This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa File: 4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa (raw, json) Hash identifier: H1Z17zkyuE0Z9yU5wlOgU0Q6R1YhxUoEo1EmauQDKUM= Subject key identifier: 65:29:07:D4:0F:60:CE:34:49:C1:DB:00:21:E7:72:06:F8:1E:36:CA Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584C2B20D7B1FE5293B00F0F2920 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa Signing time: Sat 13 Dec 2025 02:00:30 +0000 ROA not before: Sat 13 Dec 2025 02:00:30 +0000 ROA not after: Fri 13 Mar 2026 01:00:30 +0000 asID: 54393 IP address blocks: 129.19.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2b:20:d7:b1:fe:52:93:b0:0f:0f:29:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Dec 13 02:00:30 2025 GMT Not After : Mar 13 01:00:30 2026 GMT Subject: CN=657a7d21-094c-49c6-9a40-eb9d2128ad28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:1f:2b:0b:42:ff:d0:b8:97:eb:62:d3:0d: b8:8d:5e:50:1e:44:c1:03:2e:04:bd:49:0f:01:60: d5:bf:bc:4c:94:f0:46:3a:dd:22:a7:ea:29:8b:ff: 82:d6:08:5a:d0:d4:92:da:fb:21:18:51:a2:67:b0: 75:4d:46:c4:91:c2:b3:4d:04:ec:56:84:2b:40:53: 8b:36:4d:9e:21:e2:28:44:18:0e:ac:78:06:30:fe: 90:73:60:5c:28:d3:3a:a5:06:55:75:92:11:ca:44: 96:c2:f9:03:ea:f7:2b:96:04:f3:81:83:0d:72:58: 71:2c:90:a8:d4:68:3e:63:cb:f6:a4:8c:73:16:a1: 3e:60:10:f9:6f:05:fe:ce:43:a1:c8:d7:ed:4f:80: e9:ca:f5:e4:00:25:ac:27:3e:97:14:1c:bb:02:1f: 96:9e:e8:f0:fa:36:ad:9f:05:64:77:99:25:7b:b5: a0:59:6b:4f:bc:d5:8c:59:5b:01:59:52:d7:50:70: ba:0a:1e:d7:9d:da:6c:8e:0c:ae:66:bd:26:e1:e5: 01:44:3d:09:5c:c4:0f:9a:5f:7b:8f:d4:bb:ce:5e: fb:a9:20:d8:c8:5a:38:3c:a4:76:fb:88:02:a9:88: 9e:91:09:21:06:32:06:1b:b6:31:75:19:3c:a9:e2: 7f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:29:07:D4:0F:60:CE:34:49:C1:DB:00:21:E7:72:06:F8:1E:36:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:06:45:3e:52:17:b0:59:f8:1e:6f:5b:54:31:b1:8d:fa:45: f7:c9:c2:af:a0:3e:a4:e9:8c:55:6f:f7:de:ee:fb:c3:f7:23: 5f:fc:5e:fa:25:58:d0:fa:86:02:3b:30:2d:bf:d6:e7:f0:28: 7f:7f:91:5b:8a:ce:c0:4a:9d:ba:97:f8:52:48:c1:1c:f2:19: 0c:34:e1:7d:cb:7a:2b:42:a4:72:0c:37:e6:20:68:0f:03:f1: 84:4b:65:b9:8a:29:a2:1c:87:de:b0:fa:97:d2:02:02:1d:0c: 21:1f:25:8c:cb:d2:23:9f:0f:4c:72:2b:a3:eb:51:06:0f:a2: 88:75:76:20:34:1a:40:09:db:f5:de:3a:5c:68:49:74:8f:10: bc:76:1d:7b:bf:45:78:8f:95:47:f8:38:7b:d2:db:88:b5:58: 9f:ad:0e:ee:f2:16:ad:fe:00:37:b5:44:b5:04:79:ba:63:b9: 17:7b:41:cb:46:c8:2b:75:6c:08:b5:31:08:a2:4e:e3:b8:2f: 29:bb:9b:1e:52:f0:ba:c5:cf:c7:35:29:9e:39:01:9e:06:55: 38:60:36:d0:41:e6:8e:a0:7b:f1:da:4d:f1:c7:38:ee:98:09: 07:40:cb:9f:60:80:5f:30:70:ea:15:1e:63:86:be:20:99:04: 67:84:51:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwrINex/lKTsA8PKSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI1MTIxMzAyMDAzMFoXDTI2MDMxMzAxMDAzMFowLzEtMCsGA1UEAxMk NjU3YTdkMjEtMDk0Yy00OWM2LTlhNDAtZWI5ZDIxMjhhZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolsfKwtC/9C4l+ti0w24jV5QHkTBAy4EvUkP AWDVv7xMlPBGOt0ip+opi/+C1gha0NSS2vshGFGiZ7B1TUbEkcKzTQTsVoQrQFOL Nk2eIeIoRBgOrHgGMP6Qc2BcKNM6pQZVdZIRykSWwvkD6vcrlgTzgYMNclhxLJCo 1Gg+Y8v2pIxzFqE+YBD5bwX+zkOhyNftT4DpyvXkACWsJz6XFBy7Ah+Wnujw+jat nwVkd5kle7WgWWtPvNWMWVsBWVLXUHC6Ch7XndpsjgyuZr0m4eUBRD0JXMQPml97 j9S7zl77qSDYyFo4PKR2+4gCqYiekQkhBjIGG7YxdRk8qeJ/8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUpB9QPYM40ScHbACHncgb4HjbKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvNGM3ZjQ5ZjUtNGY0MC0z MWI4LTk4ODEtYzgyZGE4YmVjNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgROAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4GRT5SF7BZ+B5vW1QxsY36RffJwq+gPqTpjFVv997u+8P3I1/8Xvol WND6hgI7MC2/1ufwKH9/kVuKzsBKnbqX+FJIwRzyGQw04X3LeitCpHIMN+YgaA8D 8YRLZbmKKaIch96w+pfSAgIdDCEfJYzL0iOfD0xyK6PrUQYPooh1diA0GkAJ2/Xe OlxoSXSPELx2HXu/RXiPlUf4OHvS24i1WJ+tDu7yFq3+ADe1RLUEebpjuRd7QctG yCt1bAi1MQiiTuO4Lym7mx5S8LrFz8c1KZ45AZ4GVThgNtBB5o6ge/HaTfHHOO6Y CQdAy59ggF8wcOoVHmOGviCZBGeEUYo= -----END CERTIFICATE-----Generated at Sun Dec 14 07:45:44 2025 by rpki-client