This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/faf56999-57e6-37e7-b0c9-6130e35b117a.roa File: faf56999-57e6-37e7-b0c9-6130e35b117a.roa (raw, json) Hash identifier: x0pl6+cQjFkwjZyMdmz0VX662GKLATLm2qa+ci7GPkI= Subject key identifier: 33:7F:11:D8:53:3C:77:1D:3B:78:AD:E9:DF:81:BA:BA:4F:62:14:37 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BD8C5CA77C6CA0F395E010000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/faf56999-57e6-37e7-b0c9-6130e35b117a.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 129.145.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:ca:77:c6:ca:0f:39:5e:01:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=3031e426-3685-4c28-9bdc-cab719f0e11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:be:1a:2f:59:8c:c9:bc:ee:f4:5e:cf:02:41: 30:c6:34:79:e6:d5:51:16:b4:2e:da:aa:bf:6c:fc: 8d:34:c7:e6:b2:f2:08:e2:41:4b:87:9f:13:81:84: 11:4f:5b:12:e4:4f:6e:25:67:6c:49:eb:b6:de:df: bf:70:53:77:35:ec:5f:00:97:da:07:af:e9:a1:48: 4a:25:24:e8:29:9f:a7:a9:c3:c6:c8:fc:17:4e:8b: 19:76:74:9c:1c:e6:d2:bd:e8:16:60:0f:6d:00:64: 60:f0:6e:29:bc:46:fe:c6:5b:65:61:64:54:c5:98: 2d:c1:f4:96:9c:69:79:a3:6c:24:ca:61:4d:9a:2a: a3:70:7c:e5:0c:82:be:10:e7:64:59:c8:1d:dc:7d: e0:29:be:af:ab:9a:2a:89:f6:03:38:ec:2e:3b:42: 1a:35:68:fe:c8:8b:55:2a:b4:73:e0:e6:b2:c0:74: 61:c7:24:a6:31:26:d9:d0:47:65:87:b4:22:ea:46: dd:ff:c8:e5:f5:35:0c:2e:79:79:36:99:60:78:48: 4f:12:3b:dd:1f:de:f4:7d:56:ca:9d:c9:1f:64:66: 2e:a1:b6:f8:b7:46:68:0a:06:5b:74:45:bf:ac:95: f7:1d:8c:8f:1b:f9:8a:c6:89:06:ee:b6:8b:13:ee: 30:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7F:11:D8:53:3C:77:1D:3B:78:AD:E9:DF:81:BA:BA:4F:62:14:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/faf56999-57e6-37e7-b0c9-6130e35b117a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.145.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:1e:68:f0:ed:ec:3f:1e:55:2d:4b:25:b6:12:c7:64:7d:f3: e6:24:08:d8:27:43:59:e8:6a:2e:cd:47:91:ae:bc:05:e2:5a: 25:be:cf:05:c1:8b:1d:66:5e:98:5a:60:68:b9:41:be:9a:56: 26:bf:64:6f:b2:c1:a6:d3:b3:d9:c5:6c:19:89:d7:d9:c7:2d: 4d:fc:e4:da:db:d2:b8:a3:78:ed:6a:9c:ec:68:ff:40:ba:e1: 8a:9a:fe:ee:01:0d:8b:48:1b:b0:3f:df:a1:3c:c9:a5:76:42: d1:37:3d:35:9b:6d:94:a5:7d:5a:b8:10:93:81:0c:66:a7:6b: 33:25:20:c4:46:21:22:f9:17:cf:57:61:72:7c:80:49:c3:ed: e5:78:62:04:3a:0b:91:c5:22:09:f8:fd:8f:0d:97:41:8d:f2: 3f:56:36:1e:c6:18:75:e5:f8:34:3b:23:ee:0b:33:ce:77:2a: 26:22:13:d4:3a:b7:cf:bd:2b:c3:99:c6:6f:18:86:a9:2a:ad: 16:a1:06:1c:fb:e8:59:c8:4c:67:94:f2:3a:ec:f9:54:44:41: 7e:76:87:4b:e5:79:96:09:7b:87:f1:7e:8f:1f:c4:4f:bb:1e: c8:95:09:20:1f:bc:6f:18:21:54:88:bb:2b:83:de:26:2e:80: be:a3:4f:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxcp3xsoPOV4BAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk MzAzMWU0MjYtMzY4NS00YzI4LTliZGMtY2FiNzE5ZjBlMTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb4aL1mMybzu9F7PAkEwxjR55tVRFrQu2qq/ bPyNNMfmsvII4kFLh58TgYQRT1sS5E9uJWdsSeu23t+/cFN3NexfAJfaB6/poUhK JSToKZ+nqcPGyPwXTosZdnScHObSvegWYA9tAGRg8G4pvEb+xltlYWRUxZgtwfSW nGl5o2wkymFNmiqjcHzlDIK+EOdkWcgd3H3gKb6vq5oqifYDOOwuO0IaNWj+yItV KrRz4OaywHRhxySmMSbZ0Edlh7Qi6kbd/8jl9TUMLnl5NplgeEhPEjvdH970fVbK nckfZGYuobb4t0ZoCgZbdEW/rJX3HYyPG/mKxokG7raLE+4wwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDN/EdhTPHcdO3it6d+BurpPYhQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmFmNTY5OTktNTdlNi0z N2U3LWIwYzktNjEzMGUzNWIxMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgZFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoeaPDt7D8eVS1LJbYSx2R98+YkCNgnQ1noai7NR5GuvAXiWiW+zwXB ix1mXphaYGi5Qb6aVia/ZG+ywabTs9nFbBmJ19nHLU385Nrb0rijeO1qnOxo/0C6 4Yqa/u4BDYtIG7A/36E8yaV2QtE3PTWbbZSlfVq4EJOBDGanazMlIMRGISL5F89X YXJ8gEnD7eV4YgQ6C5HFIgn4/Y8Nl0GN8j9WNh7GGHXl+DQ7I+4LM853KiYiE9Q6 t8+9K8OZxm8YhqkqrRahBhz76FnITGeU8jrs+VREQX52h0vleZYJe4fxfo8fxE+7 HsiVCSAfvG8YIVSIuyuD3iYugL6jT8Q= -----END CERTIFICATE-----Generated at Sat Dec 6 19:43:57 2025 by rpki-client