This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/068d604b-d85c-3d51-9045-97b9c36167a9.roa File: 068d604b-d85c-3d51-9045-97b9c36167a9.roa (raw, json) Hash identifier: 2U3U7kxW4J5wK+ouCI+fUx7Thav3j3vv8JkqWQGn774= Subject key identifier: 90:B2:CE:1F:10:EF:5A:4A:D8:E8:6C:99:63:FB:15:32:73:3A:27:B2 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584C24268FE30CD08272DA300B80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/068d604b-d85c-3d51-9045-97b9c36167a9.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 16591 IP address blocks: 136.35.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:8f:e3:0c:d0:82:72:da:30:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=26b1f038-1912-466c-9aae-212b974c1217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1f:99:8e:d8:8c:1f:4d:8a:9f:ca:b1:6e:db: 73:c9:74:d5:aa:ec:64:b7:07:73:5f:20:d2:a7:ab: 7a:07:88:ed:e3:1e:10:f6:db:60:45:dc:18:e6:1a: 60:aa:3f:09:10:20:f1:be:19:c6:96:11:58:4a:26: b6:a5:34:88:b9:80:23:e6:47:10:97:f0:79:30:ca: a7:67:cf:22:78:e4:75:ed:da:bb:e8:7f:6c:ed:b7: 5d:c3:f5:a0:1f:f6:ec:4e:07:b1:4a:a8:76:70:3f: 50:3c:97:29:a5:15:f5:30:45:03:00:73:93:ed:65: eb:0e:e8:39:4e:da:5b:a0:0c:a6:da:fa:7f:8c:7e: c6:5d:7d:c7:f5:ea:72:e6:ef:d8:5d:2a:11:be:2a: 5d:78:f9:11:15:c4:b7:72:d5:be:bb:50:b9:d4:b2: 46:e3:d2:19:81:15:e8:9a:9f:94:13:8d:e6:8b:ae: 2a:81:a7:45:45:01:1d:af:25:2b:03:5a:a6:c7:91: f2:97:0a:94:ef:6b:db:5c:33:23:29:ea:33:e9:b2: b4:21:74:09:a4:d9:11:d0:23:78:a9:c1:76:ab:e0: 92:02:69:73:ee:62:cd:25:af:e8:36:57:c3:01:32: 44:18:e7:6a:89:78:2b:e6:b9:d3:45:93:6a:2c:1f: df:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B2:CE:1F:10:EF:5A:4A:D8:E8:6C:99:63:FB:15:32:73:3A:27:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/068d604b-d85c-3d51-9045-97b9c36167a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:14:11:99:3a:31:1a:c7:6b:4d:18:ab:01:d1:47:e5:45:06: 02:8c:30:91:2b:ab:1c:f5:82:a4:db:80:54:7c:01:45:cc:12: 81:7a:4c:5b:4f:25:34:20:ce:2f:c0:fc:4c:5a:79:a1:6c:6b: 23:47:96:5e:f8:a3:37:93:d1:eb:03:a2:8d:bc:23:e6:f4:23: 0d:e4:4f:6e:b3:c7:d2:b1:6d:dd:31:7e:24:15:86:00:4f:5f: 50:02:b2:46:42:9f:ed:32:f9:d8:74:44:7a:8d:1c:62:df:52: 56:96:ca:dd:c1:61:3b:59:84:6f:27:26:d8:d1:e8:a6:63:80: cf:2c:fb:36:4c:07:7c:97:f0:95:c4:99:df:b5:22:cb:6f:0f: 63:fc:07:da:9a:95:d9:cf:b2:5f:e3:a2:11:37:d1:fa:f8:4d: 1f:00:94:ed:0b:50:49:64:58:54:8f:1f:70:f5:2f:f7:aa:d2: 8a:7b:77:0b:86:de:a9:6c:92:11:c7:ce:b4:2e:ee:c1:c8:c6: 09:13:57:9a:d0:cc:53:d6:ae:5a:8b:7f:16:f6:e3:16:38:9e: 42:73:64:da:31:bd:f5:e3:4a:ac:02:ef:8d:48:cb:04:a7:10: 69:d1:26:48:00:da:cd:5c:5f:34:8d:c8:93:e2:66:a8:03:99: e4:95:d2:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJo/jDNCCctowC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk MjZiMWYwMzgtMTkxMi00NjZjLTlhYWUtMjEyYjk3NGMxMjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx+ZjtiMH02Kn8qxbttzyXTVquxktwdzXyDS p6t6B4jt4x4Q9ttgRdwY5hpgqj8JECDxvhnGlhFYSia2pTSIuYAj5kcQl/B5MMqn Z88ieOR17dq76H9s7bddw/WgH/bsTgexSqh2cD9QPJcppRX1MEUDAHOT7WXrDug5 TtpboAym2vp/jH7GXX3H9epy5u/YXSoRvipdePkRFcS3ctW+u1C51LJG49IZgRXo mp+UE43mi64qgadFRQEdryUrA1qmx5HylwqU72vbXDMjKeoz6bK0IXQJpNkR0CN4 qcF2q+CSAmlz7mLNJa/oNlfDATJEGOdqiXgr5rnTRZNqLB/f/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCyzh8Q71pK2OhsmWP7FTJzOieyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMDY4ZDYwNGItZDg1Yy0z ZDUxLTkwNDUtOTdiOWMzNjE2N2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8UEZk6MRrHa00YqwHRR+VFBgKMMJErqxz1gqTbgFR8AUXMEoF6TFtP JTQgzi/A/ExaeaFsayNHll74ozeT0esDoo28I+b0Iw3kT26zx9Kxbd0xfiQVhgBP X1ACskZCn+0y+dh0RHqNHGLfUlaWyt3BYTtZhG8nJtjR6KZjgM8s+zZMB3yX8JXE md+1IstvD2P8B9qaldnPsl/johE30fr4TR8AlO0LUElkWFSPH3D1L/eq0op7dwuG 3qlskhHHzrQu7sHIxgkTV5rQzFPWrlqLfxb24xY4nkJzZNoxvfXjSqwC741IywSn EGnRJkgA2s1cXzSNyJPiZqgDmeSV0s8= -----END CERTIFICATE-----Generated at Sun Dec 14 07:46:26 2025 by rpki-client