This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ac99882-5f66-3e45-b087-556a6be061d9.roa File: 3ac99882-5f66-3e45-b087-556a6be061d9.roa (raw, json) Hash identifier: 3FQ3dmJhzD40E4Kk1XxpAdS+7tNpFQMnSXjW+1zxp0U= Subject key identifier: 49:E8:4A:54:E0:21:08:CF:E5:89:B8:43:E0:0C:05:D5:B4:DA:98:A2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C8A0C8198E4F202D18E2BA180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ac99882-5f66-3e45-b087-556a6be061d9.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 31898 IP address blocks: 129.146.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:81:98:e4:f2:02:d1:8e:2b:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=9382fa11-80e8-422c-8a55-384cb107e686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:c9:3a:f7:81:50:02:d2:68:19:23:dc:8d: 2c:b4:be:a0:75:ab:ae:44:96:7a:df:ca:e7:f2:ae: a7:7e:c8:9b:b1:f4:9e:3f:f3:6c:ca:a7:32:50:3e: ef:7e:63:e8:51:f9:24:de:cb:e8:43:f3:ac:83:76: 78:10:5b:55:cb:b3:f2:39:70:fd:cd:b4:2e:89:a7: 48:33:63:51:56:32:30:4d:b9:f1:c7:5f:3a:32:5f: eb:0f:a7:2e:9a:b0:0a:38:75:8b:98:de:ac:b7:45: 08:c0:20:9d:96:26:68:69:54:80:10:85:5d:c8:ff: f4:9b:f6:1d:49:8f:84:dc:97:c9:ed:5c:61:27:29: e7:02:6f:01:b0:8f:7c:60:6c:24:e6:61:e4:8f:f1: 46:c9:cc:d7:14:c7:13:48:cb:17:57:6a:28:92:5e: 9a:bb:86:18:55:3d:8b:ac:65:5e:2e:9b:05:bc:c8: 7b:2e:82:cb:df:84:7f:01:26:e6:22:aa:22:6e:84: 0c:0f:31:07:68:fb:43:a7:a9:c4:33:29:41:06:58: ed:79:57:9a:61:62:fa:09:7f:b4:e3:85:ce:dc:e8: 2e:18:8d:72:f1:c9:28:40:ce:8c:4d:53:4c:24:e7: 5d:94:a6:d9:4c:c4:25:56:f2:99:05:f8:e7:ca:c8: 74:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E8:4A:54:E0:21:08:CF:E5:89:B8:43:E0:0C:05:D5:B4:DA:98:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3ac99882-5f66-3e45-b087-556a6be061d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:99:61:9a:8d:6f:ba:b1:15:4d:3a:24:d0:e9:76:fe:bf:43: e4:b7:61:17:33:39:71:b9:50:28:77:8e:c3:3f:aa:1d:bb:10: 3c:2d:03:0b:b7:74:87:0d:26:75:c1:cd:41:51:24:f1:47:a1: 92:45:df:4a:9a:51:1b:70:5d:5c:80:cb:9e:48:53:0f:f3:8c: 60:cc:22:cb:bd:67:e1:26:31:84:fd:2a:fa:5f:6b:ee:e9:48: 7c:51:5e:2f:ee:6b:2c:bd:85:80:e8:bc:d9:36:79:3e:00:58: ba:e1:a5:11:b3:49:ad:28:42:33:93:f4:2c:2e:0f:89:0b:5e: bf:70:36:f3:d5:47:ec:ef:00:fd:73:5b:62:b7:02:af:c4:a8: 22:30:f4:0e:be:24:89:88:0b:93:8d:a3:d7:a9:fd:a9:09:8f: c8:10:b7:ba:43:08:d3:5d:0e:96:07:27:e1:4f:96:bd:f6:63: 7a:f2:77:e2:76:da:26:04:c0:5c:3e:be:d5:d0:4b:a5:09:79: b3:f9:77:e0:b7:37:fc:7e:b6:fa:7b:2c:7a:67:7f:a6:d6:a1: 37:4f:25:e9:09:1c:f2:74:5e:8e:25:e3:de:d2:77:91:da:7e: ef:7a:1e:7a:c9:19:05:ab:bb:91:c2:0b:3e:da:92:85:24:0a: 05:13:de:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDIGY5PIC0Y4roYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk OTM4MmZhMTEtODBlOC00MjJjLThhNTUtMzg0Y2IxMDdlNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8rJOveBUALSaBkj3I0stL6gdauuRJZ638rn 8q6nfsibsfSeP/NsyqcyUD7vfmPoUfkk3svoQ/Osg3Z4EFtVy7PyOXD9zbQuiadI M2NRVjIwTbnxx186Ml/rD6cumrAKOHWLmN6st0UIwCCdliZoaVSAEIVdyP/0m/Yd SY+E3JfJ7VxhJynnAm8BsI98YGwk5mHkj/FGyczXFMcTSMsXV2ookl6au4YYVT2L rGVeLpsFvMh7LoLL34R/ASbmIqoiboQMDzEHaPtDp6nEMylBBljteVeaYWL6CX+0 44XO3OguGI1y8ckoQM6MTVNMJOddlKbZTMQlVvKZBfjnysh0LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnoSlTgIQjP5Ym4Q+AMBdW02piiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2FjOTk4ODItNWY2Ni0z ZTQ1LWIwODctNTU2YTZiZTA2MWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6ZYZqNb7qxFU06JNDpdv6/Q+S3YRczOXG5UCh3jsM/qh27EDwtAwu3 dIcNJnXBzUFRJPFHoZJF30qaURtwXVyAy55IUw/zjGDMIsu9Z+EmMYT9Kvpfa+7p SHxRXi/uayy9hYDovNk2eT4AWLrhpRGzSa0oQjOT9CwuD4kLXr9wNvPVR+zvAP1z W2K3Aq/EqCIw9A6+JImIC5ONo9ep/akJj8gQt7pDCNNdDpYHJ+FPlr32Y3ryd+J2 2iYEwFw+vtXQS6UJebP5d+C3N/x+tvp7LHpnf6bWoTdPJekJHPJ0Xo4l497Sd5Ha fu96HnrJGQWru5HCCz7akoUkCgUT3no= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:48 2026 by rpki-client