This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa File: 20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa (raw, json) Hash identifier: K8MzFUpbzEeSB8Z3MS18CTwiGy0rMe69SGcOamahUko= Subject key identifier: 2D:9E:BE:C7:91:0C:3A:BC:21:86:E7:D6:C4:5A:1B:46:9F:98:26:61 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BE555BC9F320DDC718DF24A40 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 14061 IP address blocks: 170.64.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:bc:9f:32:0d:dc:71:8d:f2:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=dfc23a73-ba92-447e-9e09-e03fcf5f7206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:1b:72:8d:56:58:1d:39:c0:9f:cf:19:d9: c5:50:47:46:58:18:55:9f:e7:4a:ff:b8:a3:cd:61: 42:0f:55:32:cd:0e:ca:51:97:af:05:fa:49:87:66: ed:1b:15:d3:36:69:dc:f5:32:1b:17:a5:c2:ed:d6: 0d:a3:09:36:df:27:57:fe:7b:c0:98:3c:d4:cb:7f: 75:3c:22:2d:94:3a:30:f1:1a:99:90:53:ce:01:e5: c9:b0:ef:71:39:18:22:60:1b:e1:b7:fd:51:8b:82: 30:67:7b:45:fb:66:53:95:75:0d:fd:96:59:cb:ce: 0b:55:a2:83:85:58:05:21:30:67:60:22:63:a2:c8: 58:bc:68:3f:af:c8:71:2b:b6:94:19:3e:5e:64:35: 5c:6b:38:70:39:db:7c:3e:fc:53:07:2b:b9:6a:7e: 66:09:8c:fd:d6:22:91:79:d6:3d:bd:99:1b:b4:f8: 14:67:9c:54:01:c5:aa:f2:04:b6:5d:9c:16:ac:bb: 4c:75:a0:18:0b:a5:2c:6c:60:27:64:b6:d1:98:fc: 34:ac:0c:7d:58:57:fa:66:a6:0e:a9:f6:39:95:9f: 8f:69:9c:51:63:af:64:8b:cd:ad:3b:33:fa:78:1f: e7:1c:50:53:0f:31:f3:a8:8c:db:77:c1:4a:8e:ec: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9E:BE:C7:91:0C:3A:BC:21:86:E7:D6:C4:5A:1B:46:9F:98:26:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/20d440b2-c2ab-3b80-aaa4-3919c5abc5fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 170.64.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:7f:9b:01:02:d6:27:39:e6:84:af:28:ce:f8:37:8b:39:67: cf:73:03:3b:49:85:84:18:34:d0:c9:2b:46:c4:28:ed:a7:4f: c2:e7:24:7e:66:cd:64:31:d6:55:26:12:e6:45:7f:30:37:3b: 2b:eb:71:eb:5b:16:44:d7:2c:59:a4:53:8b:04:8c:80:4f:f3: bb:44:6d:92:90:72:82:f0:d4:64:2d:d0:3a:84:7d:a7:3d:e7: 64:ff:e6:0d:89:54:b7:55:d5:3e:60:ab:57:f3:04:60:ba:81: e1:9d:95:bd:0b:d0:63:72:3c:bc:9e:8f:c1:0d:0f:7c:eb:32: d5:69:83:89:c2:31:e8:b9:ca:1c:63:33:e4:f7:4c:e3:af:c9: dc:a0:5f:17:51:ba:dc:cd:6f:17:80:ab:8d:09:56:5d:48:64: 26:99:ba:e5:da:6e:b4:78:32:e1:9d:4c:e7:6d:be:dd:4b:e5: bc:07:01:b7:93:69:2c:c2:46:66:9f:c4:bd:7e:67:3a:18:56: 0a:ae:14:0e:96:b3:1b:d0:5c:fc:2f:e9:9e:26:54:c7:fc:9a: 05:5f:3c:99:d6:55:e0:e2:6f:67:cf:33:61:94:3b:b2:99:6f: 75:31:ef:d1:4d:dd:5b:04:d8:7a:77:f4:b1:b6:6e:a2:b4:15: b9:d6:5c:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVbyfMg3ccY3ySkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk ZGZjMjNhNzMtYmE5Mi00NDdlLTllMDktZTAzZmNmNWY3MjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUEbco1WWB05wJ/PGdnFUEdGWBhVn+dK/7ij zWFCD1UyzQ7KUZevBfpJh2btGxXTNmnc9TIbF6XC7dYNowk23ydX/nvAmDzUy391 PCItlDow8RqZkFPOAeXJsO9xORgiYBvht/1Ri4IwZ3tF+2ZTlXUN/ZZZy84LVaKD hVgFITBnYCJjoshYvGg/r8hxK7aUGT5eZDVcazhwOdt8PvxTByu5an5mCYz91iKR edY9vZkbtPgUZ5xUAcWq8gS2XZwWrLtMdaAYC6UsbGAnZLbRmPw0rAx9WFf6ZqYO qfY5lZ+PaZxRY69ki82tOzP6eB/nHFBTDzHzqIzbd8FKjuzf5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2evseRDDq8IYbn1sRaG0afmCZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMjBkNDQwYjItYzJhYi0z YjgwLWFhYTQtMzkxOWM1YWJjNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqkCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJx/mwEC1ic55oSvKM74N4s5Z89zAztJhYQYNNDJK0bEKO2nT8LnJH5m zWQx1lUmEuZFfzA3OyvrcetbFkTXLFmkU4sEjIBP87tEbZKQcoLw1GQt0DqEfac9 52T/5g2JVLdV1T5gq1fzBGC6geGdlb0L0GNyPLyej8END3zrMtVpg4nCMei5yhxj M+T3TOOvydygXxdRutzNbxeAq40JVl1IZCaZuuXabrR4MuGdTOdtvt1L5bwHAbeT aSzCRmafxL1+ZzoYVgquFA6WsxvQXPwv6Z4mVMf8mgVfPJnWVeDib2fPM2GUO7KZ b3Ux79FN3VsE2Hp39LG2bqK0FbnWXGY= -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:14 2025 by rpki-client