This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef7bd3fc-daa4-3284-87e7-0cb8a942c361.roa File: ef7bd3fc-daa4-3284-87e7-0cb8a942c361.roa (raw, json) Hash identifier: OwZ9ZwY03U4DqfcfiDM1bfDVbvj0yNC/KBjmzT5QhIY= Subject key identifier: 5B:45:A9:89:09:56:0C:33:85:32:6D:DF:73:08:61:39:1B:62:5C:DB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCC35C026F315A20855C12F40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef7bd3fc-daa4-3284-87e7-0cb8a942c361.roa Signing time: Sun 09 Nov 2025 02:00:31 +0000 ROA not before: Sun 09 Nov 2025 02:00:31 +0000 ROA not after: Sat 07 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 129.148.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cc:35:c0:26:f3:15:a2:08:55:c1:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 9 02:00:31 2025 GMT Not After : Feb 7 02:00:31 2026 GMT Subject: CN=2c5c6f17-4e43-4def-9c16-b7052e95af34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:8e:26:41:cb:cc:07:23:cc:23:30:61:31: 1a:9a:2b:11:b7:36:b2:7c:3f:09:ff:65:b1:11:23: 3b:b6:68:a0:c4:02:49:ad:c0:ad:69:d4:6f:47:a2: 82:03:e1:99:9b:c4:fa:a0:26:b5:5b:b0:20:0c:88: 19:a7:36:37:06:eb:f0:af:aa:40:36:5d:63:a2:96: 33:89:92:91:4c:81:00:24:4e:93:4e:4b:2a:58:a3: 7a:46:d7:4a:72:72:8c:54:58:8f:b0:04:f3:8d:b6: 45:cf:8c:b8:cc:54:db:1d:f8:91:06:8d:ed:aa:2f: 79:5d:e6:74:3e:86:db:26:c7:18:eb:67:4a:ab:20: 70:da:e3:01:35:14:aa:b0:25:9f:ea:a8:3f:3f:da: d1:52:55:34:33:62:23:f6:c4:91:67:7d:40:d5:54: da:1b:11:a6:ea:ba:6f:55:39:3e:bb:bf:44:ae:69: 2a:03:6e:4d:45:4c:08:d5:46:4b:1f:f6:52:77:77: 11:4a:c7:d9:6f:8d:b6:21:53:fb:a4:ab:6b:e1:3f: b0:93:c6:85:e2:88:24:c9:27:f4:2a:a0:63:bc:bc: 8d:a8:df:42:54:f7:6c:83:11:35:d9:4b:b8:ab:76: 5e:6d:f1:a1:3f:5d:dc:73:2b:4d:51:81:73:0c:43: a7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:45:A9:89:09:56:0C:33:85:32:6D:DF:73:08:61:39:1B:62:5C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ef7bd3fc-daa4-3284-87e7-0cb8a942c361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.148.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:25:cb:72:98:28:4c:99:4c:2a:fb:d7:4f:67:c2:19:5d:e9: fa:91:b9:d6:8f:e2:67:b1:fb:39:73:6c:fd:0f:77:e0:83:fc: 35:65:d8:3b:a7:49:8f:6a:37:0c:e6:f3:a6:20:39:53:c1:70: 37:ff:15:4b:a3:9e:50:5c:a2:ee:50:92:68:5b:96:64:f5:3d: c4:a0:69:9c:5a:67:ed:dd:07:6b:92:61:d8:ea:46:b8:8f:e3: f2:40:40:dd:42:48:6b:70:f6:e2:c2:55:73:b8:f7:78:ee:8e: 25:70:61:86:2b:9d:73:5a:5a:82:0b:fd:b8:17:f8:09:b3:cb: 61:fd:63:cf:03:85:d3:0a:94:7c:a8:89:2c:f8:3f:c0:22:07: d8:cd:5e:40:86:ff:d9:a8:3e:10:56:2c:77:5d:69:94:99:9f: 0f:fd:c5:f4:9e:79:6b:01:f8:ea:ae:cc:80:15:79:67:72:19: 7b:e6:e2:0b:56:d1:8f:56:eb:3d:09:60:72:49:3c:e2:a6:39: 85:a2:f4:15:dc:97:cb:3f:76:25:7d:98:df:2f:b3:51:0c:3d: 37:48:40:6e:ea:cc:14:8c:72:4d:f7:a4:25:0d:ed:59:54:7e: bf:a4:96:42:1c:b6:22:0b:a5:60:fb:51:45:f8:62:02:b9:0d: a6:be:56:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvMNcAm8xWiCFXBL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwOTAyMDAzMVoXDTI2MDIwNzAyMDAzMVowLzEtMCsGA1UEAxMk MmM1YzZmMTctNGU0My00ZGVmLTljMTYtYjcwNTJlOTVhZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZKOJkHLzAcjzCMwYTEamisRtzayfD8J/2Wx ESM7tmigxAJJrcCtadRvR6KCA+GZm8T6oCa1W7AgDIgZpzY3Buvwr6pANl1jopYz iZKRTIEAJE6TTksqWKN6RtdKcnKMVFiPsATzjbZFz4y4zFTbHfiRBo3tqi95XeZ0 PobbJscY62dKqyBw2uMBNRSqsCWf6qg/P9rRUlU0M2Ij9sSRZ31A1VTaGxGm6rpv VTk+u79ErmkqA25NRUwI1UZLH/ZSd3cRSsfZb422IVP7pKtr4T+wk8aF4ogkySf0 KqBjvLyNqN9CVPdsgxE12Uu4q3ZebfGhP13ccytNUYFzDEOngQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtFqYkJVgwzhTJt33MIYTkbYlzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWY3YmQzZmMtZGFhNC0z Mjg0LTg3ZTctMGNiOGE5NDJjMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEly3KYKEyZTCr7109nwhld6fqRudaP4mex+zlzbP0Pd+CD/DVl2Dun SY9qNwzm86YgOVPBcDf/FUujnlBcou5QkmhblmT1PcSgaZxaZ+3dB2uSYdjqRriP 4/JAQN1CSGtw9uLCVXO493jujiVwYYYrnXNaWoIL/bgX+Amzy2H9Y88DhdMKlHyo iSz4P8AiB9jNXkCG/9moPhBWLHddaZSZnw/9xfSeeWsB+OquzIAVeWdyGXvm4gtW 0Y9W6z0JYHJJPOKmOYWi9BXcl8s/diV9mN8vs1EMPTdIQG7qzBSMck33pCUN7VlU fr+klkIctiILpWD7UUX4YgK5Daa+Vn4= -----END CERTIFICATE-----Generated at Sat Dec 6 17:38:57 2025 by rpki-client