This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0af20f2c-b1a3-32f2-8d3f-9ba513e2f28a.roa File: 0af20f2c-b1a3-32f2-8d3f-9ba513e2f28a.roa (raw, json) Hash identifier: nEfbwGtm5gt4OYmMnAEdDy8PGWyIjSHZ3Alt0wW2aBY= Subject key identifier: 60:EB:7C:AE:27:F1:1E:A6:B5:D8:D2:F9:35:42:06:79:48:20:D9:41 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BC6A0379B8895B438BBDBEA20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0af20f2c-b1a3-32f2-8d3f-9ba513e2f28a.roa Signing time: Fri 07 Nov 2025 02:00:30 +0000 ROA not before: Fri 07 Nov 2025 02:00:30 +0000 ROA not after: Thu 05 Feb 2026 02:00:30 +0000 asID: 31898 IP address blocks: 158.101.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c6:a0:37:9b:88:95:b4:38:bb:db:ea:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 7 02:00:30 2025 GMT Not After : Feb 5 02:00:30 2026 GMT Subject: CN=1dfde65b-ce0b-4a61-8c0f-c432d8e8319c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:64:21:02:c9:83:99:d8:5f:47:f8:bb:04:fa: 08:89:3d:b3:1f:54:90:41:4c:ce:62:40:3f:70:09: ef:c2:d8:c8:de:fa:2f:dc:4d:60:c5:32:ce:c6:d1: 7c:7e:39:22:d2:25:97:b9:ed:a3:9a:7e:0c:e0:0f: 1a:b2:88:a6:24:9a:73:75:09:8a:7b:fb:f7:94:fd: d7:49:0d:59:cb:e5:c6:d4:dd:68:e1:5f:1d:8d:19: 06:cc:e6:56:8b:1a:e3:cf:14:f1:24:4e:b8:7f:c2: c1:f4:13:1f:77:22:d2:4f:18:a4:ea:ef:41:3b:a5: 53:05:7f:13:ac:42:5a:64:eb:28:da:45:e1:0f:af: 0a:61:5b:5e:70:e2:d9:e0:fb:52:3b:9c:c7:75:7c: 51:19:85:2e:ca:4e:55:35:cb:67:9f:7e:2d:0a:2e: 38:3e:2c:f4:d0:c7:6e:b2:b6:dd:c3:2a:be:21:43: 7e:90:c3:9c:7d:5e:17:a7:8e:c6:06:45:38:36:2d: 15:71:78:3d:3a:20:15:11:a4:0f:30:99:ee:85:25: 38:c5:f2:42:93:70:c9:6e:93:64:07:70:fc:9e:20: 33:02:bf:b2:de:2f:52:b0:53:f5:c7:44:2b:6f:77: 7e:d9:ce:a1:33:57:55:37:71:3e:bf:2f:b1:e7:f9: 9a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EB:7C:AE:27:F1:1E:A6:B5:D8:D2:F9:35:42:06:79:48:20:D9:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0af20f2c-b1a3-32f2-8d3f-9ba513e2f28a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.101.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3d:67:22:de:3c:28:2c:46:77:b9:f5:3a:3b:77:9f:8e:02: 81:d5:c1:37:ea:23:56:f9:e1:d0:4a:cb:6b:d5:29:36:23:0c: 55:f6:e5:5d:f9:60:84:09:c8:94:ea:72:01:0d:4f:4e:62:c0: 21:a9:7a:4b:fa:13:20:88:7a:ce:a0:bd:2d:60:70:db:64:ec: d0:0b:6a:af:07:b0:ee:d2:71:43:e9:ad:53:3a:07:7e:4d:2a: 78:e7:84:ef:a5:d3:24:54:02:33:b4:18:a9:79:46:b0:8d:bb: 28:a7:dc:94:f1:53:25:90:e8:ec:85:4f:ce:49:cb:da:13:c2: 26:d2:ea:11:8e:e0:7b:7d:31:ff:6c:ee:05:ee:e3:99:da:71: de:02:2f:97:c9:42:d6:ec:9a:2f:b9:92:45:70:5d:71:a2:13: 22:a6:8c:56:a3:02:08:f6:3f:e6:a9:f6:50:53:06:b9:a7:ce: 86:3a:37:e8:59:f6:24:bf:6d:9a:07:95:31:39:b8:c9:59:f9: 49:a5:45:73:de:a0:11:a1:5f:26:d1:22:30:25:02:46:04:a3: de:b3:1e:5a:f3:dd:46:df:f7:3c:bd:81:f3:a5:31:a7:77:48: 0b:11:d5:6b:6b:43:a8:9b:14:8a:67:b1:5d:d3:ce:4f:02:cc: 03:05:07:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvGoDebiJW0OLvb6iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNzAyMDAzMFoXDTI2MDIwNTAyMDAzMFowLzEtMCsGA1UEAxMk MWRmZGU2NWItY2UwYi00YTYxLThjMGYtYzQzMmQ4ZTgzMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGQhAsmDmdhfR/i7BPoIiT2zH1SQQUzOYkA/ cAnvwtjI3vov3E1gxTLOxtF8fjki0iWXue2jmn4M4A8asoimJJpzdQmKe/v3lP3X SQ1Zy+XG1N1o4V8djRkGzOZWixrjzxTxJE64f8LB9BMfdyLSTxik6u9BO6VTBX8T rEJaZOso2kXhD68KYVtecOLZ4PtSO5zHdXxRGYUuyk5VNctnn34tCi44Piz00Mdu srbdwyq+IUN+kMOcfV4Xp47GBkU4Ni0VcXg9OiAVEaQPMJnuhSU4xfJCk3DJbpNk B3D8niAzAr+y3i9SsFP1x0Qrb3d+2c6hM1dVN3E+vy+x5/ma2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDrfK4n8R6mtdjS+TVCBnlIINlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGFmMjBmMmMtYjFhMy0z MmYyLThkM2YtOWJhNTEzZTJmMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnmWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ9ZyLePCgsRne59To7d5+OAoHVwTfqI1b54dBKy2vVKTYjDFX25V35 YIQJyJTqcgENT05iwCGpekv6EyCIes6gvS1gcNtk7NALaq8HsO7ScUPprVM6B35N KnjnhO+l0yRUAjO0GKl5RrCNuyin3JTxUyWQ6OyFT85Jy9oTwibS6hGO4Ht9Mf9s 7gXu45nacd4CL5fJQtbsmi+5kkVwXXGiEyKmjFajAgj2P+ap9lBTBrmnzoY6N+hZ 9iS/bZoHlTE5uMlZ+UmlRXPeoBGhXybRIjAlAkYEo96zHlrz3Ubf9zy9gfOlMad3 SAsR1WtrQ6ibFIpnsV3Tzk8CzAMFB94= -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:51 2025 by rpki-client