This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa File: 68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa (raw, json) Hash identifier: khNoJf2EHtcqUTEdFuo6f1UzRaDew7JSXO9UReP9yMg= Subject key identifier: 71:D6:CE:D9:31:D3:A2:14:2B:1F:CE:61:FE:36:E5:B9:14:15:91:03 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584C18FB7A12BBBA8F4375686B40 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa Signing time: Sat 06 Dec 2025 14:00:38 +0000 ROA not before: Sat 06 Dec 2025 14:00:38 +0000 ROA not after: Fri 06 Mar 2026 14:00:38 +0000 asID: 203724 IP address blocks: 161.69.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:fb:7a:12:bb:ba:8f:43:75:68:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Dec 6 14:00:38 2025 GMT Not After : Mar 6 14:00:38 2026 GMT Subject: CN=98b51a72-e841-42e9-a64e-acd63842e5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cf:7d:43:9d:34:c5:a4:d9:f0:c1:a6:d8:ae: c8:f4:23:b4:4b:86:b8:41:ed:ad:e6:74:24:76:73: 30:21:24:0b:95:2d:e2:54:5c:b7:f7:b9:e6:db:f3: 6d:db:84:68:ef:75:ea:0b:1a:cb:b0:f0:5a:db:99: 1a:35:29:b1:be:80:dc:3e:17:ac:d6:d1:c1:7b:ac: 29:08:34:e6:dd:eb:cb:8f:16:8a:8e:d6:6f:27:67: 2a:87:c3:01:db:69:f4:6a:30:09:b5:c0:46:f1:c4: 6d:c5:1c:82:64:a4:74:ef:46:a9:b2:c1:7a:81:8d: 5f:e4:1e:88:b9:35:51:e2:d3:e6:8c:1e:71:56:12: ec:50:3c:c8:20:fe:ba:1f:98:eb:b6:8a:b1:5c:ab: 00:d1:14:f1:de:5d:18:73:be:a0:ba:a0:85:57:ec: 9b:38:5e:0f:17:cd:18:15:02:7c:8b:75:7c:00:3a: 76:ac:25:81:7e:a9:1c:a7:64:ef:a5:07:76:08:20: 0a:16:c3:8a:f8:07:25:5f:0b:f7:e4:d7:5d:6e:0c: db:c7:15:c7:5f:13:5f:15:fa:0c:7d:21:75:fb:8e: ce:ad:c4:a9:59:e4:5c:88:fd:90:e7:93:bb:20:4a: 88:7a:ef:69:b7:33:74:36:b5:fa:9c:62:62:87:7c: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D6:CE:D9:31:D3:A2:14:2B:1F:CE:61:FE:36:E5:B9:14:15:91:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:99:3c:56:32:b4:9e:8c:f3:ac:54:de:86:f7:ca:fb:74:6e: 7f:c4:06:aa:82:cd:5b:d6:69:7f:01:b0:99:45:e3:39:14:17: e1:9d:b8:da:1f:f2:65:05:6e:c8:d2:76:1a:e5:78:ac:76:1a: 28:6e:12:8a:62:66:26:26:2f:d3:3b:e5:3a:46:a4:b8:54:20: 0a:32:22:38:cd:bd:3b:cb:90:3c:97:bb:b1:c4:31:e9:5c:1f: f9:a0:60:a8:95:60:03:dd:fe:c1:35:6a:73:9f:f9:8a:d7:8f: 7c:24:d4:64:15:ce:b4:51:b8:40:a1:cf:5b:49:b9:d7:68:89: e2:de:5a:38:ca:9c:f4:f9:90:67:88:d3:1c:e1:75:50:a0:71: 97:a5:1c:cf:28:ce:e1:ba:b5:a8:91:5e:f5:8f:bf:fc:66:4a: c2:ea:06:1f:8d:e9:e0:2d:bd:8e:75:ee:2a:f8:c9:a7:dd:14: 0d:f5:a4:44:a4:68:0c:15:f2:c5:d3:5d:88:99:aa:01:9c:37: f0:ef:71:ac:02:e7:00:0e:7e:cc:03:99:d1:6e:e3:6f:77:bd: 69:16:2e:db:e3:c9:be:d6:c7:64:35:cf:c5:26:df:fd:b0:8a: 79:2b:4f:06:7b:1c:0d:3c:01:6a:3b:bf:ab:d9:60:48:18:94: 89:54:09:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwY+3oSu7qPQ3Voa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MTIwNjE0MDAzOFoXDTI2MDMwNjE0MDAzOFowLzEtMCsGA1UEAxMk OThiNTFhNzItZTg0MS00MmU5LWE2NGUtYWNkNjM4NDJlNWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi899Q500xaTZ8MGm2K7I9CO0S4a4Qe2t5nQk dnMwISQLlS3iVFy397nm2/Nt24Ro73XqCxrLsPBa25kaNSmxvoDcPhes1tHBe6wp CDTm3evLjxaKjtZvJ2cqh8MB22n0ajAJtcBG8cRtxRyCZKR070apssF6gY1f5B6I uTVR4tPmjB5xVhLsUDzIIP66H5jrtoqxXKsA0RTx3l0Yc76guqCFV+ybOF4PF80Y FQJ8i3V8ADp2rCWBfqkcp2TvpQd2CCAKFsOK+AclXwv35NddbgzbxxXHXxNfFfoM fSF1+47OrcSpWeRciP2Q55O7IEqIeu9ptzN0NrX6nGJih3y3KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHWztkx06IUKx/OYf425bkUFZEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNjgzMzgzMTEtMDhmOC0z ZjJlLThjZGYtNTEwY2ZhMGZjZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCZPFYytJ6M86xU3ob3yvt0bn/EBqqCzVvWaX8BsJlF4zkUF+GduNof 8mUFbsjSdhrleKx2GihuEopiZiYmL9M75TpGpLhUIAoyIjjNvTvLkDyXu7HEMelc H/mgYKiVYAPd/sE1anOf+YrXj3wk1GQVzrRRuEChz1tJuddoieLeWjjKnPT5kGeI 0xzhdVCgcZelHM8ozuG6taiRXvWPv/xmSsLqBh+N6eAtvY517ir4yafdFA31pESk aAwV8sXTXYiZqgGcN/DvcawC5wAOfswDmdFu4293vWkWLtvjyb7Wx2Q1z8Um3/2w inkrTwZ7HA08AWo7v6vZYEgYlIlUCQM= -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:13 2025 by rpki-client