This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa File: 0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa (raw, json) Hash identifier: XFpdTGxx4sT7gw8A7lPNdpWx0FklMIOxbSzf2qTTCC0= Subject key identifier: 61:41:22:B8:46:D9:6B:6F:13:1A:1A:50:F5:E6:C5:70:C4:E5:92:27 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BC6A038287CC5BEA1A2ECE340 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa Signing time: Fri 07 Nov 2025 02:00:30 +0000 ROA not before: Fri 07 Nov 2025 02:00:30 +0000 ROA not after: Thu 05 Feb 2026 02:00:30 +0000 asID: 31898 IP address blocks: 192.29.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c6:a0:38:28:7c:c5:be:a1:a2:ec:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 7 02:00:30 2025 GMT Not After : Feb 5 02:00:30 2026 GMT Subject: CN=618a93f4-1b7f-4d84-a0ba-b2eed7cd5d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:43:a1:f4:b1:44:bf:63:eb:cc:30:07:0c: 56:db:63:c8:41:34:45:d6:2f:21:1e:4f:16:15:9e: 9c:da:6e:26:6f:76:c4:9d:41:26:8b:f9:03:b3:5d: 7a:10:cb:e1:93:3b:dd:04:b2:45:7c:e8:51:84:b4: 0d:53:08:2b:86:c2:2f:eb:ae:46:f0:14:b6:43:1e: 4c:6e:7a:8b:74:d1:a3:fb:79:47:34:c6:ea:fe:8d: 48:05:68:29:f5:1a:8b:bc:cf:04:f2:14:db:99:75: e0:e5:1f:8d:65:64:9d:4f:64:47:d7:1c:fb:15:ed: a9:1e:12:3b:d7:e2:f1:ee:55:27:e4:51:73:21:e1: 25:e8:48:77:f2:13:e8:54:aa:2d:6a:7d:fa:96:26: 6e:8a:16:eb:d6:7a:24:46:fa:02:1b:34:83:08:4c: 64:70:72:ef:f1:ca:cd:0b:85:cb:f5:ee:dc:65:74: e0:85:8d:54:59:9a:64:ee:a4:03:1f:0a:3c:c1:04: fc:f5:f2:76:14:f9:30:f1:12:b5:7d:43:c2:6c:3b: 13:af:66:b9:d2:86:4a:7f:1e:91:9c:29:03:5f:73: 79:5f:22:95:26:9e:54:d7:f2:48:98:ec:f8:5b:4b: 60:30:8d:19:cc:12:a4:27:7c:10:ab:bb:3e:5d:32: 91:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:41:22:B8:46:D9:6B:6F:13:1A:1A:50:F5:E6:C5:70:C4:E5:92:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0c52c9d5-0892-3bb8-b3f1-8c443da8f926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f4:93:37:f3:66:ab:34:d7:45:a8:93:c1:ed:05:e4:cb:ac: 4b:ae:2e:8a:20:4c:2f:d1:d3:d1:a2:73:ae:9a:af:3e:04:b0: 2c:4a:24:f4:0f:5f:8b:84:25:4b:99:64:6f:49:cb:a4:3b:3b: 7f:66:62:ea:80:95:6a:08:e9:de:bb:64:5b:cc:83:c2:27:3b: bb:1d:3c:f1:e3:99:ee:2b:a5:cc:09:80:0b:57:e4:b0:8b:75: dd:30:4c:4f:0b:a6:e1:f6:e8:42:1a:f3:d4:89:54:95:d6:62: 83:6f:a7:74:77:07:a4:2e:60:61:e9:86:dd:30:dc:50:51:c8: 75:13:9b:e5:ed:97:6b:36:cd:7f:8c:18:fc:82:ac:51:9a:8e: 0a:9b:d7:d3:18:5e:d7:3e:5e:75:da:70:ef:82:6b:ef:63:ae: 48:40:85:dc:ac:db:4f:d2:93:ef:d4:c2:ff:64:da:5d:dd:fe: cf:4d:be:a0:50:ce:2d:7e:bc:a9:96:21:fd:96:79:45:f1:eb: 14:8c:39:a6:d1:00:f7:65:16:ee:98:b0:e8:6f:01:bf:4e:d0: 09:24:ad:21:64:03:e0:cc:d7:04:fa:98:b9:25:a3:c5:c6:ac: 97:0c:a3:01:97:de:6a:36:59:31:b3:1b:bd:ea:cd:76:09:ac: e7:9a:eb:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvGoDgofMW+oaLs40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNzAyMDAzMFoXDTI2MDIwNTAyMDAzMFowLzEtMCsGA1UEAxMk NjE4YTkzZjQtMWI3Zi00ZDg0LWEwYmEtYjJlZWQ3Y2Q1ZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqlDofSxRL9j68wwBwxW22PIQTRF1i8hHk8W FZ6c2m4mb3bEnUEmi/kDs116EMvhkzvdBLJFfOhRhLQNUwgrhsIv665G8BS2Qx5M bnqLdNGj+3lHNMbq/o1IBWgp9RqLvM8E8hTbmXXg5R+NZWSdT2RH1xz7Fe2pHhI7 1+Lx7lUn5FFzIeEl6Eh38hPoVKotan36liZuihbr1nokRvoCGzSDCExkcHLv8crN C4XL9e7cZXTghY1UWZpk7qQDHwo8wQT89fJ2FPkw8RK1fUPCbDsTr2a50oZKfx6R nCkDX3N5XyKVJp5U1/JImOz4W0tgMI0ZzBKkJ3wQq7s+XTKRnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFBIrhG2WtvExoaUPXmxXDE5ZInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGM1MmM5ZDUtMDg5Mi0z YmI4LWIzZjEtOGM0NDNkYThmOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD0kzfzZqs010Wok8HtBeTLrEuuLoogTC/R09Gic66arz4EsCxKJPQP X4uEJUuZZG9Jy6Q7O39mYuqAlWoI6d67ZFvMg8InO7sdPPHjme4rpcwJgAtX5LCL dd0wTE8LpuH26EIa89SJVJXWYoNvp3R3B6QuYGHpht0w3FBRyHUTm+Xtl2s2zX+M GPyCrFGajgqb19MYXtc+XnXacO+Ca+9jrkhAhdys20/Sk+/Uwv9k2l3d/s9NvqBQ zi1+vKmWIf2WeUXx6xSMOabRAPdlFu6YsOhvAb9O0AkkrSFkA+DM1wT6mLklo8XG rJcMowGX3mo2WTGzG73qzXYJrOea60k= -----END CERTIFICATE-----Generated at Sun Dec 7 01:21:14 2025 by rpki-client