This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41059d34-8eac-3523-8ca6-0016a5d2aaf9.roa File: 41059d34-8eac-3523-8ca6-0016a5d2aaf9.roa (raw, json) Hash identifier: f/DjfTPGjFRJZWo8uEbjCL0tvzivz5Id+rvcioZM8qE= Subject key identifier: C2:02:A6:A3:28:E7:BD:11:E9:17:C1:C6:0C:38:96:CF:CE:E1:E2:AA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BD065B761ABBB7EE73A940C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41059d34-8eac-3523-8ca6-0016a5d2aaf9.roa Signing time: Mon 10 Nov 2025 14:00:38 +0000 ROA not before: Mon 10 Nov 2025 14:00:38 +0000 ROA not after: Sun 08 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 129.191.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d0:65:b7:61:ab:bb:7e:e7:3a:94:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 14:00:38 2025 GMT Not After : Feb 8 14:00:38 2026 GMT Subject: CN=564e9314-777a-401d-99b6-b006900c3636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7e:29:2f:40:df:08:3f:89:d0:25:c9:a0:fe: ec:ab:08:1a:71:c0:83:22:7d:0b:ae:65:64:37:a8: 21:32:5c:ea:21:b7:c1:37:ca:9b:80:0a:88:47:29: 69:34:b2:cc:50:74:12:01:bd:42:5b:2f:0f:0e:41: 47:b4:70:25:ac:5f:be:69:4d:eb:49:63:1e:f3:f7: 30:f0:84:27:29:cd:89:d8:5b:73:f4:16:1f:0f:44: bb:25:d7:62:6e:95:07:c9:5d:67:bf:db:df:24:8d: c4:c8:98:0f:ff:7a:be:47:4f:de:e3:52:93:e5:6e: 94:35:77:8f:86:84:eb:5d:23:dc:8a:78:ef:b9:c8: 0b:03:1d:b7:ff:30:2a:3d:32:14:d3:10:8d:3a:94: 45:fc:47:b1:6f:ca:0b:d3:b3:ab:47:56:0d:fc:ac: 25:da:de:ca:11:80:78:37:79:4b:5a:7f:2b:9a:12: d0:26:93:bd:eb:50:d9:a3:d6:ba:0c:1f:06:34:06: 72:f4:9b:17:38:ee:00:6b:cd:90:d0:33:bf:fe:db: 04:39:89:39:14:ab:73:d2:b3:45:42:b1:a7:15:d2: 8d:66:83:be:d0:11:3d:b1:59:2a:13:3c:95:03:18: 25:72:d2:87:dc:89:29:93:c6:ae:4b:5f:b1:27:4d: ca:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:02:A6:A3:28:E7:BD:11:E9:17:C1:C6:0C:38:96:CF:CE:E1:E2:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41059d34-8eac-3523-8ca6-0016a5d2aaf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.191.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ea:f8:e5:1b:cb:dc:c3:41:83:11:1c:0c:0e:89:0d:9a:a0: 42:75:1e:a9:41:3d:2c:1e:d3:97:44:1e:b8:ee:aa:fd:67:5b: 7f:01:60:d8:37:1a:d0:b7:f2:ee:3a:48:87:f2:1c:19:25:c0: 7c:b4:cc:7d:0c:d1:1b:fb:7d:77:e0:5d:ea:86:17:01:3d:46: e1:dc:66:bb:b3:3e:8a:8a:51:89:80:d2:7e:6c:a4:3e:c3:d2: 7b:d0:bb:56:55:d0:b4:1e:93:51:08:48:b8:d9:ba:91:b1:5b: 8c:3f:39:44:89:0e:40:ea:fe:e9:f7:cc:1f:47:cb:45:dd:bf: 16:26:35:f0:f5:2d:f4:25:14:99:f2:08:2e:40:01:35:73:78: 38:be:57:be:b4:f5:1a:b6:77:c4:48:35:38:20:e2:29:a5:3b: 7e:02:41:8b:1c:77:9a:eb:5e:27:69:f2:13:89:4d:03:e9:38: f0:68:7e:df:50:fe:a9:52:d5:85:5f:c7:fc:bb:22:04:ab:0c: 62:da:5e:64:19:87:d1:23:af:d3:be:9d:f4:14:ec:8f:02:a6: f9:bf:57:63:ee:6e:83:54:e9:8e:84:18:1b:90:b0:31:34:83: 16:cf:9f:b7:c7:33:87:4d:9d:9c:c7:aa:1a:fb:97:e0:7c:92: 50:25:e2:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvQZbdhq7t+5zqUDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDE0MDAzOFoXDTI2MDIwODE0MDAzOFowLzEtMCsGA1UEAxMk NTY0ZTkzMTQtNzc3YS00MDFkLTk5YjYtYjAwNjkwMGMzNjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH4pL0DfCD+J0CXJoP7sqwgaccCDIn0LrmVk N6ghMlzqIbfBN8qbgAqIRylpNLLMUHQSAb1CWy8PDkFHtHAlrF++aU3rSWMe8/cw 8IQnKc2J2Ftz9BYfD0S7JddibpUHyV1nv9vfJI3EyJgP/3q+R0/e41KT5W6UNXeP hoTrXSPcinjvucgLAx23/zAqPTIU0xCNOpRF/Eexb8oL07OrR1YN/Kwl2t7KEYB4 N3lLWn8rmhLQJpO961DZo9a6DB8GNAZy9JsXOO4Aa82Q0DO//tsEOYk5FKtz0rNF QrGnFdKNZoO+0BE9sVkqEzyVAxglctKH3Ikpk8auS1+xJ03KkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMICpqMo570R6RfBxgw4ls/O4eKqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDEwNTlkMzQtOGVhYy0z NTIzLThjYTYtMDAxNmE1ZDJhYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgb8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILq+OUby9zDQYMRHAwOiQ2aoEJ1HqlBPSwe05dEHrjuqv1nW38BYNg3 GtC38u46SIfyHBklwHy0zH0M0Rv7fXfgXeqGFwE9RuHcZruzPoqKUYmA0n5spD7D 0nvQu1ZV0LQek1EISLjZupGxW4w/OUSJDkDq/un3zB9Hy0XdvxYmNfD1LfQlFJny CC5AATVzeDi+V7609Rq2d8RINTgg4imlO34CQYscd5rrXidp8hOJTQPpOPBoft9Q /qlS1YVfx/y7IgSrDGLaXmQZh9Ejr9O+nfQU7I8Cpvm/V2PuboNU6Y6EGBuQsDE0 gxbPn7fHM4dNnZzHqhr7l+B8klAl4ok= -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:03 2025 by rpki-client