This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa File: 70eb2d09-bf51-3793-8af3-831217b8a04e.roa (raw, json) Hash identifier: EqwNzd2x/eaGcVC7l7FVBF3G192vibOhy89lHmE4toA= Subject key identifier: 5A:A7:FF:1F:80:CA:61:16:E8:C1:46:C1:23:4C:72:23:A4:17:C3:19 Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F4328584C109B7F5E5FB72FC708A23D60 Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa Signing time: Wed 03 Dec 2025 14:00:38 +0000 ROA not before: Wed 03 Dec 2025 14:00:38 +0000 ROA not after: Tue 03 Mar 2026 14:00:38 +0000 asID: 32242 IP address blocks: 172.102.2.0/24 maxlen: 24 172.102.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:9b:7f:5e:5f:b7:2f:c7:08:a2:3d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: Dec 3 14:00:38 2025 GMT Not After : Mar 3 14:00:38 2026 GMT Subject: CN=97c66cb7-5ed7-48cd-89b2-c3092291d754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d6:b0:9f:47:ae:53:64:41:3e:73:98:10:9e: 4b:e0:fd:57:fb:13:31:46:28:ae:dc:f4:c4:04:65: 32:24:c8:57:cc:fb:04:04:27:ef:02:6b:8d:96:58: 54:ab:b5:47:1d:4d:f9:f6:db:3a:aa:5c:56:60:b9: 1e:88:d3:e6:86:65:92:e9:f1:2e:70:3a:57:b3:4f: b5:96:82:2b:0c:54:60:01:dd:5b:29:76:86:01:9d: d0:06:8e:c9:bb:11:51:8d:59:e9:e5:31:a0:3f:db: aa:6f:40:d1:ec:51:36:2a:90:6b:6e:4a:e2:e2:0a: 14:c2:b5:ce:ad:3b:4a:3c:4e:79:83:8b:be:3f:8c: 87:24:69:b8:77:87:54:a5:7c:90:b1:7a:5c:d5:0b: 9b:69:9a:7c:51:5c:0f:4a:b8:78:98:a0:9a:61:63: 57:c1:f6:a2:88:c5:69:1a:b5:e3:2e:78:88:b2:97: 28:a9:31:cc:4d:68:70:37:fa:fc:e0:43:35:8e:c5: 2c:3b:9d:82:1e:53:93:a5:2b:2f:2d:bf:b2:ae:18: 89:ff:3e:5d:a9:17:0d:f5:e3:2b:c6:97:37:2c:92: a1:3d:76:4c:be:4b:01:b9:77:7c:c9:1c:36:5f:2e: 35:5a:0e:ef:88:96:4c:ce:aa:0e:b8:88:cf:aa:34: 39:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A7:FF:1F:80:CA:61:16:E8:C1:46:C1:23:4C:72:23:A4:17:C3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv4: 172.102.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:35:4a:e0:9b:93:07:d9:fe:18:34:c1:5e:6e:1c:17:d5:e6: 45:64:4d:52:3e:95:aa:5e:55:0e:cc:19:af:fa:cb:91:0a:99: 2f:54:fe:5c:62:df:80:4c:48:e5:e7:ac:18:16:16:f7:67:d1: 71:e0:98:85:78:0a:c8:f4:65:11:bd:7e:32:da:96:e5:6c:59: 84:b2:e8:10:64:76:7b:c2:ae:5d:73:42:f1:3e:5b:e6:3b:a2: 4d:42:5d:8a:3b:95:9b:b9:2c:d1:cf:49:26:ff:89:10:23:b1: 52:88:c5:eb:11:cc:7f:6a:d9:da:9e:6e:5e:ff:a9:6b:d6:ee: 97:a4:de:f7:85:41:ee:50:4b:bc:f1:db:63:aa:79:e7:c4:03: 41:44:df:d2:1d:92:bb:8f:5a:33:2e:6d:8e:33:35:af:43:95: 42:02:70:3f:11:20:c5:b5:9b:64:30:a5:bc:8b:d4:e5:1c:e2: 50:a6:2d:26:73:5e:66:8b:96:43:34:45:53:f0:14:57:bb:25: c6:e8:74:eb:a7:66:07:bf:03:d0:50:80:de:e8:39:bd:fb:b5: 0c:c0:7d:48:27:f2:ef:45:ef:15:20:9b:f6:c1:f5:a9:52:ba: 55:4c:d3:d9:cc:e2:25:67:3e:ac:7d:e4:85:bc:4f:86:01:73: c8:ca:78:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwQm39eX7cvxwiiPWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI1MTIwMzE0MDAzOFoXDTI2MDMwMzE0MDAzOFowLzEtMCsGA1UEAxMk OTdjNjZjYjctNWVkNy00OGNkLTg5YjItYzMwOTIyOTFkNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNawn0euU2RBPnOYEJ5L4P1X+xMxRiiu3PTE BGUyJMhXzPsEBCfvAmuNllhUq7VHHU359ts6qlxWYLkeiNPmhmWS6fEucDpXs0+1 loIrDFRgAd1bKXaGAZ3QBo7JuxFRjVnp5TGgP9uqb0DR7FE2KpBrbkri4goUwrXO rTtKPE55g4u+P4yHJGm4d4dUpXyQsXpc1QubaZp8UVwPSrh4mKCaYWNXwfaiiMVp GrXjLniIspcoqTHMTWhwN/r84EM1jsUsO52CHlOTpSsvLb+yrhiJ/z5dqRcN9eMr xpc3LJKhPXZMvksBuXd8yRw2Xy41Wg7viJZMzqoOuIjPqjQ5HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqn/x+AymEW6MFGwSNMciOkF8MZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvNzBlYjJkMDktYmY1MS0z NzkzLThhZjMtODMxMjE3YjhhMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG41SuCbkwfZ/hg0wV5uHBfV5kVkTVI+lapeVQ7MGa/6y5EKmS9U/lxi 34BMSOXnrBgWFvdn0XHgmIV4Csj0ZRG9fjLaluVsWYSy6BBkdnvCrl1zQvE+W+Y7 ok1CXYo7lZu5LNHPSSb/iRAjsVKIxesRzH9q2dqebl7/qWvW7pek3veFQe5QS7zx 22OqeefEA0FE39IdkruPWjMubY4zNa9DlUICcD8RIMW1m2QwpbyL1OUc4lCmLSZz XmaLlkM0RVPwFFe7JcbodOunZge/A9BQgN7oOb37tQzAfUgn8u9F7xUgm/bB9alS ulVM09nM4iVnPqx95IW8T4YBc8jKeH4= -----END CERTIFICATE-----Generated at Sat Dec 6 20:18:17 2025 by rpki-client