This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8db84ec-fe5c-35eb-be66-545a28cddea7.roa File: e8db84ec-fe5c-35eb-be66-545a28cddea7.roa (raw, json) Hash identifier: zPovWTxBIoQ9vmOJ4nHAkpnEBSOZJ/rg7wDD3oZIlH4= Subject key identifier: 7C:8F:85:C0:D2:EE:5F:C7:84:DB:E9:68:CA:AE:FA:66:A5:93:CC:B0 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584C24269520BFAE11FC808F1180 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8db84ec-fe5c-35eb-be66-545a28cddea7.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 10794 IP address blocks: 171.161.128.0/20 maxlen: 20 171.161.128.0/23 maxlen: 23 171.161.128.0/24 maxlen: 24 171.161.129.0/24 maxlen: 24 171.161.130.0/24 maxlen: 24 171.161.131.0/24 maxlen: 24 171.161.132.0/22 maxlen: 22 171.161.132.0/24 maxlen: 24 171.161.133.0/24 maxlen: 24 171.161.134.0/24 maxlen: 24 171.161.135.0/24 maxlen: 24 171.161.136.0/22 maxlen: 22 171.161.136.0/24 maxlen: 24 171.161.137.0/24 maxlen: 24 171.161.138.0/24 maxlen: 24 171.161.139.0/24 maxlen: 24 171.161.140.0/24 maxlen: 24 171.161.141.0/24 maxlen: 24 171.161.142.0/24 maxlen: 24 171.161.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:95:20:bf:ae:11:fc:80:8f:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=76702d80-d535-4f83-9b8d-1d73f567824b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b7:7b:e7:cd:ac:92:0c:b5:50:41:7f:ba:1d: 58:6d:a5:32:b1:38:65:78:50:a8:7a:03:13:43:34: 97:1a:b2:43:a5:51:ed:66:db:d8:92:2d:b4:da:93: ee:07:c9:5b:58:fe:cc:7b:87:91:8a:e7:09:e2:b0: 1d:80:61:04:1a:ea:9e:ce:d7:b7:4c:fe:15:c1:59: 52:dd:a3:a5:52:55:9a:11:43:03:5f:f3:32:c0:13: 54:fc:d8:bc:e1:0e:92:52:7b:a8:39:76:af:e8:e7: 84:bb:37:f6:d9:61:92:49:a4:3b:93:b0:a0:e0:2d: f8:cf:79:a4:79:c3:00:26:a2:29:62:5b:69:13:0d: d2:f1:b8:fd:3d:15:3a:b4:96:01:94:4f:02:af:dd: 3e:8c:7e:6f:b0:10:c2:a9:70:a1:5b:a6:14:33:fd: 1f:cc:d1:17:0f:4f:cc:b3:c5:d7:9d:6f:64:96:f3: 0a:d3:aa:34:fb:26:77:44:6a:60:90:b4:9f:db:49: a6:95:ca:e5:fa:24:8e:f7:48:7c:36:a7:1f:e8:62: 2a:50:dc:c5:c9:a1:27:59:6d:35:3c:6c:43:d2:6c: 71:0c:de:70:36:8a:11:e3:80:52:c5:e4:19:de:6d: b7:54:05:f4:4d:fc:48:c3:7c:f2:3d:0c:e1:05:b6: 84:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8F:85:C0:D2:EE:5F:C7:84:DB:E9:68:CA:AE:FA:66:A5:93:CC:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/e8db84ec-fe5c-35eb-be66-545a28cddea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1f:c2:88:dc:d5:5a:ec:37:d5:51:77:46:6c:42:68:40:59: 25:68:12:da:6f:ed:7f:1f:ea:ef:c6:09:76:75:d6:05:4b:74: fd:b1:c6:9f:f8:ef:3c:33:2f:49:b2:b0:4f:07:9f:37:c2:48: 33:86:1e:30:6b:de:a6:dc:21:b2:d7:0d:c7:60:8b:3d:23:e0: f3:db:84:58:bb:79:8d:8c:f0:0c:30:62:7e:80:36:f9:89:58: 10:59:98:07:8c:66:2d:03:36:46:89:ff:6d:ec:c9:15:4d:2a: d3:f5:c9:fd:49:0b:6f:c1:81:e1:a5:c4:1e:10:35:7c:cd:00: 00:52:45:97:1b:ee:a1:ae:da:df:45:4e:cc:24:ab:10:f8:21: 19:a7:5d:61:38:b5:43:08:b9:ad:37:a3:b3:8e:54:df:10:0d: 35:76:0d:85:ac:1f:c8:dc:43:bb:42:7a:c0:5f:1e:84:94:07: c3:38:d9:4f:70:a5:5c:9a:67:86:c5:c6:02:11:d9:d4:fc:02: 59:19:4c:00:96:e3:9f:bb:d5:af:ff:4f:44:34:af:d6:06:2b: ca:be:fc:05:2a:f7:86:a7:7f:ba:48:10:e7:73:10:97:0b:9b: dc:33:ee:ef:64:58:a2:c6:6c:74:1e:3e:2d:d3:f5:ea:5f:21: 38:24:0d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJpUgv64R/ICPEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk NzY3MDJkODAtZDUzNS00ZjgzLTliOGQtMWQ3M2Y1Njc4MjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rd7582skgy1UEF/uh1YbaUysThleFCoegMT QzSXGrJDpVHtZtvYki202pPuB8lbWP7Me4eRiucJ4rAdgGEEGuqezte3TP4VwVlS 3aOlUlWaEUMDX/MywBNU/Ni84Q6SUnuoOXav6OeEuzf22WGSSaQ7k7Cg4C34z3mk ecMAJqIpYltpEw3S8bj9PRU6tJYBlE8Cr90+jH5vsBDCqXChW6YUM/0fzNEXD0/M s8XXnW9klvMK06o0+yZ3RGpgkLSf20mmlcrl+iSO90h8Nqcf6GIqUNzFyaEnWW01 PGxD0mxxDN5wNooR44BSxeQZ3m23VAX0TfxIw3zyPQzhBbaEbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyPhcDS7l/HhNvpaMqu+malk8ywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvZThkYjg0ZWMtZmU1Yy0z NWViLWJlNjYtNTQ1YTI4Y2RkZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEq6GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkfwojc1VrsN9VRd0ZsQmhAWSVoEtpv7X8f6u/GCXZ11gVLdP2xxp/4 7zwzL0mysE8HnzfCSDOGHjBr3qbcIbLXDcdgiz0j4PPbhFi7eY2M8AwwYn6ANvmJ WBBZmAeMZi0DNkaJ/23syRVNKtP1yf1JC2/BgeGlxB4QNXzNAABSRZcb7qGu2t9F TswkqxD4IRmnXWE4tUMIua03o7OOVN8QDTV2DYWsH8jcQ7tCesBfHoSUB8M42U9w pVyaZ4bFxgIR2dT8AlkZTACW45+71a//T0Q0r9YGK8q+/AUq94anf7pIEOdzEJcL m9wz7u9kWKLGbHQePi3T9epfITgkDbQ= -----END CERTIFICATE-----Generated at Tue Dec 16 13:30:22 2025 by rpki-client