This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa File: 420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa (raw, json) Hash identifier: /vksuYxILugDyS1jkRFxYFJpJoWhoE9lGRVbPd0yLC8= Subject key identifier: CB:84:19:E1:CC:98:2D:5B:92:14:4B:B4:75:AA:D4:76:69:E7:75:05 Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F4328584C18FB7DFF44B9C43E88C0F400 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa Signing time: Sat 06 Dec 2025 14:00:38 +0000 ROA not before: Sat 06 Dec 2025 14:00:38 +0000 ROA not after: Fri 06 Mar 2026 14:00:38 +0000 asID: 203 IP address blocks: 135.84.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:fb:7d:ff:44:b9:c4:3e:88:c0:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Dec 6 14:00:38 2025 GMT Not After : Mar 6 14:00:38 2026 GMT Subject: CN=072a2d9d-cce6-447f-9237-0262d07a03fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:05:f7:8b:80:26:71:ee:b5:d5:1f:cd:eb: 2f:af:fd:63:a8:f9:e3:a2:ed:76:b4:9c:18:62:00: 8d:8b:4f:93:9e:7d:4b:5e:a2:4b:e3:8c:e8:a0:7c: ba:07:0f:d1:3c:6c:40:e0:10:b5:53:3b:b4:8d:c9: 4d:12:bf:1a:18:12:82:88:1f:db:f4:20:85:86:68: fc:2a:be:3f:6f:f7:20:9e:6f:53:91:46:4c:1e:e8: d8:e7:35:e2:66:91:28:e9:ad:98:ac:03:b3:57:5c: aa:d1:ac:15:f3:65:55:47:b3:86:41:8f:32:91:7d: e4:e0:b0:61:21:53:96:91:d3:70:24:cd:98:21:0a: 6a:8c:59:54:84:18:e4:2b:96:0e:c9:ba:86:31:2a: 57:18:78:61:91:b5:86:1f:76:84:29:43:e0:eb:55: eb:f5:2c:cd:5d:b3:a8:66:61:83:89:39:0d:a9:36: 22:62:5a:42:53:2a:e0:e1:13:d1:19:b1:1b:05:71: 19:6c:d0:c5:e5:ae:95:1c:01:4b:02:b7:82:75:29: 14:e5:03:7c:be:bf:86:a5:55:c6:be:22:8a:d8:d8: 5d:16:61:f5:de:e2:fa:00:56:f1:ba:c2:f8:d0:2e: 2a:16:50:c4:77:b6:24:57:f2:93:b3:9f:ab:67:bd: 7c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:84:19:E1:CC:98:2D:5B:92:14:4B:B4:75:AA:D4:76:69:E7:75:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 135.84.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e6:46:1c:3e:fb:d5:02:d5:f6:bf:13:cc:e5:59:3d:e5:5a: de:35:51:ca:b2:6f:05:08:9b:e3:c5:28:a5:6f:a5:68:e2:6b: d8:ba:8a:6a:06:64:66:fe:16:25:f9:11:99:4b:b2:c7:f8:5d: fa:af:63:26:33:23:50:82:8f:7e:75:96:0b:0e:29:3f:46:a0: 04:1f:f3:c8:14:a1:c7:52:d7:f9:ca:d4:7c:b6:73:d2:8f:dc: e2:49:02:29:51:7e:c6:e9:56:78:4c:e4:98:b6:b5:93:80:36: bf:14:03:82:2c:7d:e3:af:3f:e5:f4:e6:10:ce:66:bc:52:1f: f3:47:fc:80:9b:d5:a5:23:8f:78:26:6c:dc:df:81:86:2a:3a: 7a:9b:10:80:d0:e9:75:37:cd:03:38:61:96:f3:8e:f1:5a:d6: 65:22:24:c6:ae:89:99:1b:b9:38:63:50:40:bd:19:b4:36:d9: 79:0e:65:66:2b:42:97:0b:72:69:52:56:54:75:f7:d2:db:b2: 88:38:9a:7e:00:53:e3:d6:12:3d:45:66:1e:ac:97:c2:e5:b1: 62:44:c8:c7:bd:fb:3f:d5:4c:b8:a2:5c:39:78:f9:33:ae:a3: 7d:fa:90:ed:b8:bc:56:61:b1:e7:d6:c1:11:d4:54:85:26:7c: 09:62:ed:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwY+33/RLnEPojA9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI1MTIwNjE0MDAzOFoXDTI2MDMwNjE0MDAzOFowLzEtMCsGA1UEAxMk MDcyYTJkOWQtY2NlNi00NDdmLTkyMzctMDI2MmQwN2EwM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruoF94uAJnHutdUfzesvr/1jqPnjou12tJwY YgCNi0+Tnn1LXqJL44zooHy6Bw/RPGxA4BC1Uzu0jclNEr8aGBKCiB/b9CCFhmj8 Kr4/b/cgnm9TkUZMHujY5zXiZpEo6a2YrAOzV1yq0awV82VVR7OGQY8ykX3k4LBh IVOWkdNwJM2YIQpqjFlUhBjkK5YOybqGMSpXGHhhkbWGH3aEKUPg61Xr9SzNXbOo ZmGDiTkNqTYiYlpCUyrg4RPRGbEbBXEZbNDF5a6VHAFLAreCdSkU5QN8vr+GpVXG viKK2NhdFmH13uL6AFbxusL40C4qFlDEd7YkV/KTs5+rZ718nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuEGeHMmC1bkhRLtHWq1HZp53UFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvNDIwYzU5YzYtNzZmNS0z YTFmLWFkMzAtYWRlOTBmMzdjNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBh1R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbmRhw++9UC1fa/E8zlWT3lWt41UcqybwUIm+PFKKVvpWjia9i6imoG ZGb+FiX5EZlLssf4XfqvYyYzI1CCj351lgsOKT9GoAQf88gUocdS1/nK1Hy2c9KP 3OJJAilRfsbpVnhM5Ji2tZOANr8UA4IsfeOvP+X05hDOZrxSH/NH/ICb1aUjj3gm bNzfgYYqOnqbEIDQ6XU3zQM4YZbzjvFa1mUiJMauiZkbuThjUEC9GbQ22XkOZWYr QpcLcmlSVlR199Lbsog4mn4AU+PWEj1FZh6sl8LlsWJEyMe9+z/VTLiiXDl4+TOu o336kO24vFZhsefWwRHUVIUmfAli7RI= -----END CERTIFICATE-----Generated at Mon Dec 15 12:05:09 2025 by rpki-client