This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa File: 8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa (raw, json) Hash identifier: WIehcwTAHgShEOrc1GKx8j5AnLuL1My8M2pNklyIDxQ= Subject key identifier: 37:49:05:4B:7D:C3:72:FB:7C:DB:C8:80:EF:F8:1C:CF:2C:93:F1:23 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584C26F0DF4AF7A3C5C57529BD0C Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 14618 IP address blocks: 129.41.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:df:4a:f7:a3:c5:c5:75:29:bd:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=63656242-d375-4c3a-8c0e-4c00be99007c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:fa:ca:8b:fa:ca:94:f7:04:62:4e:25:8d: 84:20:39:5c:24:20:dd:5b:ad:c3:c2:38:ec:68:d1: 8d:f7:9b:05:20:7b:a5:c2:20:f3:39:bc:c2:7f:cc: ac:e1:ca:97:91:ce:c3:66:a4:5b:d4:f6:98:db:f9: 69:bb:cf:ec:d6:0c:75:6a:0b:4f:c6:db:77:fa:b4: fc:3f:3b:07:90:94:eb:b6:7e:ee:79:0e:dc:e8:95: 4f:71:c6:5c:51:33:1c:ec:67:25:72:1d:91:c2:e6: 1b:e4:80:cf:0b:86:62:56:29:72:26:f4:db:f3:dc: ee:e3:2a:a0:2a:dc:13:59:f0:0e:25:bf:06:a4:d1: 31:81:23:8e:34:80:8b:8e:fc:b4:f3:0b:80:7a:7e: b1:2d:b2:7e:7e:ce:9f:98:3c:09:8c:9f:0f:df:59: 72:42:be:ec:db:06:cf:32:7a:f3:ea:33:cf:54:b0: 3d:c5:42:7b:f7:f7:d0:f7:d1:61:fe:30:b0:3d:d8: 88:90:db:08:be:d4:1d:11:da:ee:07:4a:e1:10:ca: 4a:cc:04:95:ae:f6:48:e5:f9:24:16:52:43:1b:fe: a6:9b:c9:ab:dc:c8:50:3a:fb:a4:63:02:c9:8c:12: 4b:52:56:fd:66:5a:27:a4:7c:1e:c3:1f:ee:d9:2c: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:49:05:4B:7D:C3:72:FB:7C:DB:C8:80:EF:F8:1C:CF:2C:93:F1:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 129.41.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f1:bd:02:ff:96:2a:c0:80:9c:b7:34:58:13:84:82:97:fe: bd:03:d0:d9:37:b1:5a:d7:4d:4d:dd:7b:c8:7f:98:3f:d7:21: 14:9a:b9:b8:e1:18:57:d4:ba:b2:f0:d2:a6:ee:85:22:ef:e6: 40:da:a4:69:cc:68:15:72:6d:07:27:34:c8:00:ba:69:11:7f: 1a:fc:d5:62:b1:3d:e1:1e:a5:e6:8d:cb:96:80:3a:35:41:93: 5f:b8:80:71:86:a4:e3:aa:0d:24:b0:82:5c:69:a4:62:80:87: 3f:90:7b:31:94:75:6d:06:25:0a:3d:24:5c:0b:db:a5:34:3a: cf:41:d7:3d:a6:d3:07:bc:a6:89:e8:42:55:c4:e6:81:eb:4b: 09:eb:b7:14:20:95:2b:fb:9f:d7:7b:aa:cb:3f:c4:14:c2:b4: e7:84:81:69:37:2c:af:f3:ef:51:7a:02:bf:d3:50:a8:fc:2b: 49:63:cf:f2:11:11:78:60:f0:d8:7e:7b:65:04:30:db:de:14: d1:48:13:46:63:ab:a1:e8:da:40:c4:a0:16:05:f7:26:15:3b: 6a:d9:36:12:04:03:c6:d6:5e:08:98:1b:43:8c:91:36:e8:1c: ed:35:81:18:9b:be:75:0a:40:99:54:62:bb:77:9a:df:05:0e: 65:9b:c3:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwm8N9K96PFxXUpvQwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk NjM2NTYyNDItZDM3NS00YzNhLThjMGUtNGMwMGJlOTkwMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqML6yov6ypT3BGJOJY2EIDlcJCDdW63Dwjjs aNGN95sFIHulwiDzObzCf8ys4cqXkc7DZqRb1PaY2/lpu8/s1gx1agtPxtt3+rT8 PzsHkJTrtn7ueQ7c6JVPccZcUTMc7Gclch2RwuYb5IDPC4ZiVilyJvTb89zu4yqg KtwTWfAOJb8GpNExgSOONICLjvy08wuAen6xLbJ+fs6fmDwJjJ8P31lyQr7s2wbP Mnrz6jPPVLA9xUJ79/fQ99Fh/jCwPdiIkNsIvtQdEdruB0rhEMpKzASVrvZI5fkk FlJDG/6mm8mr3MhQOvukYwLJjBJLUlb9ZlonpHwewx/u2SzvewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdJBUt9w3L7fNvIgO/4HM8sk/EjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvOGY5YWNlNTItNzA2Yi0z ZDBkLWI5MDktZDJhYjM0YjFhOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHxvQL/lirAgJy3NFgThIKX/r0D0Nk3sVrXTU3de8h/mD/XIRSaubjh GFfUurLw0qbuhSLv5kDapGnMaBVybQcnNMgAumkRfxr81WKxPeEepeaNy5aAOjVB k1+4gHGGpOOqDSSwglxppGKAhz+QezGUdW0GJQo9JFwL26U0Os9B1z2m0we8pono QlXE5oHrSwnrtxQglSv7n9d7qss/xBTCtOeEgWk3LK/z71F6Ar/TUKj8K0ljz/IR EXhg8Nh+e2UEMNveFNFIE0Zjq6Ho2kDEoBYF9yYVO2rZNhIEA8bWXgiYG0OMkTbo HO01gRibvnUKQJlUYrt3mt8FDmWbw2s= -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:37 2025 by rpki-client