This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19404fb0-1c9e-30cc-bb2e-23a9e637fa9d.roa File: 19404fb0-1c9e-30cc-bb2e-23a9e637fa9d.roa (raw, json) Hash identifier: oK/551NBGYLKZFN7lKwD7yyZ2M32g5JXsPHT8AvIVMI= Subject key identifier: 01:95:F1:00:F2:6C:FB:F9:27:F5:F0:5A:BD:8F:A5:BB:6A:9F:D2:29 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BD8C5D06404A3E83A165E8740 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19404fb0-1c9e-30cc-bb2e-23a9e637fa9d.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 147.154.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:d0:64:04:a3:e8:3a:16:5e:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=91c1a63d-83a5-489f-bd31-cb07e6e1f98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:12:16:b3:30:9a:89:e3:fa:06:a2:d0:a9:66: ec:52:b5:60:3f:93:18:c5:d4:28:1c:cc:29:f9:23: 46:7f:0d:34:a4:6a:e8:da:fa:3e:9a:eb:bd:48:e1: 04:ec:84:9e:b3:cf:89:e9:26:9e:d5:aa:8b:e6:f8: 5e:9f:c3:07:60:47:28:ca:93:7f:e7:12:cd:58:8b: 59:34:9d:6b:62:c5:77:8f:05:d4:b1:89:bd:7b:cd: 87:58:3d:08:1e:91:4c:1f:ce:4d:65:2b:d0:24:91: d8:30:4d:fa:5e:06:b3:0e:bf:38:59:6b:c0:1d:db: 7c:2b:8f:21:17:9f:68:4e:74:e0:1c:38:6f:95:b1: 26:af:98:e1:89:7c:4d:f0:35:95:1d:5e:a1:b3:cb: 93:ad:ae:a3:2e:25:c7:e9:06:01:50:e7:c3:b3:a8: 95:a7:c1:68:b4:73:f1:2b:08:ce:9b:b1:6c:17:b1: 17:4d:7a:f8:e4:51:3f:7a:1f:59:42:79:c9:f9:4c: ca:fe:e0:6f:5e:98:54:df:37:ad:94:8b:1c:41:df: 78:f7:85:e5:3b:0b:81:b0:d4:73:89:94:d7:03:2e: c2:39:87:4b:f8:68:d3:6d:3e:2d:ed:e1:6c:4e:e2: 28:d5:b0:a9:9d:6f:1d:bd:85:74:40:d6:c5:b7:ac: 27:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:95:F1:00:F2:6C:FB:F9:27:F5:F0:5A:BD:8F:A5:BB:6A:9F:D2:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19404fb0-1c9e-30cc-bb2e-23a9e637fa9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:b2:dc:6d:9f:3d:ad:dc:ed:1d:65:be:85:00:5f:b5:01:56: ae:1f:92:50:39:71:b6:6e:d3:43:7a:91:ac:38:fe:c0:b9:04: ad:a7:ac:ae:a9:c6:78:bf:f0:c2:ae:f8:69:41:2a:24:85:cf: 75:34:d8:81:4e:09:c5:a6:e5:3a:f7:b3:b2:20:8d:48:e2:c9: ac:2d:cc:78:e0:e0:89:51:0a:40:de:15:5f:5e:60:2a:73:84: a0:e6:17:bf:e8:d2:c9:56:91:07:08:b2:87:94:58:21:69:85: 0f:8e:22:58:ab:df:8a:05:aa:60:f1:f6:5d:e1:64:cb:e2:80: d5:17:bc:eb:aa:a3:eb:7c:28:73:45:f4:72:27:cd:65:47:26: 3d:56:c3:ac:fe:50:69:11:76:18:fb:04:0c:ed:aa:23:77:a7: 32:62:ac:b4:c1:ed:26:03:2f:cd:5d:42:00:bc:a0:dc:b3:e6: 48:c2:7a:aa:ba:a5:e7:6d:d5:b9:23:24:56:79:16:32:5d:fb: 09:57:66:11:5f:6e:49:a7:18:ed:c4:f8:8e:d1:c1:2b:bb:6d: c1:42:a8:4b:11:40:63:9a:84:84:7e:db:75:63:63:75:5f:8e: b7:b9:1c:9f:81:71:ee:0a:45:07:fe:5d:db:73:d8:4f:bb:4b: d3:d1:4a:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxdBkBKPoOhZeh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk OTFjMWE2M2QtODNhNS00ODlmLWJkMzEtY2IwN2U2ZTFmOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixIWszCaieP6BqLQqWbsUrVgP5MYxdQoHMwp +SNGfw00pGro2vo+muu9SOEE7ISes8+J6Sae1aqL5vhen8MHYEcoypN/5xLNWItZ NJ1rYsV3jwXUsYm9e82HWD0IHpFMH85NZSvQJJHYME36XgazDr84WWvAHdt8K48h F59oTnTgHDhvlbEmr5jhiXxN8DWVHV6hs8uTra6jLiXH6QYBUOfDs6iVp8FotHPx KwjOm7FsF7EXTXr45FE/eh9ZQnnJ+UzK/uBvXphU3zetlIscQd9494XlOwuBsNRz iZTXAy7COYdL+GjTbT4t7eFsTuIo1bCpnW8dvYV0QNbFt6wniwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGV8QDybPv5J/XwWr2Ppbtqn9IpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTk0MDRmYjAtMWM5ZS0z MGNjLWJiMmUtMjNhOWU2MzdmYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+y3G2fPa3c7R1lvoUAX7UBVq4fklA5cbZu00N6kaw4/sC5BK2nrK6p xni/8MKu+GlBKiSFz3U02IFOCcWm5Tr3s7IgjUjiyawtzHjg4IlRCkDeFV9eYCpz hKDmF7/o0slWkQcIsoeUWCFphQ+OIlir34oFqmDx9l3hZMvigNUXvOuqo+t8KHNF 9HInzWVHJj1Ww6z+UGkRdhj7BAztqiN3pzJirLTB7SYDL81dQgC8oNyz5kjCeqq6 pedt1bkjJFZ5FjJd+wlXZhFfbkmnGO3E+I7RwSu7bcFCqEsRQGOahIR+23VjY3Vf jre5HJ+Bce4KRQf+Xdtz2E+7S9PRSls= -----END CERTIFICATE-----Generated at Sat Dec 6 18:38:03 2025 by rpki-client