This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abda09be-fab4-32da-9fec-a75f89cd4903.roa File: abda09be-fab4-32da-9fec-a75f89cd4903.roa (raw, json) Hash identifier: Rzlv9ZkKNDo1jYhLsc6NIXPtQrgv5VO/yJPITq2fBig= Subject key identifier: 81:39:FB:49:75:C3:48:7F:F8:B6:C9:A1:7C:02:D9:47:74:29:1F:76 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BD8C5CAB0B7ADDB1A29BA7C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abda09be-fab4-32da-9fec-a75f89cd4903.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 129.152.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:ca:b0:b7:ad:db:1a:29:ba:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=47c1b4bf-770a-4e37-aee2-4fb39b9d38b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:da:b5:fe:c0:c6:42:0e:22:84:a6:98:55:7d: 81:06:e4:11:f9:e7:af:c6:dd:c3:c3:04:f2:a6:8f: 10:50:44:03:36:f5:58:03:a8:ff:57:5f:dd:1d:ce: ce:1d:e6:95:b3:95:af:5a:df:b1:2b:49:87:b6:1d: b9:86:7b:19:74:92:5e:54:24:54:01:83:ff:49:05: 28:46:8a:62:29:ff:99:16:02:c0:5b:18:98:a4:f3: 98:49:4c:89:b3:23:86:a9:72:12:31:16:90:6d:de: fc:da:9a:98:d2:23:d5:6e:3d:0f:f6:a8:d0:71:7f: 6b:41:de:56:84:2f:0c:f4:4a:ff:d7:d3:b4:cd:7b: c8:77:7c:41:46:72:48:b1:39:87:f1:87:c2:aa:ed: 75:d6:2b:e9:6f:c3:08:5a:a9:fe:7d:d3:06:ef:46: 7b:46:a9:b6:9e:f6:6f:16:46:51:d9:e9:8b:90:04: ad:9c:13:34:e7:9d:b2:5d:4d:e4:a8:79:e2:d0:e1: c7:93:b8:4e:6a:d9:fc:37:e5:91:91:6d:fe:ed:6c: 76:62:4a:9e:bc:2c:16:f7:02:6c:aa:8d:bd:f3:91: 0a:1f:cd:0f:09:d7:98:0a:3e:dd:4d:32:81:24:8b: ca:24:df:9e:ef:06:15:90:63:f5:6a:84:ec:1c:74: 3c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:39:FB:49:75:C3:48:7F:F8:B6:C9:A1:7C:02:D9:47:74:29:1F:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abda09be-fab4-32da-9fec-a75f89cd4903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.152.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0a:9c:37:19:7b:c4:ac:2d:90:fe:cc:8a:a2:63:22:b6:ae: 13:45:ba:fa:06:e1:97:bc:91:23:3c:c9:f7:43:e3:e6:91:f2: 76:8c:d2:57:4a:fe:0f:9e:e7:a3:6e:55:05:4b:db:b0:bf:b8: 21:70:69:2a:89:40:8d:14:8c:69:77:f5:64:f7:bf:72:f0:8c: 28:e0:1d:d9:e5:f4:f1:54:04:03:49:e0:e5:67:ca:95:e0:9f: 11:f6:ea:5f:47:01:14:9d:94:b2:77:ba:4a:74:ed:6a:dd:71: 90:df:d4:aa:a2:f4:d2:c6:b1:33:e7:24:70:1a:aa:5d:f8:d1: f9:fe:76:3c:b9:c3:86:68:c1:01:6c:a0:b7:0d:96:b7:3a:08: 02:74:f0:3e:64:29:2e:b2:91:8a:05:24:4e:f2:01:5d:7d:90: 60:73:56:9f:9f:40:1f:5f:b8:49:a0:fd:ea:08:6f:fe:b2:37: 12:b9:a6:c2:06:13:56:4d:c0:65:0e:a1:8d:19:d3:0d:83:30: 80:57:1b:ba:62:ee:48:27:95:b8:7b:2a:bf:7d:5c:66:17:a5: aa:71:06:24:51:e2:68:fd:7a:2c:35:5d:61:26:07:c3:41:52: 67:6a:b0:f6:33:9b:fe:bc:65:8f:28:16:71:99:10:36:a2:51: d5:71:23:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxcqwt63bGim6fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk NDdjMWI0YmYtNzcwYS00ZTM3LWFlZTItNGZiMzliOWQzOGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdq1/sDGQg4ihKaYVX2BBuQR+eevxt3DwwTy po8QUEQDNvVYA6j/V1/dHc7OHeaVs5WvWt+xK0mHth25hnsZdJJeVCRUAYP/SQUo RopiKf+ZFgLAWxiYpPOYSUyJsyOGqXISMRaQbd782pqY0iPVbj0P9qjQcX9rQd5W hC8M9Er/19O0zXvId3xBRnJIsTmH8YfCqu111ivpb8MIWqn+fdMG70Z7Rqm2nvZv FkZR2emLkAStnBM0552yXU3kqHni0OHHk7hOatn8N+WRkW3+7Wx2YkqevCwW9wJs qo2985EKH80PCdeYCj7dTTKBJIvKJN+e7wYVkGP1aoTsHHQ8hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIE5+0l1w0h/+LbJoXwC2Ud0KR92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWJkYTA5YmUtZmFiNC0z MmRhLTlmZWMtYTc1Zjg5Y2Q0OTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkKnDcZe8SsLZD+zIqiYyK2rhNFuvoG4Ze8kSM8yfdD4+aR8naM0ldK /g+e56NuVQVL27C/uCFwaSqJQI0UjGl39WT3v3LwjCjgHdnl9PFUBANJ4OVnypXg nxH26l9HARSdlLJ3ukp07WrdcZDf1Kqi9NLGsTPnJHAaql340fn+djy5w4ZowQFs oLcNlrc6CAJ08D5kKS6ykYoFJE7yAV19kGBzVp+fQB9fuEmg/eoIb/6yNxK5psIG E1ZNwGUOoY0Z0w2DMIBXG7pi7kgnlbh7Kr99XGYXpapxBiRR4mj9eiw1XWEmB8NB UmdqsPYzm/68ZY8oFnGZEDaiUdVxI54= -----END CERTIFICATE-----Generated at Sun Dec 7 01:22:08 2025 by rpki-client