This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cc29482-6619-346c-9509-0c1ddedf9a3c.roa File: 3cc29482-6619-346c-9509-0c1ddedf9a3c.roa (raw, json) Hash identifier: BbqpSxJXFvhYtx7l+957JiMu/OjgKACnr020E8Sy60I= Subject key identifier: B2:71:CB:C8:01:19:0A:28:56:C7:F5:8C:78:96:40:A1:2D:11:7E:88 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584C1E93F5141E6D5BE0C70D75C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cc29482-6619-346c-9509-0c1ddedf9a3c.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 396178 IP address blocks: 136.121.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:93:f5:14:1e:6d:5b:e0:c7:0d:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=ae396f6c-de46-4da1-934e-2e67aa4cfb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:40:4d:81:33:e3:cf:cc:13:46:b9:0f:e7:1f: 0a:dd:58:d8:c8:b8:13:3e:07:99:37:7c:8a:0b:82: da:3a:ee:5a:cf:c5:9d:81:0d:3e:6e:2a:9c:ff:10: 2d:1b:56:d4:84:a2:8e:12:87:78:bd:b6:f3:20:0d: 2d:dd:a0:aa:57:b3:da:c6:51:96:1a:0d:49:23:24: 90:03:7b:b1:2e:38:b1:c0:ad:a2:80:e5:8f:3b:d4: c6:34:1e:cf:59:ce:a2:bd:21:f3:30:80:12:a2:88: 54:1e:a3:5a:70:d2:54:18:66:17:d3:4b:1b:db:34: 1d:c0:4a:8d:5f:02:d1:a4:61:26:d3:59:1e:7e:38: 76:e6:23:34:4f:31:80:5e:2b:a0:b3:11:dc:9d:10: 32:c7:94:19:be:e3:a4:43:8a:95:49:36:c7:6c:27: 2f:36:40:f7:97:3d:42:da:6a:48:24:3b:f5:33:70: 6b:ce:07:50:3c:12:7b:a8:ef:16:43:9a:e1:b6:00: a4:24:71:39:16:bd:a8:ad:b8:bb:27:da:22:3f:19: 69:a2:54:1e:44:74:35:b6:63:ff:48:ea:84:2f:10: 35:a1:78:f3:66:38:49:f7:fb:85:64:ff:44:c2:5f: 8c:01:65:b8:c4:25:1f:41:e2:ca:56:0c:fa:ad:9b: 5c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:71:CB:C8:01:19:0A:28:56:C7:F5:8C:78:96:40:A1:2D:11:7E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cc29482-6619-346c-9509-0c1ddedf9a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.121.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4f:5f:fd:89:98:36:e5:92:a9:ab:50:5e:57:20:46:de:c2: 16:99:8c:f2:b9:c6:c8:ba:98:ab:44:68:34:a5:c8:88:b5:ae: 71:8a:25:05:81:50:0e:48:6e:06:db:46:8a:4d:c9:a3:c4:30: 83:20:25:6e:10:1e:03:1b:c5:ba:b7:62:97:e4:e6:f7:a8:e1: da:e1:78:80:01:db:3c:f8:7a:4b:84:30:6a:50:b5:0b:87:89: dc:53:f8:60:ef:40:3a:57:d7:90:f3:fe:30:23:ca:da:09:76: 55:4d:11:a2:0b:1c:c1:58:ad:0d:df:74:07:a0:dc:e6:6b:27: c2:8e:1b:3e:f4:fe:dd:ec:15:91:53:4c:27:1a:28:f2:49:dd: c0:95:c9:fb:fb:40:45:9f:16:38:b4:83:b3:58:51:b5:71:1d: c4:7e:b0:d1:74:32:37:ff:82:61:ac:37:ff:98:e0:52:a6:05: be:07:4f:75:84:e5:3d:43:2e:41:33:13:94:d9:a3:0b:8d:32: 2d:1b:ce:a8:c4:44:60:6d:e0:42:08:73:10:45:6a:77:82:e4: 78:cf:d4:0e:84:c7:8b:15:c0:74:d6:97:a7:a5:be:5e:ec:37: 10:8e:eb:de:7d:a4:b7:27:8e:8b:b6:1f:e1:46:fa:49:4b:1b: 30:ba:0a:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwek/UUHm1b4McNdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk YWUzOTZmNmMtZGU0Ni00ZGExLTkzNGUtMmU2N2FhNGNmYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkBNgTPjz8wTRrkP5x8K3VjYyLgTPgeZN3yK C4LaOu5az8WdgQ0+biqc/xAtG1bUhKKOEod4vbbzIA0t3aCqV7PaxlGWGg1JIySQ A3uxLjixwK2igOWPO9TGNB7PWc6ivSHzMIASoohUHqNacNJUGGYX00sb2zQdwEqN XwLRpGEm01kefjh25iM0TzGAXiugsxHcnRAyx5QZvuOkQ4qVSTbHbCcvNkD3lz1C 2mpIJDv1M3BrzgdQPBJ7qO8WQ5rhtgCkJHE5Fr2orbi7J9oiPxlpolQeRHQ1tmP/ SOqELxA1oXjzZjhJ9/uFZP9Ewl+MAWW4xCUfQeLKVgz6rZtc8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJxy8gBGQooVsf1jHiWQKEtEX6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NjMjk0ODItNjYxOS0z NDZjLTk1MDktMGMxZGRlZGY5YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiHkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVPX/2JmDblkqmrUF5XIEbewhaZjPK5xsi6mKtEaDSlyIi1rnGKJQWB UA5IbgbbRopNyaPEMIMgJW4QHgMbxbq3Ypfk5veo4drheIAB2zz4ekuEMGpQtQuH idxT+GDvQDpX15Dz/jAjytoJdlVNEaILHMFYrQ3fdAeg3OZrJ8KOGz70/t3sFZFT TCcaKPJJ3cCVyfv7QEWfFji0g7NYUbVxHcR+sNF0Mjf/gmGsN/+Y4FKmBb4HT3WE 5T1DLkEzE5TZowuNMi0bzqjERGBt4EIIcxBFaneC5HjP1A6Ex4sVwHTWl6elvl7s NxCO6959pLcnjou2H+FG+klLGzC6CnY= -----END CERTIFICATE-----Generated at Wed Dec 10 07:04:25 2025 by rpki-client