This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/34a9c223-7200-3018-ae98-b28abb099fa9.roa File: 34a9c223-7200-3018-ae98-b28abb099fa9.roa (raw, json) Hash identifier: H0trw6RE2oaVxFmNV6NGHtu5KSduoqMKgo23JtG4rUk= Subject key identifier: E2:D8:C3:A2:01:78:07:8D:75:49:21:FF:A2:62:14:CD:CE:CC:67:B6 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584C24268F46EBA7CF7C3A86D680 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/34a9c223-7200-3018-ae98-b28abb099fa9.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 16591 IP address blocks: 136.32.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:8f:46:eb:a7:cf:7c:3a:86:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=9a3a1087-c952-489c-a2d3-38050dde8ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cf:81:ce:20:c5:07:49:1b:92:f6:96:84:2d: 95:96:28:53:18:68:c5:5f:24:68:97:cc:7d:d0:c2: 0d:9c:09:a0:48:6d:87:ac:b0:13:72:c4:9d:e4:a7: f3:b5:67:fe:04:21:76:8a:75:3d:a7:82:9f:31:aa: 4a:9f:07:88:26:27:ef:92:c9:21:5b:36:7f:9a:2a: 10:fb:0b:a8:76:7e:90:a3:b4:68:59:e2:bb:71:4e: cc:8b:fc:d5:b2:9b:48:d5:2d:c5:6f:18:dd:11:8f: 2f:4c:72:30:aa:cb:27:b2:64:60:3b:8e:79:3f:5c: 79:89:9e:05:3d:1c:c9:45:9b:80:ff:8d:e8:94:ef: 1c:df:8a:10:76:b0:e6:85:a9:f1:16:57:dd:44:2c: 8d:e0:9d:65:4f:f3:59:9f:df:20:f2:6b:b3:5e:d1: eb:74:f9:5f:6d:f7:7d:37:3e:b1:bb:0c:35:a5:c7: 2d:35:57:4f:7a:78:d7:e5:91:87:17:0b:69:b4:46: 49:49:6c:60:31:36:be:b5:97:7f:73:84:dc:d3:de: d4:54:1b:33:f4:03:9b:32:5a:55:64:0e:9b:6d:a5: 33:1a:33:99:fd:f1:98:1d:ba:b5:dd:df:10:c3:5c: d6:47:d4:65:c7:ff:e3:a0:42:ad:b3:e9:25:a3:fb: 89:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D8:C3:A2:01:78:07:8D:75:49:21:FF:A2:62:14:CD:CE:CC:67:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/34a9c223-7200-3018-ae98-b28abb099fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:7a:29:21:89:1a:39:c1:63:c8:9c:7d:6a:bc:bb:4e:d6:66: e8:77:6a:86:a0:4e:88:79:2a:4c:e7:24:6d:4b:65:a9:df:13: 37:fb:9a:dd:0d:d9:f4:ba:4b:2c:f4:da:f1:36:bd:a7:ad:33: 19:d4:3f:f8:09:85:16:72:d3:65:d5:cd:18:0e:24:f7:7d:d0: e7:73:d0:25:36:d5:df:c2:55:7e:5b:e6:7c:fe:6b:7c:72:2f: 8b:8a:a5:5c:1b:ec:cd:4f:ea:60:c1:ee:a6:c8:f2:10:30:38: 09:ae:fd:9b:10:61:fa:ae:7a:61:02:c2:27:51:87:ed:60:2e: 29:e8:2b:0e:2c:6f:5e:dc:e4:e4:d7:34:b5:3a:1e:0c:66:f6: f2:49:c9:47:19:b1:61:1e:3c:31:c3:a7:77:47:61:01:ca:5f: f2:10:41:5a:59:a8:11:05:0b:1f:5a:e5:3a:83:fc:1e:b6:cc: a9:db:f7:9f:be:d0:ec:42:fc:54:59:02:f3:46:e0:e6:8e:bc: 6f:a2:3b:71:b4:bf:1b:72:54:8e:7e:80:7b:55:e1:a2:6d:d1: 8c:62:fd:2c:04:0c:a4:c3:e8:77:5f:59:93:7e:33:7c:52:29: 7c:9c:63:41:31:5d:97:1a:99:61:34:59:8d:96:77:bf:1f:8a: b7:3a:d0:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJo9G66fPfDqG1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk OWEzYTEwODctYzk1Mi00ODljLWEyZDMtMzgwNTBkZGU4Y2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8+BziDFB0kbkvaWhC2VlihTGGjFXyRol8x9 0MINnAmgSG2HrLATcsSd5KfztWf+BCF2inU9p4KfMapKnweIJifvkskhWzZ/mioQ +wuodn6Qo7RoWeK7cU7Mi/zVsptI1S3FbxjdEY8vTHIwqssnsmRgO455P1x5iZ4F PRzJRZuA/43olO8c34oQdrDmhanxFlfdRCyN4J1lT/NZn98g8muzXtHrdPlfbfd9 Nz6xuww1pcctNVdPenjX5ZGHFwtptEZJSWxgMTa+tZd/c4Tc097UVBsz9AObMlpV ZA6bbaUzGjOZ/fGYHbq13d8Qw1zWR9Rlx//joEKts+klo/uJtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLYw6IBeAeNdUkh/6JiFM3OzGe2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzRhOWMyMjMtNzIwMC0z MDE4LWFlOTgtYjI4YWJiMDk5ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR6KSGJGjnBY8icfWq8u07WZuh3aoagToh5KkznJG1LZanfEzf7mt0N 2fS6Syz02vE2vaetMxnUP/gJhRZy02XVzRgOJPd90Odz0CU21d/CVX5b5nz+a3xy L4uKpVwb7M1P6mDB7qbI8hAwOAmu/ZsQYfquemECwidRh+1gLinoKw4sb17c5OTX NLU6Hgxm9vJJyUcZsWEePDHDp3dHYQHKX/IQQVpZqBEFCx9a5TqD/B62zKnb95++ 0OxC/FRZAvNG4OaOvG+iO3G0vxtyVI5+gHtV4aJt0Yxi/SwEDKTD6HdfWZN+M3xS KXycY0ExXZcamWE0WY2Wd78firc60Fc= -----END CERTIFICATE-----Generated at Sun Dec 14 11:36:09 2025 by rpki-client