This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7671c24b-d8bc-3067-9f58-6b9f8d8bdd71.roa File: 7671c24b-d8bc-3067-9f58-6b9f8d8bdd71.roa (raw, json) Hash identifier: 2Abhw1CRN7q1ycc1Cs9uKONzaeEdeUZxgjF5tV+E14o= Subject key identifier: 6B:1C:03:AB:91:00:58:48:3D:78:ED:E4:DE:DB:6B:13:0C:35:A8:44 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BD065B58F717C5E74A91A5300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7671c24b-d8bc-3067-9f58-6b9f8d8bdd71.roa Signing time: Mon 10 Nov 2025 14:00:38 +0000 ROA not before: Mon 10 Nov 2025 14:00:38 +0000 ROA not after: Sun 08 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 129.146.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d0:65:b5:8f:71:7c:5e:74:a9:1a:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 14:00:38 2025 GMT Not After : Feb 8 14:00:38 2026 GMT Subject: CN=153b41de-fcdd-47f5-bb76-3298b4d27115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0e:7b:88:1b:7f:f6:f4:27:0d:fc:13:bb:f9: d0:dd:fe:f9:70:ce:8a:28:c5:83:58:9b:7e:b0:72: 4c:79:1f:73:f6:e7:38:e2:18:0d:d4:5c:b2:e5:25: 87:20:d6:88:a1:1b:cb:83:33:38:02:71:38:bf:28: 8f:28:87:4b:37:52:bd:bc:2c:d8:20:0c:9b:a4:4d: 90:69:a9:00:45:28:1f:e0:a0:51:f2:01:c7:ea:5e: 92:8a:b5:71:52:13:9b:7c:50:ed:8c:96:e0:fe:0d: 68:7a:b4:3d:6c:98:c6:1a:df:cd:9d:e4:93:d9:ee: fd:29:8e:2c:83:dc:fc:eb:a6:0d:fb:be:35:c7:ca: 68:51:8d:08:0f:ef:f1:ee:e5:19:21:18:36:ca:82: ca:b1:73:1b:5f:39:b1:49:53:e1:32:e1:e0:3a:55: 1e:cc:b0:ac:7e:cd:64:f4:e5:7f:fe:96:25:65:e2: 61:9d:d0:ed:b5:a3:57:fc:49:2e:70:db:86:9b:1a: 12:51:15:ab:28:ac:3e:29:6c:0a:0d:60:86:40:dc: 33:b8:7d:f3:b0:d1:c1:80:75:6b:38:31:0d:6b:0f: 3d:14:38:0d:88:8a:93:8f:06:6e:87:43:86:96:fb: 7e:45:20:0f:e6:a7:f5:ca:6c:a3:6c:a8:6a:2a:ec: 7b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1C:03:AB:91:00:58:48:3D:78:ED:E4:DE:DB:6B:13:0C:35:A8:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7671c24b-d8bc-3067-9f58-6b9f8d8bdd71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:4f:94:ff:dc:99:32:d6:dc:59:26:bf:90:a2:fc:5e:d2:d9: 8c:0d:29:47:d1:2c:d0:ba:77:4d:73:36:5d:53:22:12:40:c3: 74:47:2f:43:17:83:c3:71:4f:d4:cc:af:8f:b7:32:51:05:b7: 57:2a:a5:fe:36:6f:f2:34:5d:97:bc:23:4f:16:69:09:cf:aa: 9a:d1:ac:f0:fa:31:8b:3d:79:24:d3:c4:6b:76:3c:86:db:8d: 68:28:22:09:d8:e2:bb:7f:63:b2:5b:3c:b6:4d:87:83:30:72: ea:47:63:59:fe:e3:95:df:2e:1b:5a:c9:03:0a:b0:dc:fb:6b: fc:5e:d9:d0:29:aa:e2:82:3b:85:d1:94:fd:5e:d0:d5:c1:7f: d9:17:23:49:02:b7:b9:09:a0:07:8c:d1:b8:b1:e3:a9:9d:cd: f9:8d:b5:f7:bc:08:6f:a0:3a:17:b4:80:58:fb:6b:46:f3:4a: f6:10:87:ee:62:92:b0:9f:38:a8:2c:bc:9c:bb:fa:54:ab:0a: d8:9c:2a:88:0e:43:f7:93:cd:fb:3a:27:c6:77:74:26:14:29: 20:ce:e6:ee:cc:b1:a9:40:02:a0:1d:61:b4:f1:ba:2a:a3:44: 60:c1:f8:69:6f:d8:68:12:a6:0b:9e:26:3e:64:af:35:a8:9b: 44:a4:7a:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvQZbWPcXxedKkaUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDE0MDAzOFoXDTI2MDIwODE0MDAzOFowLzEtMCsGA1UEAxMk MTUzYjQxZGUtZmNkZC00N2Y1LWJiNzYtMzI5OGI0ZDI3MTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg57iBt/9vQnDfwTu/nQ3f75cM6KKMWDWJt+ sHJMeR9z9uc44hgN1Fyy5SWHINaIoRvLgzM4AnE4vyiPKIdLN1K9vCzYIAybpE2Q aakARSgf4KBR8gHH6l6SirVxUhObfFDtjJbg/g1oerQ9bJjGGt/NneST2e79KY4s g9z866YN+741x8poUY0ID+/x7uUZIRg2yoLKsXMbXzmxSVPhMuHgOlUezLCsfs1k 9OV//pYlZeJhndDttaNX/EkucNuGmxoSURWrKKw+KWwKDWCGQNwzuH3zsNHBgHVr ODENaw89FDgNiIqTjwZuh0OGlvt+RSAP5qf1ymyjbKhqKux76wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGscA6uRAFhIPXjt5N7baxMMNahEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzY3MWMyNGItZDhiYy0z MDY3LTlmNTgtNmI5ZjhkOGJkZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRPlP/cmTLW3Fkmv5Ci/F7S2YwNKUfRLNC6d01zNl1TIhJAw3RHL0MX g8NxT9TMr4+3MlEFt1cqpf42b/I0XZe8I08WaQnPqprRrPD6MYs9eSTTxGt2PIbb jWgoIgnY4rt/Y7JbPLZNh4MwcupHY1n+45XfLhtayQMKsNz7a/xe2dApquKCO4XR lP1e0NXBf9kXI0kCt7kJoAeM0bix46mdzfmNtfe8CG+gOhe0gFj7a0bzSvYQh+5i krCfOKgsvJy7+lSrCticKogOQ/eTzfs6J8Z3dCYUKSDO5u7MsalAAqAdYbTxuiqj RGDB+Glv2GgSpgueJj5krzWom0SkehM= -----END CERTIFICATE-----Generated at Sat Dec 6 17:38:44 2025 by rpki-client