This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bb8be5b-fbbd-3290-b6ad-1265c2e4b1b9.roa File: 3bb8be5b-fbbd-3290-b6ad-1265c2e4b1b9.roa (raw, json) Hash identifier: 9p7Agd9B+qVD2Pv2HfR7Rij3pBQ/1K5Nm0JXAfHPq5E= Subject key identifier: 4D:7C:32:43:CC:D2:1E:40:46:57:F1:2E:D4:CB:E1:BD:67:9D:67:55 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BC805A155B174C19B1E0D2540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bb8be5b-fbbd-3290-b6ad-1265c2e4b1b9.roa Signing time: Fri 07 Nov 2025 14:00:38 +0000 ROA not before: Fri 07 Nov 2025 14:00:38 +0000 ROA not after: Thu 05 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 149.130.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c8:05:a1:55:b1:74:c1:9b:1e:0d:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 7 14:00:38 2025 GMT Not After : Feb 5 14:00:38 2026 GMT Subject: CN=75500451-2bcd-42ec-a738-c7b5813549e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:03:43:44:49:6a:45:46:22:19:79:85:58: 3c:b7:df:60:d5:d8:73:64:c7:40:cf:e9:59:1c:41: b3:f7:df:20:42:e8:de:f5:3c:41:9d:3e:38:42:d1: be:79:4a:3e:83:de:c6:ea:95:cb:3b:ed:0e:e2:66: 7c:5b:4b:fd:ea:a3:cb:ac:56:0b:3b:91:90:c9:5b: 8a:ae:84:a0:8d:95:fb:6f:0f:f0:6e:7b:8a:ae:ef: 0e:91:7e:ac:3f:a6:64:1c:7b:f5:17:0d:5d:b4:a8: 2a:7b:1b:39:02:1c:f3:c6:22:6a:db:12:33:cb:5e: 38:8e:29:4b:17:be:76:0a:8c:b2:e9:6d:ae:d3:60: 2a:74:4f:1a:2d:43:05:6b:c1:7a:1c:37:38:1f:63: 2a:ae:a6:77:1f:47:3f:10:70:bb:21:7f:bc:f2:1e: 7f:52:31:a0:32:26:e8:c4:d8:75:f0:bf:9b:8e:a5: af:38:54:ed:45:8c:45:61:d4:04:76:94:7e:72:b1: 3c:66:95:35:f2:09:db:f5:7b:6a:92:84:88:d4:1b: dc:6c:52:34:43:f7:bf:04:c1:9f:8c:76:33:57:fa: de:8b:2b:65:37:30:02:b9:53:47:68:f8:b3:1e:56: 63:8e:72:c2:ef:bb:20:55:7f:44:87:2f:4f:a7:a0: 4c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7C:32:43:CC:D2:1E:40:46:57:F1:2E:D4:CB:E1:BD:67:9D:67:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bb8be5b-fbbd-3290-b6ad-1265c2e4b1b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 149.130.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:50:3a:58:51:b5:c8:9b:7a:dd:a8:bf:31:d4:f2:b2:14:36: e5:ef:eb:cc:a1:08:e4:cf:13:96:a9:88:b3:ce:0c:86:d7:3f: a3:26:f9:6b:31:08:d2:61:bf:cc:23:9d:7f:e3:4d:0e:4d:85: 97:88:19:32:24:77:82:43:33:a5:ee:6e:d2:1c:ee:d6:1e:e1: 57:e8:ba:db:54:2b:56:4a:d0:a2:14:d2:57:47:62:a8:34:e2: 35:95:fe:75:57:2d:24:59:59:28:c6:b4:57:bb:a7:1c:87:86: fd:dd:d2:70:ef:91:b2:9e:3d:4a:4f:13:12:51:fb:7d:60:ad: f7:05:ef:e4:7d:fd:2e:a3:0d:e0:c3:24:ff:b3:64:6d:03:62: 61:76:ec:f7:81:6b:3c:fa:07:5f:91:08:c4:64:7c:60:a5:c0: 67:a6:02:8b:36:e5:8b:f8:00:7f:60:5c:ea:64:dc:f9:2e:63: 2c:dd:e5:bd:a7:fd:c8:4d:2d:b6:fc:87:74:67:e7:23:b9:6c: 2f:d5:76:31:7a:12:94:fe:a3:08:ed:7b:9f:65:22:0c:32:29: 42:6e:ef:f5:7e:de:46:9e:95:e6:94:c2:fd:40:80:5c:24:34: 39:80:bf:dc:db:66:24:b5:7a:d3:ac:03:33:3b:31:56:4e:d1: 4f:4b:57:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvIBaFVsXTBmx4NJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNzE0MDAzOFoXDTI2MDIwNTE0MDAzOFowLzEtMCsGA1UEAxMk NzU1MDA0NTEtMmJjZC00MmVjLWE3MzgtYzdiNTgxMzU0OWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGADQ0RJakVGIhl5hVg8t99g1dhzZMdAz+lZ HEGz998gQuje9TxBnT44QtG+eUo+g97G6pXLO+0O4mZ8W0v96qPLrFYLO5GQyVuK roSgjZX7bw/wbnuKru8OkX6sP6ZkHHv1Fw1dtKgqexs5AhzzxiJq2xIzy144jilL F752Coyy6W2u02AqdE8aLUMFa8F6HDc4H2MqrqZ3H0c/EHC7IX+88h5/UjGgMibo xNh18L+bjqWvOFTtRYxFYdQEdpR+crE8ZpU18gnb9XtqkoSI1BvcbFI0Q/e/BMGf jHYzV/reiytlNzACuVNHaPizHlZjjnLC77sgVX9Ehy9Pp6BMIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE18MkPM0h5ARlfxLtTL4b1nnWdVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2JiOGJlNWItZmJiZC0z MjkwLWI2YWQtMTI2NWMyZTRiMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlYKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpQOlhRtcibet2ovzHU8rIUNuXv68yhCOTPE5apiLPODIbXP6Mm+Wsx CNJhv8wjnX/jTQ5NhZeIGTIkd4JDM6XubtIc7tYe4VfouttUK1ZK0KIU0ldHYqg0 4jWV/nVXLSRZWSjGtFe7pxyHhv3d0nDvkbKePUpPExJR+31grfcF7+R9/S6jDeDD JP+zZG0DYmF27PeBazz6B1+RCMRkfGClwGemAos25Yv4AH9gXOpk3PkuYyzd5b2n /chNLbb8h3Rn5yO5bC/VdjF6EpT+owjte59lIgwyKUJu7/V+3kaeleaUwv1AgFwk NDmAv9zbZiS1etOsAzM7MVZO0U9LV5o= -----END CERTIFICATE-----Generated at Sat Dec 6 23:12:52 2025 by rpki-client