This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa File: 2153d3a6-ecc9-349e-a08d-595348d99222.roa (raw, json) Hash identifier: YCrxb0GGlxCgl3eD7LRBjdKiloS/3E9Lmf+dJtbLSqc= Subject key identifier: 4A:A9:93:34:4F:67:58:61:D6:02:E4:58:23:10:3C:11:33:30:AD:71 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584C040B45356168A7E0A8E7A900 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa Signing time: Sat 29 Nov 2025 02:00:31 +0000 ROA not before: Sat 29 Nov 2025 02:00:31 +0000 ROA not after: Fri 27 Feb 2026 02:00:31 +0000 asID: 202 IP address blocks: 170.30.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:04:0b:45:35:61:68:a7:e0:a8:e7:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 29 02:00:31 2025 GMT Not After : Feb 27 02:00:31 2026 GMT Subject: CN=bfb6a5d1-7169-4e5f-9c69-b6b68c72bfce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:e8:8c:a0:9e:ea:2d:e7:28:02:5f:03:ca: 48:83:53:ec:1b:ba:c7:e5:31:2d:f7:0c:d3:fb:63: 42:12:2f:12:fe:50:b9:45:fa:b5:2b:ac:2a:6b:3f: 2e:d9:1f:96:a4:41:35:d6:99:77:be:47:03:65:16: 1d:52:e6:6d:e6:bd:a1:73:3d:85:05:98:0f:43:3e: 8f:a1:17:a4:c3:b0:97:b4:38:71:51:10:97:db:28: 45:92:42:60:7a:66:f0:c1:56:0e:9d:3e:ac:2d:fd: 2b:cd:ca:d2:f2:1e:75:8d:f5:bb:11:81:c6:be:58: e3:53:5a:cb:60:ea:f2:9f:0f:87:fe:55:f5:29:1b: 0e:16:92:fd:29:7b:0d:ea:37:ca:ba:3b:12:36:82: de:63:f9:dd:cd:22:41:c5:bb:ee:8b:06:38:0d:07: a3:9f:68:d5:37:1b:45:f4:b5:02:2c:44:8a:ca:ed: b1:c4:5c:7c:52:72:e3:de:6f:2e:dc:85:00:fe:bb: 68:19:dd:a1:81:75:26:4f:b1:4c:f8:be:6b:80:15: 99:c9:44:37:04:9d:76:96:b5:e9:f6:50:20:6e:98: 2c:d1:ca:88:46:ad:ca:b1:d9:4d:64:e4:74:c0:a3: d0:12:22:eb:ad:21:12:ae:b0:fc:b3:b1:9a:b6:99: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A9:93:34:4F:67:58:61:D6:02:E4:58:23:10:3C:11:33:30:AD:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2153d3a6-ecc9-349e-a08d-595348d99222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:72:75:75:1c:df:c7:91:b6:c4:2a:c1:81:06:8e:07:4d:63: 3d:16:ab:5b:5d:4a:19:55:b7:b4:8c:ce:83:9b:96:50:60:f6: f4:4f:e4:7a:d4:d1:d4:ef:31:9b:84:b5:29:91:6b:42:d0:b8: d4:7d:8e:25:4b:9b:cf:aa:b2:05:cb:1b:09:22:e6:fd:58:93: e3:cd:01:b0:64:36:57:1c:f1:19:cc:62:ea:a5:af:ee:b7:61: f4:14:92:25:13:4c:29:f4:c4:8c:75:58:dd:00:27:52:e5:35: 64:7d:17:5a:0f:8f:62:a0:4a:6d:d8:df:91:fd:44:60:60:f2: ea:46:eb:5f:e3:41:fe:90:2c:d4:3c:43:d8:c1:a7:1f:5b:c1: eb:90:17:8f:3b:d0:0e:57:b6:65:f9:29:b5:9c:24:67:f3:60: 00:d9:92:f0:02:df:ae:10:23:8a:d0:ed:4b:ae:b3:f7:42:e9: 50:de:68:2d:50:b6:08:ea:b8:ae:52:4c:1e:41:07:35:de:86: b9:1e:e3:5a:b9:3a:f2:67:63:5d:09:67:bb:13:26:19:bd:b7: 28:b7:85:c8:ca:64:85:35:fb:d3:8e:d7:a3:72:bf:45:ec:15: c6:f8:c0:89:63:b9:56:88:60:49:17:95:55:c9:0e:4b:98:ea: 1a:ce:76:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwEC0U1YWin4KjnqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTEyOTAyMDAzMVoXDTI2MDIyNzAyMDAzMVowLzEtMCsGA1UEAxMk YmZiNmE1ZDEtNzE2OS00ZTVmLTljNjktYjZiNjhjNzJiZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1HojKCe6i3nKAJfA8pIg1PsG7rH5TEt9wzT +2NCEi8S/lC5Rfq1K6wqaz8u2R+WpEE11pl3vkcDZRYdUuZt5r2hcz2FBZgPQz6P oRekw7CXtDhxURCX2yhFkkJgembwwVYOnT6sLf0rzcrS8h51jfW7EYHGvljjU1rL YOrynw+H/lX1KRsOFpL9KXsN6jfKujsSNoLeY/ndzSJBxbvuiwY4DQejn2jVNxtF 9LUCLESKyu2xxFx8UnLj3m8u3IUA/rtoGd2hgXUmT7FM+L5rgBWZyUQ3BJ12lrXp 9lAgbpgs0cqIRq3KsdlNZOR0wKPQEiLrrSESrrD8s7GatpnZwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqpkzRPZ1hh1gLkWCMQPBEzMK1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjE1M2QzYTYtZWNjOS0z NDllLWEwOGQtNTk1MzQ4ZDk5MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxydXUc38eRtsQqwYEGjgdNYz0Wq1tdShlVt7SMzoObllBg9vRP5HrU 0dTvMZuEtSmRa0LQuNR9jiVLm8+qsgXLGwki5v1Yk+PNAbBkNlcc8RnMYuqlr+63 YfQUkiUTTCn0xIx1WN0AJ1LlNWR9F1oPj2KgSm3Y35H9RGBg8upG61/jQf6QLNQ8 Q9jBpx9bweuQF4870A5XtmX5KbWcJGfzYADZkvAC364QI4rQ7Uuus/dC6VDeaC1Q tgjquK5STB5BBzXehrke41q5OvJnY10JZ7sTJhm9tyi3hcjKZIU1+9OO16Nyv0Xs Fcb4wIljuVaIYEkXlVXJDkuY6hrOdtQ= -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:55 2025 by rpki-client