This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21c8614b-c66f-38d2-959b-69f7c6b248de.roa File: 21c8614b-c66f-38d2-959b-69f7c6b248de.roa (raw, json) Hash identifier: ZwQ4dvLgy6+CDdaNshnafndWB4NCGTMUterRmDPM7NM= Subject key identifier: 7C:C6:3D:C9:03:6D:0A:21:E3:D3:BA:E0:9E:FB:1F:27:70:74:34:7D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCAD0669506ECDD82E7A2D048 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21c8614b-c66f-38d2-959b-69f7c6b248de.roa Signing time: Sat 08 Nov 2025 14:00:39 +0000 ROA not before: Sat 08 Nov 2025 14:00:39 +0000 ROA not after: Fri 06 Feb 2026 14:00:39 +0000 asID: 31898 IP address blocks: 40.233.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ca:d0:66:95:06:ec:dd:82:e7:a2:d0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 8 14:00:39 2025 GMT Not After : Feb 6 14:00:39 2026 GMT Subject: CN=252a47f0-776e-4ed9-bb1c-32d11798c324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:28:c6:32:c7:41:25:49:8d:e1:ad:6e:91: d3:ae:bf:a0:cb:4c:65:3b:77:19:b9:bf:5e:34:f7: 7c:70:ba:c4:5d:05:1a:b1:d3:b1:ff:01:20:68:d6: 4f:98:64:61:5f:0d:84:ca:ca:ed:a6:5f:66:8a:70: 94:52:63:90:75:01:7e:63:91:08:29:7b:64:d6:01: e6:ca:0d:42:40:de:c0:71:95:e3:68:73:95:a4:0c: ef:cb:de:22:6d:02:c8:2a:e0:b9:c1:7b:57:cc:a0: 4a:57:73:44:4c:fd:77:db:7f:d9:6c:1a:82:71:47: 02:cf:97:3f:e5:21:7d:d4:b9:4b:5e:f6:e9:3b:f2: ce:5d:ea:ce:f0:71:db:31:53:df:aa:30:41:dc:7c: 41:fb:a6:10:79:ea:f0:f0:b7:8d:29:c4:85:38:8d: 09:05:b1:97:15:c5:2f:7b:1d:7f:34:a7:76:39:65: 36:8e:0a:4e:0f:e1:a4:3e:bf:a3:26:7d:2b:e0:02: 34:88:b0:8a:3a:4b:cd:8b:70:98:a5:91:a0:e1:72: 96:ce:53:e6:bd:ec:57:c9:80:6c:bb:53:9a:24:78: c7:af:76:90:aa:20:9c:34:33:a8:89:59:b7:4f:72: f8:81:bb:bc:15:b8:23:99:e9:3c:0f:e9:a9:db:02: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C6:3D:C9:03:6D:0A:21:E3:D3:BA:E0:9E:FB:1F:27:70:74:34:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21c8614b-c66f-38d2-959b-69f7c6b248de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 40.233.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:3f:e2:13:d6:fa:34:01:03:1d:03:94:c3:d9:33:e8:75:48: f5:c0:9b:6b:a9:ae:e7:46:4d:79:da:64:11:a5:e8:8e:ae:18: cc:ba:a3:fd:9c:32:ea:df:f4:2b:dc:8e:3d:fc:c8:76:7f:9c: d1:92:5e:18:1e:e2:24:12:ab:77:aa:2b:a2:1e:1e:0a:4d:f3: 52:12:00:4d:c2:88:20:2a:0e:ff:94:3a:82:52:89:85:da:cd: 43:7f:bd:10:6e:91:66:6d:32:57:ca:30:90:8e:f8:2c:9a:11: 03:0a:b0:e1:f5:59:d7:c5:a6:77:8d:01:2a:ed:09:b2:1b:fa: c7:76:ff:9a:4f:71:7f:bc:12:66:79:f5:e8:42:b2:a7:54:59: f4:29:73:56:60:28:85:71:3e:4f:29:cb:ad:8b:ad:db:f8:61: ea:91:87:f7:38:d2:43:1e:ca:e3:a8:bc:69:4b:11:93:36:4c: 08:57:cc:2a:47:f5:8d:45:bd:8e:61:0d:39:ca:9a:86:6a:8b: 5a:60:ab:90:fb:9d:51:18:cf:02:c1:fa:b5:56:98:ab:17:77: 93:48:9f:af:b9:77:71:20:56:b3:60:fa:9a:5c:ad:ed:b6:24: bd:7a:d0:87:75:5f:8a:b2:a9:25:47:d1:f4:f5:b8:93:ca:1d: 09:1e:05:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvK0GaVBuzdguei0EgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwODE0MDAzOVoXDTI2MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk MjUyYTQ3ZjAtNzc2ZS00ZWQ5LWJiMWMtMzJkMTE3OThjMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTAoxjLHQSVJjeGtbpHTrr+gy0xlO3cZub9e NPd8cLrEXQUasdOx/wEgaNZPmGRhXw2Eysrtpl9minCUUmOQdQF+Y5EIKXtk1gHm yg1CQN7AcZXjaHOVpAzvy94ibQLIKuC5wXtXzKBKV3NETP1323/ZbBqCcUcCz5c/ 5SF91LlLXvbpO/LOXerO8HHbMVPfqjBB3HxB+6YQeerw8LeNKcSFOI0JBbGXFcUv ex1/NKd2OWU2jgpOD+GkPr+jJn0r4AI0iLCKOkvNi3CYpZGg4XKWzlPmvexXyYBs u1OaJHjHr3aQqiCcNDOoiVm3T3L4gbu8Fbgjmek8D+mp2wKjnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzGPckDbQoh49O64J77HydwdDR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjFjODYxNGItYzY2Zi0z OGQyLTk1OWItNjlmN2M2YjI0OGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFKOkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA/4hPW+jQBAx0DlMPZM+h1SPXAm2uprudGTXnaZBGl6I6uGMy6o/2c Murf9Cvcjj38yHZ/nNGSXhge4iQSq3eqK6IeHgpN81ISAE3CiCAqDv+UOoJSiYXa zUN/vRBukWZtMlfKMJCO+CyaEQMKsOH1WdfFpneNASrtCbIb+sd2/5pPcX+8EmZ5 9ehCsqdUWfQpc1ZgKIVxPk8py62Lrdv4YeqRh/c40kMeyuOovGlLEZM2TAhXzCpH 9Y1FvY5hDTnKmoZqi1pgq5D7nVEYzwLB+rVWmKsXd5NIn6+5d3EgVrNg+ppcre22 JL160Id1X4qyqSVH0fT1uJPKHQkeBSg= -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:20 2025 by rpki-client