This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08b29b97-2a8a-345b-8711-2abeefec3c7d.roa File: 08b29b97-2a8a-345b-8711-2abeefec3c7d.roa (raw, json) Hash identifier: Nlm/2SP/ZLeY+9fRvD/Xlr8j0InflzJJn4Q2rNiv3zU= Subject key identifier: F5:94:85:BE:50:62:EA:4C:C5:9D:78:45:23:CD:F0:10:8A:B6:B7:0C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BDCF5EC057487D4A3DB957F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08b29b97-2a8a-345b-8711-2abeefec3c7d.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 31898 IP address blocks: 168.107.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:ec:05:74:87:d4:a3:db:95:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=ac4f0703-ac23-4502-af89-fe4662ff2dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:c1:e2:14:6d:4d:70:a1:0f:cb:00:c3:26: 5c:2a:ea:7d:b1:5a:a3:f7:38:0b:91:09:73:82:f6: 22:0d:d5:f1:f8:67:ec:a9:74:e3:d9:55:57:e8:b5: 83:83:6e:8a:47:c3:21:5a:66:9b:ca:ed:54:8e:57: 5e:6f:c9:6f:59:ab:61:ee:8c:08:24:a3:70:fc:cb: ac:ac:c2:68:86:c9:50:5d:a2:ab:d4:05:81:7e:c1: 1a:d8:60:bb:05:fa:57:ea:b4:66:4e:98:04:38:99: 59:1a:56:ef:38:cc:cd:cf:a8:0e:1f:94:a0:31:cc: 11:15:68:f8:81:08:c0:9a:f6:49:a5:5e:1e:3c:e8: 6b:b6:48:e2:68:d0:43:a0:39:bc:e5:08:32:44:06: 5b:63:6f:10:b6:0a:42:65:b7:1f:92:03:15:50:7e: c1:72:f9:c2:97:3c:b6:49:72:71:33:e4:18:60:19: 22:06:cd:ea:3c:74:93:66:3f:d1:6b:7a:1f:5e:d2: 0a:4a:75:68:fa:65:52:2a:52:c7:c8:11:70:96:57: 52:e7:71:46:9a:87:a6:a7:6a:cb:05:b5:92:f7:3a: f3:39:19:5a:c9:22:37:1c:c3:51:3d:20:a2:6a:58: cf:8f:ac:cf:7d:d7:88:0f:a8:ee:80:a5:46:bf:b4: fe:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:94:85:BE:50:62:EA:4C:C5:9D:78:45:23:CD:F0:10:8A:B6:B7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/08b29b97-2a8a-345b-8711-2abeefec3c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:67:30:75:63:04:7d:bf:c0:3c:1b:ae:90:ed:e4:53:bc:80: b8:11:81:97:ff:4a:2d:87:47:38:cc:e5:0a:4d:46:52:b8:fb: 57:eb:3a:e1:29:84:46:4f:81:04:84:d4:4f:f9:82:9c:c7:58: 33:32:9f:1b:af:e9:de:47:2d:78:98:92:3c:62:c5:30:00:38: df:eb:98:e8:9b:a6:dd:c3:55:a8:23:cf:c6:a2:15:9a:68:70: d3:f8:d9:f6:5c:05:10:79:ea:fc:2f:02:60:82:9d:35:44:f2: b0:ab:b2:be:9d:66:5e:45:f0:30:69:d0:8b:2d:10:d1:0f:6b: ce:b0:ce:5a:bc:c8:5d:df:8b:1a:76:9c:fa:9c:09:32:5f:8e: 21:9e:b1:3b:5d:f4:70:6b:c9:04:69:3c:3b:d9:ed:44:ef:22: 95:2d:86:f0:3e:a3:ee:1c:2d:ea:1b:00:fd:dc:8b:5e:5b:93: 32:2e:8d:66:69:df:89:be:4a:20:a5:41:5a:ec:ff:3c:2d:7a: a7:24:4d:56:55:6a:d3:b8:61:80:1b:44:fa:56:7e:18:f5:b0: e5:cc:4d:0b:0b:15:65:bc:e5:78:80:d1:61:1a:0e:88:2d:d8: 4c:f5:c6:c4:1a:fc:b6:a0:71:d5:b9:7f:9d:60:bd:1c:f4:2c: 13:4c:eb:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9ewFdIfUo9uVfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk YWM0ZjA3MDMtYWMyMy00NTAyLWFmODktZmU0NjYyZmYyZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTnB4hRtTXChD8sAwyZcKup9sVqj9zgLkQlz gvYiDdXx+GfsqXTj2VVX6LWDg26KR8MhWmabyu1Ujldeb8lvWath7owIJKNw/Mus rMJohslQXaKr1AWBfsEa2GC7BfpX6rRmTpgEOJlZGlbvOMzNz6gOH5SgMcwRFWj4 gQjAmvZJpV4ePOhrtkjiaNBDoDm85QgyRAZbY28QtgpCZbcfkgMVUH7BcvnClzy2 SXJxM+QYYBkiBs3qPHSTZj/Ra3ofXtIKSnVo+mVSKlLHyBFwlldS53FGmoemp2rL BbWS9zrzORlaySI3HMNRPSCialjPj6zPfdeID6jugKVGv7T+DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWUhb5QYupMxZ14RSPN8BCKtrcMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDhiMjliOTctMmE4YS0z NDViLTg3MTEtMmFiZWVmZWMzYzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtnMHVjBH2/wDwbrpDt5FO8gLgRgZf/Si2HRzjM5QpNRlK4+1frOuEp hEZPgQSE1E/5gpzHWDMynxuv6d5HLXiYkjxixTAAON/rmOibpt3DVagjz8aiFZpo cNP42fZcBRB56vwvAmCCnTVE8rCrsr6dZl5F8DBp0IstENEPa86wzlq8yF3fixp2 nPqcCTJfjiGesTtd9HBryQRpPDvZ7UTvIpUthvA+o+4cLeobAP3ci15bkzIujWZp 34m+SiClQVrs/zwteqckTVZVatO4YYAbRPpWfhj1sOXMTQsLFWW85XiA0WEaDogt 2Ez1xsQa/LagcdW5f51gvRz0LBNM6/k= -----END CERTIFICATE-----Generated at Sat Dec 6 23:12:58 2025 by rpki-client