQBJiRkOIPVp+KWfGVJ4gsRIgsjfyMOwxx0OxJrqnGMCLOqIbY8 uyistLhfLeadJyGLvIywpQvNIQp+OywiaS6sX6ur/4reO6cH/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx1trQrOKvyJVJdiIR4onMAfWEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjNkMmQ0NTgtZWQ4OS0z YTdlLWJmNmQtNjYzNjA2MTJhN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6dlRScjGIKA5rgcYadezexavrhy9XKGDnlN2KRIxgjJKvdP3jCiiKE A3VgHZTffrgHVvSmd/6OiZDTRWQfhs3S2DEETvdLu+1q3Y8a8zxpSP8/1HiCaG42 o02OF0ItF1Nmt9CgNmn/EWVOtEo3l5tXobfVlz7NTncv3aHelNwec1FzEEY+ASPE lSfcvOkNlou5wM5m8kjzOvn3lw9KFsUX/SWB/fYvDIRI3LmD0rX8Xs5L9KfMO00C qeXvgqEfLpcUSWNqxAvLj6OSULPh8tYEkBjBvGRb2A/PibgxlOjnMQLkZkU2KGM4 gMkhIN1QRWizFUGOPnuzCFyk1bHKpBg= -----END CERTIFICATE-----Generated at Sat Dec 6 17:38:48 2025 by rpki-client