This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28d4aa01-578d-325a-b843-3e00f23bb714.roa File: 28d4aa01-578d-325a-b843-3e00f23bb714.roa (raw, json) Hash identifier: 8GvYfBLdpDPY4pPBNTAT8Hg5Ngf0nbj0TamKC1gVCLk= Subject key identifier: FB:FB:6E:A8:06:50:4F:BE:CF:9A:38:72:B6:AA:2E:7D:E6:FD:F3:CD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BD065B5A37F4ECBBCC2E5CBA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28d4aa01-578d-325a-b843-3e00f23bb714.roa Signing time: Mon 10 Nov 2025 14:00:38 +0000 ROA not before: Mon 10 Nov 2025 14:00:38 +0000 ROA not after: Sun 08 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 129.146.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d0:65:b5:a3:7f:4e:cb:bc:c2:e5:cb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 14:00:38 2025 GMT Not After : Feb 8 14:00:38 2026 GMT Subject: CN=2811e65e-acfd-4051-b76e-71e3e19b8de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:b7:06:80:a6:a4:36:05:08:af:75:0b:c3: 3e:d2:f8:60:d4:b2:36:3c:6a:65:9a:87:d2:8b:47: 5f:41:eb:79:86:f8:3c:f4:fa:b9:ae:9d:ad:ce:6f: 8a:5d:7e:48:a5:1c:27:b0:6f:27:90:2b:a0:17:9f: 98:53:ce:d5:3a:44:f4:db:61:eb:b6:9c:ac:bc:51: f5:22:cc:73:4c:23:28:38:12:55:fa:da:3e:62:03: c3:c5:67:2c:1f:72:93:71:54:87:57:8e:d0:d2:5d: a9:c2:7e:62:0d:dd:9a:7a:a3:25:43:ca:79:db:de: 20:4c:0a:7e:0d:8f:04:58:29:0d:d8:89:4a:26:44: 04:7f:38:93:02:a0:8a:30:c2:9b:b2:b3:b8:ed:00: 3d:5e:7d:63:e6:b4:d2:ea:e9:4c:8a:e8:5f:d7:8b: 09:d8:2d:f5:ad:5b:a5:0f:42:ff:4a:7a:be:ae:40: 6e:05:d5:30:ea:61:48:99:41:7e:15:a0:5a:39:c8: 2f:9d:2e:9f:ac:00:10:36:6b:ce:13:e5:30:8c:3d: dd:cd:d5:ae:13:2c:53:43:d3:38:68:c4:2a:be:2b: 80:24:38:e8:df:77:6c:b2:0e:f8:f6:5b:e1:34:79: 63:93:85:8e:39:75:8a:0a:d8:92:c1:ce:53:23:b5: 63:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FB:6E:A8:06:50:4F:BE:CF:9A:38:72:B6:AA:2E:7D:E6:FD:F3:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/28d4aa01-578d-325a-b843-3e00f23bb714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:4c:21:b2:38:f0:63:62:ff:c9:f4:b1:99:2d:a3:99:f7:91: 9d:85:95:1b:ad:e4:fa:a7:ab:d6:42:d6:bb:3e:fa:3c:7a:ed: b1:b1:15:c8:30:19:e2:03:ae:06:28:cd:88:5f:80:80:b3:fd: 4d:b6:83:94:5e:59:92:e9:9f:cb:3f:34:44:c9:49:d4:75:2e: 39:c4:e4:d6:cf:90:09:35:55:82:a5:f6:78:a4:7e:08:5d:20: a6:b6:d5:3a:99:5c:10:f7:b7:52:1f:2d:4c:55:b0:0b:45:db: fe:b1:72:6d:27:b9:95:38:ee:e3:ac:cd:31:e2:a2:42:e1:57: 0c:9d:3c:7b:d8:9e:9b:a5:a5:b7:db:22:80:05:d8:7b:7f:6d: 27:50:ba:32:cf:5c:ee:27:0a:d1:8f:68:f6:f9:33:13:58:0b: 7a:e6:87:1e:50:8f:00:d0:3b:3e:20:b5:7d:f1:b1:46:03:7a: 3c:ad:bd:fb:93:5a:78:d0:1c:f8:3a:34:bd:91:dc:11:bf:49: 98:26:2e:df:f0:72:51:44:e9:63:08:04:5e:7d:f0:50:ce:e0: 4a:0b:52:97:59:ef:e6:e0:7e:ff:a7:d3:86:ec:3e:b1:8a:9e: 46:7b:66:58:e1:f9:28:7e:cd:54:66:ea:12:f4:f3:f3:8f:c5: 13:00:fc:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvQZbWjf07LvMLly6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDE0MDAzOFoXDTI2MDIwODE0MDAzOFowLzEtMCsGA1UEAxMk MjgxMWU2NWUtYWNmZC00MDUxLWI3NmUtNzFlM2UxOWI4ZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSe3BoCmpDYFCK91C8M+0vhg1LI2PGplmofS i0dfQet5hvg89Pq5rp2tzm+KXX5IpRwnsG8nkCugF5+YU87VOkT022HrtpysvFH1 IsxzTCMoOBJV+to+YgPDxWcsH3KTcVSHV47Q0l2pwn5iDd2aeqMlQ8p5294gTAp+ DY8EWCkN2IlKJkQEfziTAqCKMMKbsrO47QA9Xn1j5rTS6ulMiuhf14sJ2C31rVul D0L/Snq+rkBuBdUw6mFImUF+FaBaOcgvnS6frAAQNmvOE+UwjD3dzdWuEyxTQ9M4 aMQqviuAJDjo33dssg749lvhNHljk4WOOXWKCtiSwc5TI7Vj8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPv7bqgGUE++z5o4craqLn3m/fPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjhkNGFhMDEtNTc4ZC0z MjVhLWI4NDMtM2UwMGYyM2JiNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZMIbI48GNi/8n0sZkto5n3kZ2FlRut5Pqnq9ZC1rs++jx67bGxFcgw GeIDrgYozYhfgICz/U22g5ReWZLpn8s/NETJSdR1LjnE5NbPkAk1VYKl9nikfghd IKa21TqZXBD3t1IfLUxVsAtF2/6xcm0nuZU47uOszTHiokLhVwydPHvYnpulpbfb IoAF2Ht/bSdQujLPXO4nCtGPaPb5MxNYC3rmhx5QjwDQOz4gtX3xsUYDejytvfuT WnjQHPg6NL2R3BG/SZgmLt/wclFE6WMIBF598FDO4EoLUpdZ7+bgfv+n04bsPrGK nkZ7Zljh+Sh+zVRm6hL08/OPxRMA/H0= -----END CERTIFICATE-----Generated at Sat Dec 6 18:38:16 2025 by rpki-client