This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa File: cfddd6a1-ab8f-3790-8282-f78bc658b358.roa (raw, json) Hash identifier: XaqO91sfKWsgqgQhk24AnkyYHB5ayZqw7MKhDL20mwc= Subject key identifier: 93:63:26:78:B4:91:53:E9:5D:35:94:5F:CA:C3:AB:D3:EC:A0:A0:F8 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BE8206F06EA9181615BCBC240 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa Signing time: Wed 19 Nov 2025 02:00:30 +0000 ROA not before: Wed 19 Nov 2025 02:00:30 +0000 ROA not after: Tue 17 Feb 2026 02:00:30 +0000 asID: 31898 IP address blocks: 158.120.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e8:20:6f:06:ea:91:81:61:5b:cb:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Nov 19 02:00:30 2025 GMT Not After : Feb 17 02:00:30 2026 GMT Subject: CN=8ba05a58-fa08-467f-a1ce-36840b42b955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:22:62:0b:7e:0c:30:22:79:eb:94:c7:3a:12: 95:fd:58:fe:40:dc:94:a2:34:98:4f:33:8a:27:3c: 76:79:1e:de:07:45:ce:51:e3:22:fe:68:1a:42:cc: c0:9f:1c:e2:b8:8d:56:68:ca:b7:b2:a4:07:25:d2: f5:38:b5:c3:d5:f9:4d:bd:0b:fc:60:88:41:9c:61: 87:ac:7c:b1:4e:e6:85:16:bb:a2:3d:c5:81:31:ea: 8e:81:21:c9:00:ba:c5:b7:95:a9:ea:7b:78:9d:d5: 4b:b4:4c:da:b9:d6:0a:cb:1c:79:56:df:7b:9e:c9: 69:b4:c2:6f:54:3c:5c:69:42:06:05:bb:43:6a:8e: c5:ff:d1:3a:48:ad:b2:01:da:de:75:71:33:7d:f4: 27:ec:3f:90:83:4a:eb:95:eb:a0:ef:05:df:65:85: 49:ba:92:bf:d2:aa:cb:3a:85:2a:09:d6:40:39:7c: 2a:11:86:d0:f7:0b:ae:76:65:a8:ae:98:3f:09:5d: c2:5b:1a:31:3d:32:e1:12:90:d9:10:aa:15:97:da: c0:aa:65:6d:a1:95:e1:d1:94:f8:62:c3:4e:08:02: 27:49:55:56:5b:a0:ce:91:75:07:b5:e1:84:4b:ab: 07:dd:b0:cb:cb:8b:94:8a:cc:7f:f2:d7:7a:20:6d: 91:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:63:26:78:B4:91:53:E9:5D:35:94:5F:CA:C3:AB:D3:EC:A0:A0:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cfddd6a1-ab8f-3790-8282-f78bc658b358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 158.120.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a2:27:83:2d:96:d9:b2:11:6b:11:7e:07:3b:dd:b5:80:6d: 3d:29:23:de:53:25:00:cf:45:b1:9d:7e:c9:48:ac:1c:b6:af: 4b:b6:48:a6:69:f2:40:d5:e7:e3:c3:31:ba:e5:10:1f:c3:df: af:3f:64:ff:85:71:1f:37:a6:f2:3e:b5:c2:c0:fd:f9:a1:cc: b5:c8:10:81:10:29:a8:1b:6b:31:85:75:51:d6:91:be:7b:2a: 61:af:21:c8:32:6d:11:e8:66:f1:3b:17:c0:99:0e:16:a1:19: 2b:74:79:66:fe:9a:25:8a:b4:32:b5:ba:7c:6d:9b:0c:8c:2d: 42:2d:99:83:61:d8:e5:0a:4e:47:72:9a:7c:45:15:68:f3:82: 26:08:7a:88:21:43:d9:7d:11:44:bc:fd:bf:ea:49:b2:a3:6c: b0:7f:91:e2:dd:e3:4f:6d:be:62:5e:19:10:de:28:39:fa:5a: f4:72:d1:b8:9a:1d:90:ec:7c:34:88:6e:98:09:9f:bc:f5:8b: 89:ec:b8:fc:e1:c9:7b:31:db:02:7a:ad:c8:b8:9f:ec:cf:ac: b7:9f:48:c0:63:a3:c1:f1:94:b1:1b:43:8f:a0:7b:5f:c1:67: 7d:c0:fe:9a:1d:26:b4:ea:c7:c0:db:80:75:cb:3e:04:3a:c1: d4:e3:a4:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvoIG8G6pGBYVvLwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTExOTAyMDAzMFoXDTI2MDIxNzAyMDAzMFowLzEtMCsGA1UEAxMk OGJhMDVhNTgtZmEwOC00NjdmLWExY2UtMzY4NDBiNDJiOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCJiC34MMCJ565THOhKV/Vj+QNyUojSYTzOK Jzx2eR7eB0XOUeMi/mgaQszAnxziuI1WaMq3sqQHJdL1OLXD1flNvQv8YIhBnGGH rHyxTuaFFruiPcWBMeqOgSHJALrFt5Wp6nt4ndVLtEzaudYKyxx5Vt97nslptMJv VDxcaUIGBbtDao7F/9E6SK2yAdredXEzffQn7D+Qg0rrleug7wXfZYVJupK/0qrL OoUqCdZAOXwqEYbQ9wuudmWorpg/CV3CWxoxPTLhEpDZEKoVl9rAqmVtoZXh0ZT4 YsNOCAInSVVWW6DOkXUHteGES6sH3bDLy4uUisx/8td6IG2RbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNjJni0kVPpXTWUX8rDq9PsoKD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2ZkZGQ2YTEtYWI4Zi0z NzkwLTgyODItZjc4YmM2NThiMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnngUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmiJ4MtltmyEWsRfgc73bWAbT0pI95TJQDPRbGdfslIrBy2r0u2SKZp 8kDV5+PDMbrlEB/D368/ZP+FcR83pvI+tcLA/fmhzLXIEIEQKagbazGFdVHWkb57 KmGvIcgybRHoZvE7F8CZDhahGSt0eWb+miWKtDK1unxtmwyMLUItmYNh2OUKTkdy mnxFFWjzgiYIeoghQ9l9EUS8/b/qSbKjbLB/keLd409tvmJeGRDeKDn6WvRy0bia HZDsfDSIbpgJn7z1i4nsuPzhyXsx2wJ6rci4n+zPrLefSMBjo8HxlLEbQ4+ge1/B Z33A/podJrTqx8DbgHXLPgQ6wdTjpNA= -----END CERTIFICATE-----Generated at Sat Dec 6 16:49:11 2025 by rpki-client