This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/01a9bbdd-d1e4-3732-9e8a-3f4655a84b54.roa File: 01a9bbdd-d1e4-3732-9e8a-3f4655a84b54.roa (raw, json) Hash identifier: zXF5HdoKpCpf0/zfPEai6Ik5Hmb/DYy58BnDu785I+o= Subject key identifier: 49:1D:63:2B:5A:00:61:56:56:19:CE:EA:75:C0:67:0E:8F:93:01:73 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584C26F0E0726BA973503E6691C0 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/01a9bbdd-d1e4-3732-9e8a-3f4655a84b54.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 14618 IP address blocks: 129.41.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:e0:72:6b:a9:73:50:3e:66:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=822f0f18-c76f-4357-8997-aaeb984d8e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:43:f8:04:e6:ec:30:71:9c:a4:03:1a:89:dc: 51:ad:67:5d:85:13:de:5f:fd:db:8d:67:3b:56:4e: 48:d5:d4:20:ec:5b:9d:14:fc:dd:ea:18:d1:95:62: 5a:00:bb:53:13:93:57:65:ff:d9:4c:35:d0:14:48: 57:7f:8a:ab:3f:d5:82:ae:ec:1a:fe:b7:e3:c2:e8: 4a:54:60:96:f2:84:f9:4d:94:35:b7:b9:28:c6:44: b4:ba:3b:83:ae:cf:06:59:2f:ea:df:1a:ee:80:3f: 6a:45:88:32:67:3a:fa:28:4d:f5:49:3e:3b:d9:81: 17:02:cb:af:91:27:aa:84:9c:6a:05:55:90:55:db: 0f:19:00:09:eb:11:4d:06:ac:23:bf:2f:ee:44:c0: dd:89:e5:54:17:79:df:6a:0e:0c:9a:a1:b9:a4:51: 30:3b:f0:eb:08:b9:74:d0:9c:fd:e2:1f:4a:a8:93: 40:46:3f:05:b8:ab:4a:01:c2:6c:8d:aa:02:7d:33: 45:c7:ee:b6:9b:fe:fa:57:fa:02:d0:1a:19:60:11: 68:96:75:ff:b4:bc:b9:3e:fb:e3:59:4c:5c:34:11: 60:b9:eb:c4:3b:b7:f0:4a:bf:b5:b1:2d:b1:e9:e3: 66:b5:23:76:d6:fc:4d:93:07:72:66:65:61:81:fa: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1D:63:2B:5A:00:61:56:56:19:CE:EA:75:C0:67:0E:8F:93:01:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/01a9bbdd-d1e4-3732-9e8a-3f4655a84b54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 129.41.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ef:b9:16:f2:e8:53:26:ba:8f:c4:7e:a7:49:90:06:18:18: bc:83:95:2c:d8:2b:7f:c0:a1:d1:a8:97:d2:4c:32:a6:45:a4: 47:c5:22:c0:a1:b1:58:c1:f4:31:d0:61:a9:28:e7:ee:ce:d4: ad:71:2b:e1:45:a8:b1:22:5a:61:54:54:c1:3d:77:00:8a:9b: 00:4e:a9:24:39:33:a7:02:d9:0a:ea:77:b4:a0:cb:47:9e:1d: 3f:4b:60:bc:c7:8d:5d:23:a3:d3:4c:bc:27:d4:8e:b0:99:57: 8d:e0:a5:d5:27:83:09:3f:42:a7:a6:0e:05:4f:66:98:49:b0: ed:22:65:8d:41:5a:62:a3:99:c7:9a:8a:7e:15:aa:f0:ed:0c: e6:19:f0:9c:24:27:1c:02:fc:0e:a8:2e:21:f5:e8:54:6e:9b: 25:46:d0:11:22:6f:d6:90:25:30:7f:65:95:28:d0:62:41:b5: b4:69:6c:dd:00:db:74:72:b9:2e:9d:2a:07:53:ad:ad:2d:3b: 97:a3:3a:4f:1d:a1:62:6f:0c:f7:d6:70:cc:c5:84:9b:17:6e: 26:88:b6:85:33:a1:01:19:cd:1f:b2:15:51:41:ab:6a:cf:22: 17:5e:1f:91:7c:a4:38:33:a1:8b:40:ce:4b:df:af:a6:78:64: 5a:c2:8f:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwm8OBya6lzUD5mkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk ODIyZjBmMTgtYzc2Zi00MzU3LTg5OTctYWFlYjk4NGQ4ZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEP4BObsMHGcpAMaidxRrWddhRPeX/3bjWc7 Vk5I1dQg7FudFPzd6hjRlWJaALtTE5NXZf/ZTDXQFEhXf4qrP9WCruwa/rfjwuhK VGCW8oT5TZQ1t7koxkS0ujuDrs8GWS/q3xrugD9qRYgyZzr6KE31ST472YEXAsuv kSeqhJxqBVWQVdsPGQAJ6xFNBqwjvy/uRMDdieVUF3nfag4MmqG5pFEwO/DrCLl0 0Jz94h9KqJNARj8FuKtKAcJsjaoCfTNFx+62m/76V/oC0BoZYBFolnX/tLy5Pvvj WUxcNBFguevEO7fwSr+1sS2x6eNmtSN21vxNkwdyZmVhgfoQaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkdYytaAGFWVhnO6nXAZw6PkwFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvMDFhOWJiZGQtZDFlNC0z NzMyLTllOGEtM2Y0NjU1YTg0YjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnvuRby6FMmuo/EfqdJkAYYGLyDlSzYK3/AodGol9JMMqZFpEfFIsCh sVjB9DHQYako5+7O1K1xK+FFqLEiWmFUVME9dwCKmwBOqSQ5M6cC2Qrqd7Sgy0ee HT9LYLzHjV0jo9NMvCfUjrCZV43gpdUngwk/QqemDgVPZphJsO0iZY1BWmKjmcea in4VqvDtDOYZ8JwkJxwC/A6oLiH16FRumyVG0BEib9aQJTB/ZZUo0GJBtbRpbN0A 23RyuS6dKgdTra0tO5ejOk8doWJvDPfWcMzFhJsXbiaItoUzoQEZzR+yFVFBq2rP IhdeH5F8pDgzoYtAzkvfr6Z4ZFrCj8M= -----END CERTIFICATE-----Generated at Thu Dec 25 09:15:59 2025 by rpki-client