This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3393e36-840c-3423-b7f0-72bb2ab9e1e2.roa File: c3393e36-840c-3423-b7f0-72bb2ab9e1e2.roa (raw, json) Hash identifier: JgAGCel3O7jb1HAXkijIgvCQCZPI8P4PXpogwXy+zEI= Subject key identifier: A3:A1:FC:69:79:91:49:DB:C9:30:EE:21:A3:48:2F:04:41:7A:17:EA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C06D619AAA74F3F6B6D04BD80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3393e36-840c-3423-b7f0-72bb2ab9e1e2.roa Signing time: Sun 30 Nov 2025 02:00:31 +0000 ROA not before: Sun 30 Nov 2025 02:00:31 +0000 ROA not after: Sat 28 Feb 2026 02:00:31 +0000 asID: 54253 IP address blocks: 131.186.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:06:d6:19:aa:a7:4f:3f:6b:6d:04:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 30 02:00:31 2025 GMT Not After : Feb 28 02:00:31 2026 GMT Subject: CN=1ff87e38-0ccf-4c03-a1d8-ac0a6cef1a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:1b:9e:e3:bf:9c:cb:1d:79:d9:72:63:98: 2e:68:c2:cc:48:dc:f9:fd:d0:4d:14:8d:5b:1a:61: db:49:41:f8:30:e5:30:55:6f:61:d3:76:41:c4:cf: 91:a2:0d:37:c2:30:44:af:77:92:46:c5:2c:fb:51: d5:82:f6:ed:8e:6a:71:7e:4a:55:9e:1b:07:33:e8: f0:7c:79:61:53:92:78:84:8a:c7:48:69:ed:24:53: 3c:e1:46:94:19:15:99:b8:9b:2e:9a:08:bc:f3:0d: 95:14:e8:3e:af:46:53:8b:2d:b9:a3:4b:04:3b:d0: 89:6a:15:38:16:72:dd:38:0f:52:ff:53:97:1a:d4: e5:eb:e5:aa:d6:d7:81:3f:f3:10:a7:fb:7e:8b:9e: f6:84:51:20:a3:b9:2e:6c:53:b4:1c:96:c7:27:79: 9e:92:11:58:07:a2:37:fb:6b:8a:7b:3f:d8:d1:a4: b9:15:42:db:09:c2:54:fe:37:61:4e:69:cb:53:c4: fd:ba:ec:68:5c:8a:68:99:b3:d3:33:8e:52:7d:9f: 65:59:a4:7c:31:58:35:4c:18:48:df:85:64:3a:2f: 98:8b:13:b8:a9:ea:ac:aa:59:63:d0:fa:58:f4:0e: e0:dd:f1:d3:cf:3e:ac:3f:c4:44:1c:ff:c7:a9:14: 05:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A1:FC:69:79:91:49:DB:C9:30:EE:21:A3:48:2F:04:41:7A:17:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3393e36-840c-3423-b7f0-72bb2ab9e1e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 131.186.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b8:68:f0:bd:b5:4b:85:c1:c3:98:5a:2e:82:f0:9a:1b:37: b3:c4:d8:e7:77:0e:78:a7:a8:aa:2f:45:9d:30:d3:5d:96:26: e9:2f:b4:b3:68:66:1c:ec:98:be:b5:09:9f:dc:17:a0:c2:30: aa:87:0b:92:a1:89:eb:ef:ae:e6:d4:7c:37:16:d6:a4:5b:3c: fc:92:e9:b9:39:6a:5e:fb:07:4a:c3:d2:37:ac:f6:55:22:7c: 1b:2d:ac:3b:80:ae:a8:e4:e1:09:42:f9:bb:05:6a:23:ec:ee: 1b:3f:00:67:3c:c7:96:74:98:c8:6e:03:ca:2d:4d:9c:8e:1b: df:b8:49:6e:43:cf:7b:b7:c8:46:9d:45:d8:76:0e:22:f5:64: 43:af:31:63:6a:24:89:79:18:08:93:a5:76:3f:97:a0:55:f1: d9:d5:47:6f:a4:1f:65:b6:5c:92:b6:a2:74:1f:f0:e5:36:a1: fc:02:f9:6e:db:3b:4b:0a:63:39:a1:d9:5f:4f:2e:0e:dc:a9: be:86:3f:78:22:0a:e3:97:ee:f3:9e:81:91:58:7d:4d:41:6a: 57:f4:11:e8:2b:76:fe:d0:7f:dc:35:1a:b4:b3:26:5b:ad:ce: 1b:89:d4:11:45:97:28:be:d6:62:aa:d0:de:2a:94:a5:f5:c3: 62:66:b5:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwG1hmqp08/a20EvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEzMDAyMDAzMVoXDTI2MDIyODAyMDAzMVowLzEtMCsGA1UEAxMk MWZmODdlMzgtMGNjZi00YzAzLWExZDgtYWMwYTZjZWYxYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSEbnuO/nMsdedlyY5guaMLMSNz5/dBNFI1b GmHbSUH4MOUwVW9h03ZBxM+Rog03wjBEr3eSRsUs+1HVgvbtjmpxfkpVnhsHM+jw fHlhU5J4hIrHSGntJFM84UaUGRWZuJsumgi88w2VFOg+r0ZTiy25o0sEO9CJahU4 FnLdOA9S/1OXGtTl6+Wq1teBP/MQp/t+i572hFEgo7kubFO0HJbHJ3mekhFYB6I3 +2uKez/Y0aS5FULbCcJU/jdhTmnLU8T9uuxoXIpombPTM45SfZ9lWaR8MVg1TBhI 34VkOi+YixO4qeqsqllj0PpY9A7g3fHTzz6sP8REHP/HqRQFiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOh/Gl5kUnbyTDuIaNILwRBehfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzMzOTNlMzYtODQwYy0z NDIzLWI3ZjAtNzJiYjJhYjllMWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg7poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO4aPC9tUuFwcOYWi6C8JobN7PE2Od3DninqKovRZ0w012WJukvtLNo ZhzsmL61CZ/cF6DCMKqHC5KhievvrubUfDcW1qRbPPyS6bk5al77B0rD0jes9lUi fBstrDuArqjk4QlC+bsFaiPs7hs/AGc8x5Z0mMhuA8otTZyOG9+4SW5Dz3u3yEad Rdh2DiL1ZEOvMWNqJIl5GAiTpXY/l6BV8dnVR2+kH2W2XJK2onQf8OU2ofwC+W7b O0sKYzmh2V9PLg7cqb6GP3giCuOX7vOegZFYfU1Balf0Eegrdv7Qf9w1GrSzJlut zhuJ1BFFlyi+1mKq0N4qlKX1w2JmtcU= -----END CERTIFICATE-----Generated at Sat Dec 6 17:39:08 2025 by rpki-client