This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49ab4452-5f98-4570-aeb8-338c6721d60f/d97bd53a-15f9-35ad-95ad-87705898cb75.roa File: d97bd53a-15f9-35ad-95ad-87705898cb75.roa (raw, json) Hash identifier: tn7LdI2Sh54kwCLv10P+3cPxaxbqLqxK3Ai2ak3LcuA= Subject key identifier: 28:4F:29:DE:2F:88:4E:24:0A:37:1F:80:85:3C:D3:41:C5:C5:EA:FF Certificate issuer: /CN=49ab4452-5f98-4570-aeb8-338c6721d60f Certificate serial: 010D0C9F4328584C1693B52F384943C1FEE07E80 Authority key identifier: 57:84:BC:FD:D3:14:04:A1:05:0D:70:19:04:A2:C1:77:26:55:CC:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49ab4452-5f98-4570-aeb8-338c6721d60f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49ab4452-5f98-4570-aeb8-338c6721d60f/d97bd53a-15f9-35ad-95ad-87705898cb75.roa Signing time: Fri 05 Dec 2025 17:20:02 +0000 ROA not before: Fri 05 Dec 2025 17:20:02 +0000 ROA not after: Thu 05 Mar 2026 17:20:02 +0000 asID: 395505 IP address blocks: 130.12.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49ab4452-5f98-4570-aeb8-338c6721d60f/49ab4452-5f98-4570-aeb8-338c6721d60f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49ab4452-5f98-4570-aeb8-338c6721d60f/49ab4452-5f98-4570-aeb8-338c6721d60f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49ab4452-5f98-4570-aeb8-338c6721d60f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:93:b5:2f:38:49:43:c1:fe:e0:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49ab4452-5f98-4570-aeb8-338c6721d60f Validity Not Before: Dec 5 17:20:02 2025 GMT Not After : Mar 5 17:20:02 2026 GMT Subject: CN=7cda2573-feaf-44fe-b811-9d97fa85e5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:0f:2c:c0:0a:f5:9b:73:de:3a:05:38:03: 83:c9:34:7d:25:22:b6:f6:b4:3b:5b:5b:ee:a7:5a: 53:97:d6:c9:08:36:7d:2e:2a:d7:04:2f:25:ae:d9: 03:11:40:43:25:93:a3:58:62:6c:70:6e:be:62:d2: 49:38:d4:b9:49:d0:09:3f:93:2d:13:b1:93:60:52: d6:df:0d:06:1b:fb:80:36:41:29:8c:53:af:02:15: 4a:bf:9a:97:89:4b:9a:c2:82:06:93:4d:42:6a:76: 41:76:56:a9:6c:3d:44:9e:30:4a:90:60:7a:8b:e5: 9c:07:13:ad:a2:a1:2c:1f:51:dd:0f:09:7d:02:10: f9:01:f5:d4:0a:4c:43:d4:b5:c8:7e:50:a4:e6:a8: c1:81:8d:1c:a5:df:b1:cf:20:07:8c:88:5a:57:fd: ed:91:26:11:ae:61:15:f6:7c:15:70:35:6c:21:24: 99:5a:a6:5e:eb:cc:b5:72:d5:66:36:e9:0e:3b:b6: 5c:cd:2d:70:cb:72:db:cb:c0:43:12:f7:2f:86:36: 79:6a:d3:0e:31:23:3b:11:02:96:b4:07:9c:45:3a: 0e:7a:aa:a7:08:96:4c:7f:27:81:cf:5d:cb:77:24: c7:bc:5e:b3:1e:44:90:71:3d:08:e9:39:cf:e3:75: 07:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4F:29:DE:2F:88:4E:24:0A:37:1F:80:85:3C:D3:41:C5:C5:EA:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49ab4452-5f98-4570-aeb8-338c6721d60f/d97bd53a-15f9-35ad-95ad-87705898cb75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49ab4452-5f98-4570-aeb8-338c6721d60f/49ab4452-5f98-4570-aeb8-338c6721d60f.crl X509v3 Authority Key Identifier: keyid:57:84:BC:FD:D3:14:04:A1:05:0D:70:19:04:A2:C1:77:26:55:CC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49ab4452-5f98-4570-aeb8-338c6721d60f.cer sbgp-ipAddrBlock: critical IPv4: 130.12.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:11:f3:d4:65:17:8d:b5:fb:44:aa:8c:ce:c1:96:71:37:62: 8e:f0:2d:f1:55:4f:4b:35:ca:15:a4:39:bd:fa:76:37:8b:38: 30:7c:8a:ef:66:1a:ef:8c:d8:1d:d4:ef:8a:59:74:cd:03:0a: 5c:d6:9f:e4:07:c9:5f:bc:2b:cc:28:3e:bd:c3:76:b6:52:ec: 2b:02:e4:11:9f:f0:92:00:28:18:3f:7f:ee:13:6f:b5:ed:36: 44:af:1a:96:36:ba:ac:0b:3f:1f:04:df:05:27:61:1c:a3:75: be:a9:70:be:20:f7:f9:0d:cd:05:9f:bf:66:08:ef:7c:a7:fe: 07:e9:4d:96:1f:d0:47:aa:d0:ae:b6:84:4b:3f:b6:9c:11:8e: e7:8d:f4:7b:59:c4:15:c4:8b:4e:5e:2b:c6:fe:f5:0d:eb:1c: 87:c8:b9:7e:9a:fa:fa:51:e9:e9:16:25:6d:a7:90:a4:7f:53: f1:b5:63:31:3d:74:97:92:71:63:c0:91:17:14:94:e6:b3:ea: 5a:c3:f6:a5:3e:89:01:f7:9c:9e:65:fd:db:5a:c5:a6:8d:65: 04:bc:84:b9:99:d9:cc:d6:f7:46:86:69:fd:8b:d7:17:93:00: f0:ce:e7:fb:e4:65:d7:17:9c:8b:56:f9:81:e2:35:30:28:0b: 73:9e:b3:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWk7UvOElDwf7gfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDlhYjQ0NTItNWY5OC00NTcwLWFlYjgtMzM4YzY3MjFk NjBmMB4XDTI1MTIwNTE3MjAwMloXDTI2MDMwNTE3MjAwMlowLzEtMCsGA1UEAxMk N2NkYTI1NzMtZmVhZi00NGZlLWI4MTEtOWQ5N2ZhODVlNWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4gPLMAK9Ztz3joFOAODyTR9JSK29rQ7W1vu p1pTl9bJCDZ9LirXBC8lrtkDEUBDJZOjWGJscG6+YtJJONS5SdAJP5MtE7GTYFLW 3w0GG/uANkEpjFOvAhVKv5qXiUuawoIGk01CanZBdlapbD1EnjBKkGB6i+WcBxOt oqEsH1HdDwl9AhD5AfXUCkxD1LXIflCk5qjBgY0cpd+xzyAHjIhaV/3tkSYRrmEV 9nwVcDVsISSZWqZe68y1ctVmNukOO7ZczS1wy3Lby8BDEvcvhjZ5atMOMSM7EQKW tAecRToOeqqnCJZMfyeBz13LdyTHvF6zHkSQcT0I6TnP43UHzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChPKd4viE4kCjcfgIU800HFxer/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80OWFi NDQ1Mi01Zjk4LTQ1NzAtYWViOC0zMzhjNjcyMWQ2MGYvZDk3YmQ1M2EtMTVmOS0z NWFkLTk1YWQtODc3MDU4OThjYjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDlhYjQ0NTItNWY5OC00NTcwLWFl YjgtMzM4YzY3MjFkNjBmLzQ5YWI0NDUyLTVmOTgtNDU3MC1hZWI4LTMzOGM2NzIx ZDYwZi5jcmwwHwYDVR0jBBgwFoAUV4S8/dMUBKEFDXAZBKLBdyZVzMowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80OWFiNDQ1Mi01Zjk4LTQ1NzAtYWViOC0zMzhj NjcyMWQ2MGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBggysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcR89RlF421+0SqjM7BlnE3Yo7wLfFVT0s1yhWkOb36djeLODB8iu9m Gu+M2B3U74pZdM0DClzWn+QHyV+8K8woPr3DdrZS7CsC5BGf8JIAKBg/f+4Tb7Xt NkSvGpY2uqwLPx8E3wUnYRyjdb6pcL4g9/kNzQWfv2YI73yn/gfpTZYf0Eeq0K62 hEs/tpwRjueN9HtZxBXEi05eK8b+9Q3rHIfIuX6a+vpR6ekWJW2nkKR/U/G1YzE9 dJeScWPAkRcUlOaz6lrD9qU+iQH3nJ5l/dtaxaaNZQS8hLmZ2czW90aGaf2L1xeT APDO5/vkZdcXnItW+YHiNTAoC3Oes90= -----END CERTIFICATE-----Generated at Sat Dec 20 07:57:50 2025 by rpki-client