This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20c01e1b-7b2d-38c9-9e59-9998391566ac.roa File: 20c01e1b-7b2d-38c9-9e59-9998391566ac.roa (raw, json) Hash identifier: WKluvLKSKYB1wfZj6UCo/xKS3bagt1D4JFNrepn2utY= Subject key identifier: 6C:07:CD:55:8C:57:A1:F5:BF:80:F6:2A:C4:8F:08:79:51:D6:EE:6E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCD9F2D855DF97815B8A4C380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20c01e1b-7b2d-38c9-9e59-9998391566ac.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 140.238.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9f:2d:85:5d:f9:78:15:b8:a4:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=54342ec5-7e89-42e6-b30e-c50e372b3f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:76:d8:d5:9d:ac:4e:d3:ba:95:82:51:d2: 3a:6d:37:c1:2b:d7:c7:24:c3:16:d0:76:06:f8:d2: 43:c5:3a:7d:18:a3:27:1f:45:d5:2c:9b:81:19:6f: da:81:60:d0:26:f2:a1:9b:6c:1e:ee:75:2e:72:7a: 15:9c:61:ed:d4:19:c2:d7:fe:e2:30:bb:97:46:c5: 72:b9:53:08:d1:32:d1:52:6b:e9:de:83:16:85:c6: 79:38:c9:28:92:00:f2:e6:91:2b:fb:c5:65:47:27: 41:bd:20:97:01:74:fb:fc:fc:f0:27:4d:c4:38:19: 58:9a:d0:c2:ca:f9:11:fd:1f:45:0a:a4:84:08:93: 0f:15:ed:0e:c9:1a:9c:fb:46:d3:25:1c:08:49:87: 15:bc:9b:2c:64:f4:a1:c9:28:5f:a7:34:eb:51:f7: 20:75:28:d4:f0:f4:77:c4:c2:0a:97:c1:ec:61:95: 07:e5:6e:c6:d8:c0:1e:f1:c4:da:f1:3f:26:f5:6a: aa:5b:72:79:26:8e:d5:f6:1d:1e:5b:b1:0e:6a:07: 69:e9:e1:35:e8:c2:64:c0:5e:21:e1:5e:75:08:5a: 26:a6:e8:71:7a:77:97:c3:f6:37:d8:8d:38:f5:e2: 46:e8:ab:eb:98:bd:63:9a:9a:2b:3e:40:6a:71:0e: 9b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:07:CD:55:8C:57:A1:F5:BF:80:F6:2A:C4:8F:08:79:51:D6:EE:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/20c01e1b-7b2d-38c9-9e59-9998391566ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:9b:c2:0d:f6:81:28:70:a6:04:c8:9c:90:f8:a3:85:9d:9c: 5a:14:8f:23:97:2c:74:c9:64:13:c6:80:ad:ae:2c:af:ae:b2: 0b:ac:9f:ce:c3:af:f3:81:de:01:2a:7c:87:f2:61:9b:c9:c8: 76:85:90:7b:58:f4:95:aa:6c:2b:5e:1c:24:f0:70:1d:58:14: 3b:58:98:48:d3:46:b6:19:8a:d8:45:38:bc:0a:a6:ce:3b:fc: 17:3e:2b:07:65:ea:6c:6b:11:82:89:5b:23:68:57:e6:34:c0: 3a:f9:80:83:58:dc:6c:80:22:fd:bd:6c:6b:7f:78:74:40:8d: 86:d1:02:c8:8e:e4:ed:dc:91:1a:fa:cc:93:6e:62:80:eb:da: c2:5d:ce:23:58:fb:e1:7c:dd:2a:0b:51:36:b8:e9:c5:4f:4a: 9b:63:34:32:a2:0b:da:b0:c9:a5:9a:e5:c2:a8:05:08:b3:5f: f2:76:43:91:27:e1:3a:f1:67:10:6e:c9:41:a7:8f:f6:61:d6: 66:0d:af:a7:2c:9e:86:38:d2:08:19:18:30:9c:8a:40:ec:64: e5:10:a0:65:f0:70:eb:a9:63:26:97:98:fe:64:89:58:c9:2d: 2d:7b:78:49:ee:70:5a:2b:8d:ff:d4:3e:dc:72:3b:40:be:4d: 13:d5:d7:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNny2FXfl4Fbikw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTQzNDJlYzUtN2U4OS00MmU2LWIzMGUtYzUwZTM3MmIzZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKp22NWdrE7TupWCUdI6bTfBK9fHJMMW0HYG +NJDxTp9GKMnH0XVLJuBGW/agWDQJvKhm2we7nUucnoVnGHt1BnC1/7iMLuXRsVy uVMI0TLRUmvp3oMWhcZ5OMkokgDy5pEr+8VlRydBvSCXAXT7/PzwJ03EOBlYmtDC yvkR/R9FCqSECJMPFe0OyRqc+0bTJRwISYcVvJssZPShyShfpzTrUfcgdSjU8PR3 xMIKl8HsYZUH5W7G2MAe8cTa8T8m9WqqW3J5Jo7V9h0eW7EOagdp6eE16MJkwF4h 4V51CFompuhxeneXw/Y32I049eJG6KvrmL1jmporPkBqcQ6bLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwHzVWMV6H1v4D2KsSPCHlR1u5uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjBjMDFlMWItN2IyZC0z OGM5LTllNTktOTk5ODM5MTU2NmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjO7sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGbwg32gShwpgTInJD4o4WdnFoUjyOXLHTJZBPGgK2uLK+usgusn87D r/OB3gEqfIfyYZvJyHaFkHtY9JWqbCteHCTwcB1YFDtYmEjTRrYZithFOLwKps47 /Bc+Kwdl6mxrEYKJWyNoV+Y0wDr5gINY3GyAIv29bGt/eHRAjYbRAsiO5O3ckRr6 zJNuYoDr2sJdziNY++F83SoLUTa46cVPSptjNDKiC9qwyaWa5cKoBQizX/J2Q5En 4TrxZxBuyUGnj/Zh1mYNr6csnoY40ggZGDCcikDsZOUQoGXwcOupYyaXmP5kiVjJ LS17eEnucForjf/UPtxyO0C+TRPV11U= -----END CERTIFICATE-----Generated at Sat Dec 6 17:37:50 2025 by rpki-client