This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3136b57f-6b27-3ba0-ac03-9a52a706ca21.roa File: 3136b57f-6b27-3ba0-ac03-9a52a706ca21.roa (raw, json) Hash identifier: Hko4iA2nQrQWD+LVN5I/mgz072aaGncFXZJV7KV8ULk= Subject key identifier: BF:1B:3B:EC:3C:EE:E1:80:36:A2:D0:BE:D6:F6:FC:04:8E:6D:09:0B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCF007355AE48879A818EC180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3136b57f-6b27-3ba0-ac03-9a52a706ca21.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 132.145.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:73:55:ae:48:87:9a:81:8e:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=664e1479-c6e6-4720-823b-5d8de302659b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:da:b3:b0:df:f6:e8:92:3a:43:a9:6f:15: 0f:6d:eb:c0:b7:09:0c:24:ff:cd:4f:73:9f:96:4e: 02:35:d9:16:93:9d:8b:2f:7c:e5:4c:39:ab:7f:60: 53:92:00:96:19:6f:9e:34:3d:65:af:d0:67:b8:99: 2b:7f:4d:5e:cf:bc:41:d8:f2:90:72:e3:4f:d6:1b: ea:24:04:3a:97:15:84:05:0b:3e:55:01:e3:0f:5f: 9d:4c:59:18:8c:c1:eb:e5:4b:04:63:cd:74:84:7b: 8f:86:4f:af:dd:99:9c:8b:e1:bf:13:df:62:a9:41: 5d:19:d4:fd:0f:df:dd:ab:ab:28:10:21:c1:6b:74: 79:80:b5:61:65:68:b6:2c:08:1a:96:42:5b:f9:f5: 11:c7:58:34:1c:31:78:c4:0c:9e:09:f8:95:da:f6: c0:31:b2:41:2d:6a:88:cc:8d:71:84:95:5e:63:dc: 30:3f:a0:98:d7:c3:53:9f:d3:d5:ad:b9:82:39:08: 94:ab:62:28:62:b1:58:e1:b3:b5:08:d8:80:bb:6b: c8:2f:da:cc:7f:61:f8:1d:6e:d9:9a:6d:5c:f2:01: 72:4e:e0:6b:ab:02:a2:bb:65:21:5c:9c:5a:3f:a7: 51:e1:db:32:91:44:7e:5f:f7:4f:71:bb:5f:ac:d9: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1B:3B:EC:3C:EE:E1:80:36:A2:D0:BE:D6:F6:FC:04:8E:6D:09:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3136b57f-6b27-3ba0-ac03-9a52a706ca21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 132.145.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:8b:a0:7e:3f:02:c6:8a:0d:ad:26:3c:f1:3b:fa:f0:bd:4b: 41:e6:30:b0:85:b0:47:07:3b:1e:ed:d9:56:36:87:6e:48:f8: 00:4e:94:10:48:cc:9b:3a:94:a8:0d:7f:20:ed:36:81:b2:6a: 82:16:4a:05:30:1b:29:73:60:c4:92:b4:da:c1:1b:06:d8:c3: e2:bf:9c:f9:93:9f:98:e5:79:8a:8b:e8:0b:11:f1:08:e6:a0: d1:b9:be:3a:f4:2c:ff:15:d0:71:bf:bd:1a:64:e0:a6:06:21: 08:16:5c:49:d1:44:ab:b9:33:64:ea:46:3a:db:e0:d1:3f:64: 98:7f:22:d0:f3:48:f9:99:a9:ff:08:6a:3e:49:a0:ad:a1:eb: 4a:a8:5e:a4:d6:51:5a:7e:28:3c:ef:c7:c5:bb:0a:df:cf:cb: bd:b4:28:04:bf:0b:76:d5:25:85:d4:84:0c:6c:d7:07:51:e2: 32:67:3a:f8:b6:99:e9:62:e7:f1:b4:de:5c:f3:f3:64:8c:9e: aa:0b:b8:e5:28:80:0a:a7:07:24:7c:91:d5:15:03:71:86:8d: ae:db:ad:ee:50:83:f5:64:85:e0:35:8f:66:ab:c6:4f:ca:18: 89:27:52:99:e5:32:c3:61:bf:34:a4:de:64:ed:b7:dc:2e:44: 47:c3:88:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAHNVrkiHmoGOwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk NjY0ZTE0NzktYzZlNi00NzIwLTgyM2ItNWQ4ZGUzMDI2NTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssDas7Df9uiSOkOpbxUPbevAtwkMJP/NT3Of lk4CNdkWk52LL3zlTDmrf2BTkgCWGW+eND1lr9BnuJkrf01ez7xB2PKQcuNP1hvq JAQ6lxWEBQs+VQHjD1+dTFkYjMHr5UsEY810hHuPhk+v3Zmci+G/E99iqUFdGdT9 D9/dq6soECHBa3R5gLVhZWi2LAgalkJb+fURx1g0HDF4xAyeCfiV2vbAMbJBLWqI zI1xhJVeY9wwP6CY18NTn9PVrbmCOQiUq2IoYrFY4bO1CNiAu2vIL9rMf2H4HW7Z mm1c8gFyTuBrqwKiu2UhXJxaP6dR4dsykUR+X/dPcbtfrNlWQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8bO+w87uGANqLQvtb2/ASObQkLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzEzNmI1N2YtNmIyNy0z YmEwLWFjMDMtOWE1MmE3MDZjYTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhJEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeLoH4/AsaKDa0mPPE7+vC9S0HmMLCFsEcHOx7t2VY2h25I+ABOlBBI zJs6lKgNfyDtNoGyaoIWSgUwGylzYMSStNrBGwbYw+K/nPmTn5jleYqL6AsR8Qjm oNG5vjr0LP8V0HG/vRpk4KYGIQgWXEnRRKu5M2TqRjrb4NE/ZJh/ItDzSPmZqf8I aj5JoK2h60qoXqTWUVp+KDzvx8W7Ct/Py720KAS/C3bVJYXUhAxs1wdR4jJnOvi2 meli5/G03lzz82SMnqoLuOUogAqnByR8kdUVA3GGja7bre5Qg/VkheA1j2arxk/K GIknUpnlMsNhvzSk3mTtt9wuREfDiOM= -----END CERTIFICATE-----Generated at Sat Dec 6 18:26:19 2025 by rpki-client