This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa File: fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa (raw, json) Hash identifier: S3bBRVkpqb+2zqrCw7aKyJ94slVYRtq95hg4IyeeHW0= Subject key identifier: C3:C0:31:17:C8:D2:D1:52:D9:48:1A:55:A6:D2:46:C8:66:9D:A9:4B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BDCF5E7EFB43B7CB6E8E73580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 31898 IP address blocks: 129.157.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:e7:ef:b4:3b:7c:b6:e8:e7:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=ee8990d3-6945-49e4-ae00-be68335e8a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:37:d0:60:83:0f:62:50:45:14:27:5e:97: 5b:5d:81:b5:68:a0:65:94:11:92:2f:16:8f:d6:a6: 7f:b5:d6:24:7f:62:0f:f0:46:34:37:66:10:d3:b0: 2d:69:39:b7:be:58:ab:5a:56:de:a2:c0:2f:3c:2d: 67:b7:13:68:d6:46:4b:26:d2:82:6f:4f:17:bc:a5: 26:cd:d7:c6:58:1b:d0:26:8a:cc:b2:8b:a4:82:c7: 73:20:fd:0c:0d:5f:74:c2:56:1b:01:4f:4c:b5:59: 10:69:f2:09:5c:31:77:27:df:9e:fe:f3:8d:e4:47: 49:bf:be:ea:1b:8e:dc:13:a5:cc:af:99:57:0b:3b: 00:fd:48:56:86:2c:9c:9a:bc:f0:1e:2e:62:cc:99: a2:5e:d3:bf:64:89:75:18:b4:a2:27:05:3d:31:df: d1:61:9c:84:c3:73:ab:32:da:ec:04:42:c1:ed:b7: b9:1d:72:f6:c4:c1:68:fe:26:fe:a9:29:9e:3f:2c: d2:08:17:f4:c3:69:61:cd:13:54:3d:c0:2f:02:4e: 77:36:26:37:63:88:fb:c8:61:2c:17:b2:67:e4:42: 0c:7b:76:a2:a8:56:62:ba:2a:f7:04:9a:fc:28:a6: 25:bb:b0:0e:2a:65:9b:06:23:07:bc:44:1b:08:b0: 78:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C0:31:17:C8:D2:D1:52:D9:48:1A:55:A6:D2:46:C8:66:9D:A9:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fd9d146a-9565-31e5-9e0e-d2de2ebd158a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.157.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:db:e2:25:45:f3:be:6c:a9:24:11:66:9f:de:4f:75:2d:33: 28:1b:8c:0a:7b:2a:59:7d:9a:c6:a4:cd:30:33:54:28:d9:13: b5:41:04:a4:c2:ab:25:e1:45:3b:38:3d:f0:72:16:9e:8d:f7: 75:f9:7e:bc:81:bb:c4:b6:4e:5c:1a:23:d8:33:c1:48:c5:ab: a1:89:b6:41:c0:21:2c:d6:9a:b3:ee:3b:3d:5a:30:a6:ab:1c: 5d:8e:f1:21:98:de:c8:38:ba:34:e9:0d:f6:5e:ac:1d:09:b9: b7:d7:a4:bc:4b:e6:d4:91:4b:99:99:e1:1e:7d:c4:e6:22:16: ce:57:d3:b3:47:68:74:44:21:ef:5a:a9:50:b4:50:d7:8c:da: 3e:c4:c0:ea:4d:72:38:1d:8e:bb:6d:a5:61:db:a7:c7:19:36: 7f:84:7c:fe:ec:a7:d3:65:9f:20:19:bf:ad:51:e3:01:10:75: 77:2c:5f:8c:46:f2:10:38:02:89:4d:36:aa:72:e6:5e:4c:d4: 49:b9:0a:2a:ca:d8:d0:b4:8d:ab:0d:4e:31:bd:2b:16:c5:6a: 9d:2f:79:a6:31:cd:88:ef:19:e1:5c:db:e9:10:a5:57:08:d6: 80:40:3f:49:de:4d:da:51:e0:8a:76:73:22:50:2e:35:d7:2a: 74:97:f3:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9efvtDt8tujnNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk ZWU4OTkwZDMtNjk0NS00OWU0LWFlMDAtYmU2ODMzNWU4YTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKw30GCDD2JQRRQnXpdbXYG1aKBllBGSLxaP 1qZ/tdYkf2IP8EY0N2YQ07AtaTm3vlirWlbeosAvPC1ntxNo1kZLJtKCb08XvKUm zdfGWBvQJorMsoukgsdzIP0MDV90wlYbAU9MtVkQafIJXDF3J9+e/vON5EdJv77q G47cE6XMr5lXCzsA/UhWhiycmrzwHi5izJmiXtO/ZIl1GLSiJwU9Md/RYZyEw3Or MtrsBELB7be5HXL2xMFo/ib+qSmePyzSCBf0w2lhzRNUPcAvAk53NiY3Y4j7yGEs F7Jn5EIMe3aiqFZiuir3BJr8KKYlu7AOKmWbBiMHvEQbCLB4vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPAMRfI0tFS2UgaVabSRshmnalLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmQ5ZDE0NmEtOTU2NS0z MWU1LTllMGUtZDJkZTJlYmQxNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZ14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPb4iVF875sqSQRZp/eT3UtMygbjAp7Kll9msakzTAzVCjZE7VBBKTC qyXhRTs4PfByFp6N93X5fryBu8S2TlwaI9gzwUjFq6GJtkHAISzWmrPuOz1aMKar HF2O8SGY3sg4ujTpDfZerB0JubfXpLxL5tSRS5mZ4R59xOYiFs5X07NHaHREIe9a qVC0UNeM2j7EwOpNcjgdjrttpWHbp8cZNn+EfP7sp9NlnyAZv61R4wEQdXcsX4xG 8hA4AolNNqpy5l5M1Em5CirK2NC0jasNTjG9KxbFap0veaYxzYjvGeFc2+kQpVcI 1oBAP0neTdpR4Ip2cyJQLjXXKnSX8+c= -----END CERTIFICATE-----Generated at Sat Dec 6 20:40:50 2025 by rpki-client