This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/421cc3c0-f28f-35bb-a9ec-9956d4e7729d.roa File: 421cc3c0-f28f-35bb-a9ec-9956d4e7729d.roa (raw, json) Hash identifier: ht7zBWDUZFKgQBFegvZx+5gbMHRtsIoj9zKYVnCdkRo= Subject key identifier: 31:31:11:FA:F2:62:BE:F7:55:8A:C4:3B:4D:CF:6E:12:56:05:EC:83 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCF0072F0D2D20509D944EDC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/421cc3c0-f28f-35bb-a9ec-9956d4e7729d.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.156.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:72:f0:d2:d2:05:09:d9:44:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=a41bcd73-899a-4788-819c-145ced90d6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:ed:6e:36:28:0b:ae:b2:97:aa:59:70:1e: f0:da:e9:70:a6:0a:21:24:f5:16:12:8c:b1:b1:58: 88:0f:15:1e:5f:e5:27:3f:48:62:45:f4:9a:c9:4a: 1a:c0:91:fa:ed:e5:2f:52:06:96:6e:e9:e1:46:01: 96:49:49:51:8f:88:df:25:9e:58:e8:df:3d:fe:e2: 66:48:70:5b:a2:9f:e8:d8:87:a7:b5:1c:e5:a2:40: 42:c4:48:ca:16:b8:7c:e0:4c:02:af:98:84:27:7d: fe:d0:2f:5f:2c:9c:58:0e:10:fc:ae:d1:fc:3d:6f: 34:f0:17:4d:d7:eb:d4:8c:3c:f6:34:cf:d8:f3:8c: 3c:11:21:47:a3:b3:9d:9c:a6:8e:71:68:ca:8b:24: 7b:7f:1c:31:94:92:18:7c:a8:a3:4c:04:1d:f6:0a: d9:1d:4b:3b:75:26:fc:a1:04:a1:6d:1b:c6:e5:54: 52:9c:99:c0:cc:a8:b1:a8:fd:2f:4c:0d:1c:06:e0: 3e:ce:00:b6:af:d5:29:6b:53:50:9c:22:25:f6:c3: c2:b6:82:64:0d:2a:45:11:f3:ae:e8:f6:45:fb:7f: 2b:95:9f:01:2b:5c:23:88:93:16:cd:5f:58:d6:c5: 4a:ab:ee:69:74:0b:3c:2b:1e:9d:2b:67:21:8b:4e: 6d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:31:11:FA:F2:62:BE:F7:55:8A:C4:3B:4D:CF:6E:12:56:05:EC:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/421cc3c0-f28f-35bb-a9ec-9956d4e7729d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.156.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:39:3d:42:a7:33:ef:2b:9f:94:43:cf:8c:45:a0:a3:bb:35: 5a:82:95:c3:83:3e:96:4d:6c:78:f9:c9:a5:75:a9:c6:76:1c: 1a:33:d2:ae:e7:bb:2d:cb:08:53:87:ab:f0:6f:86:ab:f3:8c: be:cd:a2:2c:10:4b:bc:79:53:f5:0d:bf:37:f3:7f:2b:61:dd: 21:94:5e:f6:94:77:d8:ed:3e:02:e9:5d:1e:12:f4:53:ff:83: 58:16:2a:12:5a:7f:17:c9:c5:29:81:c8:2a:67:fb:34:e6:a3: 46:46:51:6e:dd:bb:7a:1f:53:83:41:cb:1e:2a:59:db:27:9a: ba:9b:d7:a9:c2:9a:c2:89:ce:37:0f:b9:b1:ab:c6:45:d3:8e: 6a:9f:f5:52:dd:f1:46:b9:28:19:ca:88:1f:38:aa:fc:20:dc: 11:33:d5:6d:b1:c5:60:f8:80:26:61:12:d0:a3:02:91:5a:ca: 97:68:a1:0f:11:27:b6:90:ee:d8:03:21:3d:52:d8:17:20:54: 62:90:49:40:c5:40:df:5b:bd:23:b4:aa:a3:da:1e:fe:b0:c6: b8:97:b0:69:87:9b:71:37:63:88:1c:cb:de:88:92:61:a6:0d: 70:ec:da:5b:99:61:64:54:22:87:a5:c2:2f:dd:3a:c1:78:4e: 76:d0:c2:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAHLw0tIFCdlE7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk YTQxYmNkNzMtODk5YS00Nzg4LTgxOWMtMTQ1Y2VkOTBkNmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkftbjYoC66yl6pZcB7w2ulwpgohJPUWEoyx sViIDxUeX+UnP0hiRfSayUoawJH67eUvUgaWbunhRgGWSUlRj4jfJZ5Y6N89/uJm SHBbop/o2IentRzlokBCxEjKFrh84EwCr5iEJ33+0C9fLJxYDhD8rtH8PW808BdN 1+vUjDz2NM/Y84w8ESFHo7OdnKaOcWjKiyR7fxwxlJIYfKijTAQd9grZHUs7dSb8 oQShbRvG5VRSnJnAzKixqP0vTA0cBuA+zgC2r9Upa1NQnCIl9sPCtoJkDSpFEfOu 6PZF+38rlZ8BK1wjiJMWzV9Y1sVKq+5pdAs8Kx6dK2chi05tMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDExEfryYr73VYrEO03PbhJWBeyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDIxY2MzYzAtZjI4Zi0z NWJiLWE5ZWMtOTk1NmQ0ZTc3MjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ5PUKnM+8rn5RDz4xFoKO7NVqClcODPpZNbHj5yaV1qcZ2HBoz0q7n uy3LCFOHq/BvhqvzjL7NoiwQS7x5U/UNvzfzfyth3SGUXvaUd9jtPgLpXR4S9FP/ g1gWKhJafxfJxSmByCpn+zTmo0ZGUW7du3ofU4NByx4qWdsnmrqb16nCmsKJzjcP ubGrxkXTjmqf9VLd8Ua5KBnKiB84qvwg3BEz1W2xxWD4gCZhEtCjApFaypdooQ8R J7aQ7tgDIT1S2BcgVGKQSUDFQN9bvSO0qqPaHv6wxriXsGmHm3E3Y4gcy96IkmGm DXDs2luZYWRUIoelwi/dOsF4TnbQwuM= -----END CERTIFICATE-----Generated at Sat Dec 6 17:37:17 2025 by rpki-client