This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa File: a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa (raw, json) Hash identifier: PefvELd1hIvDY5sYSYlnpOFa2E9KmuwuViQtjVjpXhA= Subject key identifier: 3E:0B:A0:11:9C:87:CF:AC:56:80:3D:B6:92:B1:C4:33:7A:40:06:E2 Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Certificate serial: 010D0C9F4328584C0B062C0CAFA5FD62E65EC500 Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 8075 IP address blocks: 137.70.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:2c:0c:af:a5:fd:62:e6:5e:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=35e2120e-6a13-451e-975b-88a299386ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:af:43:ba:9f:a6:65:4c:b5:14:0c:99:fb:39: f5:37:cf:1a:39:ab:75:aa:58:90:78:3d:c9:9f:df: 19:49:d3:eb:4b:8e:62:1b:43:b9:54:35:ee:bf:20: e4:bb:05:5a:02:05:e7:15:c1:89:0e:34:fc:5f:d6: cb:a7:ef:56:0e:8c:b6:2c:19:a3:a2:19:f8:55:30: 85:8f:2a:a1:bd:7b:2c:8a:13:5f:a8:3a:2f:56:f8: 9c:9c:c4:fc:f4:e4:ee:26:eb:5b:57:ea:73:60:2c: 1d:72:bf:44:c6:8d:ba:4d:57:91:98:29:26:7a:b9: 1c:2e:cb:ef:9e:48:e0:b0:e2:86:08:74:72:4f:14: 15:0f:f3:80:81:71:ba:0e:7c:ea:01:5b:0e:34:0f: 81:91:4d:61:24:6e:f6:fa:d9:01:74:5b:57:35:99: 31:ae:8d:e5:77:bd:a2:7a:08:79:10:d3:93:08:3e: b8:42:85:6e:ab:97:00:60:04:1c:da:01:83:f4:86: 44:1a:69:11:69:01:ae:0b:aa:ac:34:a6:c4:c7:85: 16:0d:90:95:5b:76:27:23:73:3c:9f:43:96:e1:bc: 9a:79:ff:73:8b:53:c1:de:43:5c:2e:ba:35:c1:98: 04:de:d9:d3:7b:e3:3a:30:37:a7:ed:8e:da:27:4f: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0B:A0:11:9C:87:CF:AC:56:80:3D:B6:92:B1:C4:33:7A:40:06:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl X509v3 Authority Key Identifier: keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer sbgp-ipAddrBlock: critical IPv4: 137.70.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7a:20:7f:f4:1c:3c:50:3a:da:da:8c:4a:39:55:84:0f:e0: 8a:30:26:0f:23:c5:e2:dc:97:7e:23:ba:34:5e:e5:d1:ad:f7: d4:c4:7e:fd:6a:5f:b4:d6:d1:1d:52:e9:d5:22:c6:8b:50:77: a9:0b:87:16:8e:27:bb:df:ce:e4:d4:28:8b:35:d0:db:0e:20: 42:f5:bb:38:c9:1d:df:4e:f5:92:53:7c:6b:c7:6e:0f:f4:6e: ec:f9:57:aa:f7:1c:16:40:19:c8:f9:e1:d3:95:03:c3:58:95: 73:8b:9d:65:de:0e:c0:28:9c:2e:f0:f5:bb:bc:f3:15:a0:6f: bf:e5:68:bd:bf:73:29:83:07:54:b1:82:c8:1a:90:b4:fa:21: f3:39:0c:f9:82:82:fb:83:cb:76:94:83:f4:1e:33:5c:bb:f1: ad:35:80:ae:6f:b3:ae:2b:1b:f5:d4:41:87:19:92:20:1e:c2: 4b:c0:93:77:78:07:68:9d:c5:b8:d8:3e:de:38:69:32:ca:9e: b5:a6:62:65:63:e8:c2:a2:6e:12:d0:12:25:ac:7a:2d:48:fa: 73:8b:b3:8e:a2:f2:a8:ab:46:12:f6:35:9a:99:a3:87:b3:80: 7d:14:b0:f9:6c:47:97:eb:9c:e9:1f:bc:fe:5b:82:c0:e5:6a: 7f:4d:12:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBiwMr6X9YuZexQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzNWUzYmYtOTk0MC00YWJiLTljYzktMmY4YjhjZTY0 NGY0MB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk MzVlMjEyMGUtNmExMy00NTFlLTk3NWItODhhMjk5Mzg2ZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7a9Dup+mZUy1FAyZ+zn1N88aOat1qliQeD3J n98ZSdPrS45iG0O5VDXuvyDkuwVaAgXnFcGJDjT8X9bLp+9WDoy2LBmjohn4VTCF jyqhvXssihNfqDovVvicnMT89OTuJutbV+pzYCwdcr9Exo26TVeRmCkmerkcLsvv nkjgsOKGCHRyTxQVD/OAgXG6DnzqAVsONA+BkU1hJG72+tkBdFtXNZkxro3ld72i egh5ENOTCD64QoVuq5cAYAQc2gGD9IZEGmkRaQGuC6qsNKbEx4UWDZCVW3YnI3M8 n0OW4byaef9zi1PB3kNcLro1wZgE3tnTe+M6MDen7Y7aJ08FIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4LoBGch8+sVoA9tpKxxDN6QAbiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1 ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhiOGNlNjQ0ZjQvYTdiOTkyNGEtZjlhMy0z MDgzLWFhNmYtMzhkNjg1NWFjYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzNWUzYmYtOTk0MC00YWJiLTlj YzktMmY4YjhjZTY0NGY0LzNkMzVlM2JmLTk5NDAtNGFiYi05Y2M5LTJmOGI4Y2U2 NDRmNC5jcmwwHwYDVR0jBBgwFoAU8Sfva6IwqshfVMIEsxFsrb2vsvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhi OGNlNjQ0ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiUaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl6IH/0HDxQOtrajEo5VYQP4IowJg8jxeLcl34jujRe5dGt99TEfv1q X7TW0R1S6dUixotQd6kLhxaOJ7vfzuTUKIs10NsOIEL1uzjJHd9O9ZJTfGvHbg/0 buz5V6r3HBZAGcj54dOVA8NYlXOLnWXeDsAonC7w9bu88xWgb7/laL2/cymDB1Sx gsgakLT6IfM5DPmCgvuDy3aUg/QeM1y78a01gK5vs64rG/XUQYcZkiAewkvAk3d4 B2idxbjYPt44aTLKnrWmYmVj6MKibhLQEiWsei1I+nOLs46i8qirRhL2NZqZo4ez gH0UsPlsR5frnOkfvP5bgsDlan9NEtM= -----END CERTIFICATE-----Generated at Thu Dec 4 10:29:48 2025 by rpki-client