This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa File: 1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa (raw, json) Hash identifier: WMTHrImv0O+F7VVAezzyCDyaZ24j2PafhxKCAxCwWEM= Subject key identifier: 84:3B:CA:B3:48:EB:01:42:84:21:DA:A5:D2:26:3A:5C:DB:90:3A:71 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCD9F2EE3902FB0FDB0459B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 168.138.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9f:2e:e3:90:2f:b0:fd:b0:45:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=c794bfbd-2b3e-4acb-a531-aa7813b4e33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:38:de:f5:6c:79:e9:58:b0:d5:50:fc:7c:9b: b7:d3:7d:2d:8d:75:31:cc:9f:26:25:27:cf:79:2f: 1a:86:a6:c5:c7:72:77:a5:1d:0b:a0:60:ae:21:fa: 6a:1e:1a:bc:e8:c2:c1:25:88:23:cf:24:6a:10:de: 17:63:91:c2:e3:b2:11:2c:09:9c:10:e5:0b:a5:8e: 69:b1:ac:96:f4:23:5b:bc:20:8c:0a:b7:67:83:60: c3:06:a7:72:a2:a1:94:a1:d9:90:59:13:a6:d6:60: d8:d9:50:4a:d6:a9:d6:25:cc:c2:8a:f1:db:e6:92: c5:e6:ec:e4:b2:2c:a9:b2:3d:09:c2:39:06:8d:5a: e4:30:84:d2:a1:72:2a:57:8a:40:c6:ca:b6:a7:a7: c3:cb:5f:a7:36:08:6c:ab:14:88:85:6b:cb:a4:c6: da:67:5d:6f:84:7f:fd:48:88:8e:8f:2c:f1:f7:9d: 11:5f:01:63:7a:d7:98:58:30:25:61:23:0f:88:74: 13:f2:65:63:86:49:33:05:61:a5:b2:e2:82:23:05: b2:e2:65:f6:e9:96:6b:65:e3:02:82:a6:35:5d:0d: cc:b8:ac:55:88:c7:13:07:7a:40:51:69:e2:a7:47: 83:46:f4:69:06:97:3f:92:cf:fe:7d:94:05:c5:0e: 96:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3B:CA:B3:48:EB:01:42:84:21:DA:A5:D2:26:3A:5C:DB:90:3A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1ec20e74-a8ad-3fc9-91a1-562886e87b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:62:3e:e9:23:ce:4a:49:55:db:0b:78:dc:e2:70:1b:0a:88: 97:97:31:01:6f:2f:37:3e:b8:4b:ca:74:83:96:fd:7a:ed:ba: 64:39:6b:b7:11:50:27:63:3f:3a:0b:01:9e:42:75:e2:80:29: 46:98:41:91:c5:64:d9:46:fe:c5:55:79:56:9c:9a:e8:11:99: 84:a9:95:3c:cc:1d:7b:b8:ec:e6:7a:50:b9:e1:60:f3:0c:99: ce:b7:74:51:a9:60:72:ff:46:ea:ad:8d:95:48:85:8e:a1:0d: 3d:c1:50:ad:62:6b:14:bb:e1:b3:28:55:57:0d:fb:99:35:91: 5c:b5:35:dd:97:ba:18:b5:8b:7a:dd:44:0f:0e:e9:af:73:d4: 9c:bd:23:9f:e1:82:4d:fb:98:5e:1b:80:14:82:3d:02:d9:5d: 7b:85:7c:9a:ed:6d:ec:ae:9e:a8:1b:cb:26:67:f7:ae:7f:70: d0:92:cd:64:83:f9:a8:2d:4a:92:82:d9:1a:d9:ff:8d:7b:49: 2c:74:0f:37:c4:c0:6e:af:ec:b8:50:48:ac:0f:49:a9:b4:80: 66:99:08:ad:22:28:93:20:6d:0e:61:c9:c9:a6:31:4e:3c:b0: 82:77:42:74:8b:0d:7d:26:df:25:3a:9c:2d:26:44:ce:2b:aa: 92:53:04:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNny7jkC+w/bBFmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk Yzc5NGJmYmQtMmIzZS00YWNiLWE1MzEtYWE3ODEzYjRlMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDje9Wx56Viw1VD8fJu3030tjXUxzJ8mJSfP eS8ahqbFx3J3pR0LoGCuIfpqHhq86MLBJYgjzyRqEN4XY5HC47IRLAmcEOULpY5p sayW9CNbvCCMCrdng2DDBqdyoqGUodmQWROm1mDY2VBK1qnWJczCivHb5pLF5uzk siypsj0JwjkGjVrkMITSoXIqV4pAxsq2p6fDy1+nNghsqxSIhWvLpMbaZ11vhH/9 SIiOjyzx950RXwFjeteYWDAlYSMPiHQT8mVjhkkzBWGlsuKCIwWy4mX26ZZrZeMC gqY1XQ3MuKxViMcTB3pAUWnip0eDRvRpBpc/ks/+fZQFxQ6WrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQ7yrNI6wFChCHapdImOlzbkDpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWVjMjBlNzQtYThhZC0z ZmM5LTkxYTEtNTYyODg2ZTg3YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqIqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBiPukjzkpJVdsLeNzicBsKiJeXMQFvLzc+uEvKdIOW/XrtumQ5a7cR UCdjPzoLAZ5CdeKAKUaYQZHFZNlG/sVVeVacmugRmYSplTzMHXu47OZ6ULnhYPMM mc63dFGpYHL/RuqtjZVIhY6hDT3BUK1iaxS74bMoVVcN+5k1kVy1Nd2Xuhi1i3rd RA8O6a9z1Jy9I5/hgk37mF4bgBSCPQLZXXuFfJrtbeyunqgbyyZn965/cNCSzWSD +agtSpKC2RrZ/417SSx0DzfEwG6v7LhQSKwPSam0gGaZCK0iKJMgbQ5hycmmMU48 sIJ3QnSLDX0m3yU6nC0mRM4rqpJTBDM= -----END CERTIFICATE-----Generated at Sun Dec 7 01:19:56 2025 by rpki-client