This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa File: ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa (raw, json) Hash identifier: cFWvMQ+rNEuyaUAE+Wgz+Mj2kHqk3c/dsn+hprLOCz4= Subject key identifier: 16:1E:5A:81:F9:A9:2A:78:B9:28:95:32:BE:9E:1E:1E:9B:7F:B2:18 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCD9F38F179E179E5BCD62B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 129.149.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9f:38:f1:79:e1:79:e5:bc:d6:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=30effba6-4e84-423c-b4a8-1c88008999a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f4:7b:6e:1a:56:88:b9:c6:90:08:41:c6:15: cc:f2:dd:f8:9a:fc:86:b7:38:6b:6a:af:3b:08:e1: f0:20:20:21:af:56:aa:49:3f:8d:69:f2:cd:4f:14: 46:09:a5:55:e8:db:63:ac:8b:90:6d:03:2e:1e:f5: 76:22:a3:e4:4f:c5:f6:cc:6b:e8:7f:12:70:05:27: f9:bb:94:67:21:db:8e:f6:d8:15:3c:41:13:e7:fb: b9:81:b7:0c:20:f5:cb:cf:c9:2a:dd:bc:f4:e5:dd: d6:8b:71:3e:2f:46:33:f4:75:5a:34:1d:61:a9:2a: f1:a2:7b:bf:19:ae:8f:5f:96:58:f8:fc:f8:40:52: f3:12:81:d0:93:b8:4e:b5:dd:2a:8d:05:8e:a5:7d: 56:d1:f6:1b:9a:a9:f1:63:33:62:0a:4a:ab:40:f8: a2:16:d3:85:b6:58:a6:b7:9d:8f:17:b3:66:26:a4: 81:81:f6:70:e9:60:3f:63:31:6a:5d:87:50:f9:0f: 1c:f2:36:50:2e:16:db:78:97:c5:76:68:41:b4:d6: a4:8c:10:9d:1e:ce:cc:82:b6:87:35:d0:87:a1:52: f2:ef:eb:0d:31:c2:9e:0a:02:ef:ad:8e:d5:2d:47: 6f:37:6c:76:05:90:91:14:e8:74:b7:4c:de:85:65: e3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1E:5A:81:F9:A9:2A:78:B9:28:95:32:BE:9E:1E:1E:9B:7F:B2:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ded1d1c7-eb6a-3651-8ada-ff38787f209c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.149.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:45:69:16:14:54:78:3a:3b:32:8e:18:d9:0b:0b:44:a2:f1: fa:e1:8d:70:f6:14:62:75:61:5b:9b:d6:3c:8d:93:a7:b4:dc: fb:52:37:8b:b6:d3:7a:d8:cc:69:03:6e:83:5b:c9:23:84:0c: 79:db:c3:89:08:61:fb:79:88:26:05:92:47:f5:2d:a9:e3:86: 07:09:69:e0:18:03:fb:7c:eb:5b:43:ee:e2:6c:b9:01:af:40: 3a:5a:1a:79:9e:fd:2f:dc:78:b5:c9:ca:a9:84:2f:e6:78:09: fb:4d:69:db:39:63:2a:c3:89:25:b9:c1:1a:7e:8e:10:a5:dc: fe:11:a9:ec:5d:41:cd:dd:f3:25:f7:e3:84:63:66:92:28:97: c8:c3:49:04:4a:92:5b:d5:92:c2:04:3f:6e:7c:e2:1d:b7:af: b0:ec:c0:49:a4:06:ae:3f:3f:c8:7c:bf:3a:3e:66:fe:77:6f: 80:90:66:6e:53:86:5d:a6:cf:47:f4:e5:0b:9f:3a:43:f7:74: a1:2e:3b:ec:3b:05:de:f3:e5:ae:82:75:af:cb:51:b3:9d:12: 09:57:90:67:30:9b:f4:ab:ac:93:e2:2e:12:c7:a9:63:39:74: b7:fe:6e:6b:19:af:87:32:fc:6c:41:20:bd:de:4d:5c:dc:74: 3d:40:e5:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNnzjxeeF55bzWK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk MzBlZmZiYTYtNGU4NC00MjNjLWI0YTgtMWM4ODAwODk5OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfR7bhpWiLnGkAhBxhXM8t34mvyGtzhraq87 COHwICAhr1aqST+NafLNTxRGCaVV6NtjrIuQbQMuHvV2IqPkT8X2zGvofxJwBSf5 u5RnIduO9tgVPEET5/u5gbcMIPXLz8kq3bz05d3Wi3E+L0Yz9HVaNB1hqSrxonu/ Ga6PX5ZY+Pz4QFLzEoHQk7hOtd0qjQWOpX1W0fYbmqnxYzNiCkqrQPiiFtOFtlim t52PF7NmJqSBgfZw6WA/YzFqXYdQ+Q8c8jZQLhbbeJfFdmhBtNakjBCdHs7MgraH NdCHoVLy7+sNMcKeCgLvrY7VLUdvN2x2BZCRFOh0t0zehWXjfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYeWoH5qSp4uSiVMr6eHh6bf7IYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGVkMWQxYzctZWI2YS0z NjUxLThhZGEtZmYzODc4N2YyMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNFaRYUVHg6OzKOGNkLC0Si8frhjXD2FGJ1YVub1jyNk6e03PtSN4u2 03rYzGkDboNbySOEDHnbw4kIYft5iCYFkkf1LanjhgcJaeAYA/t861tD7uJsuQGv QDpaGnme/S/ceLXJyqmEL+Z4CftNads5YyrDiSW5wRp+jhCl3P4RqexdQc3d8yX3 44RjZpIol8jDSQRKklvVksIEP2584h23r7DswEmkBq4/P8h8vzo+Zv53b4CQZm5T hl2mz0f05QufOkP3dKEuO+w7Bd7z5a6Cda/LUbOdEglXkGcwm/SrrJPiLhLHqWM5 dLf+bmsZr4cy/GxBIL3eTVzcdD1A5Uk= -----END CERTIFICATE-----Generated at Sat Dec 6 23:33:50 2025 by rpki-client