This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa File: 24b20201-385a-38c8-90b4-64fc391327a2.roa (raw, json) Hash identifier: +zdY/USyYgCWJdsX5f38YHMeYoG9cax1tN7dwB8hwYY= Subject key identifier: 3C:62:51:FE:79:39:D3:38:C7:BC:7D:23:0B:FA:43:31:45:84:1B:F2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BD065B7375AE3BD40C5DFB15C Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa Signing time: Mon 10 Nov 2025 14:00:38 +0000 ROA not before: Mon 10 Nov 2025 14:00:38 +0000 ROA not after: Sun 08 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 129.153.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d0:65:b7:37:5a:e3:bd:40:c5:df:b1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 14:00:38 2025 GMT Not After : Feb 8 14:00:38 2026 GMT Subject: CN=dbd4ef00-f9d6-4395-aa20-98bf4a196270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:84:6a:53:06:9c:86:8b:d6:ec:02:18:64:a4: 6f:e7:d5:03:d9:d3:3f:00:59:32:dc:aa:8e:07:ca: c4:e3:32:ce:9d:9a:52:bb:2b:60:56:3e:f8:e4:5c: be:ec:93:ef:6d:93:23:be:f1:40:5d:b8:ef:25:af: 04:01:3a:ed:b1:ad:d3:1f:0c:eb:19:35:0a:97:08: 20:30:30:91:84:58:46:d1:1a:fc:f6:51:21:89:ae: 18:e5:f9:f5:b9:63:9c:47:85:75:be:54:15:ad:98: 01:01:ce:9e:b2:67:c4:6c:82:69:d0:5f:0f:cc:21: 59:54:c8:c7:69:79:09:4c:6f:6e:a9:a9:e4:cf:fb: 68:97:e4:a2:aa:31:ff:ed:4c:7f:04:ce:ac:ae:d2: 8b:bc:f9:6d:ad:56:c6:5a:02:3c:cc:92:a6:f3:23: 98:a3:3e:4d:31:ba:4d:74:56:36:c8:c1:d6:e2:bc: ad:8e:b5:a0:c5:9c:67:36:3c:5b:26:24:3b:4d:3a: a8:41:5a:fa:8e:77:da:e6:9e:70:3d:4b:70:5e:c3: 2b:c1:27:11:8a:5d:cb:e1:16:8d:42:be:b9:aa:28: 75:5e:a1:c5:49:9a:67:f7:57:2c:d0:3a:d4:13:ef: 73:5d:d9:64:ef:c6:54:f3:b4:00:1b:01:bb:9f:1e: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:62:51:FE:79:39:D3:38:C7:BC:7D:23:0B:FA:43:31:45:84:1B:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.153.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:63:1c:47:e6:5f:da:f0:39:fa:c4:a9:8e:62:12:95:ab:10: a4:08:2a:7e:9a:9f:b0:fc:78:af:0e:76:88:0d:b4:d1:e5:77: d2:77:40:30:c9:a1:e5:95:90:3b:ef:29:ac:d5:83:23:48:57: 3f:51:6f:9e:f8:65:22:71:d7:fa:cc:c1:73:6e:ad:8b:b4:88: 93:d4:28:8f:83:8d:28:a6:50:50:59:76:66:5f:f9:a3:5e:20: c0:25:44:a0:57:6a:76:0c:15:d1:9e:f6:8b:ea:f2:25:a1:18: b9:9a:d5:75:e7:f7:f2:de:26:94:b5:a3:79:b9:88:5d:cd:b5: 4e:a2:75:9e:0d:a3:f3:8e:11:bc:1a:9f:0c:11:d8:98:ee:0c: 14:ca:2a:f4:ed:19:6e:2d:59:da:30:3d:45:bf:6c:f3:96:d2: 7c:4c:80:27:ae:4d:67:97:e0:91:64:55:3d:74:71:78:65:8d: c9:aa:f1:2d:74:eb:e7:22:88:70:9c:93:02:38:86:73:fe:f9: 66:f4:e5:d5:53:f0:d2:10:49:f2:62:68:e0:b2:05:ab:2e:59: c0:1c:cc:82:51:de:37:ca:be:85:4a:09:0e:5d:c8:2d:b6:14: 60:0f:26:28:68:ac:2a:19:01:f0:8c:62:8c:be:8b:54:c5:0a: b3:1c:29:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvQZbc3WuO9QMXfsVwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDE0MDAzOFoXDTI2MDIwODE0MDAzOFowLzEtMCsGA1UEAxMk ZGJkNGVmMDAtZjlkNi00Mzk1LWFhMjAtOThiZjRhMTk2MjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYRqUwachovW7AIYZKRv59UD2dM/AFky3KqO B8rE4zLOnZpSuytgVj745Fy+7JPvbZMjvvFAXbjvJa8EATrtsa3THwzrGTUKlwgg MDCRhFhG0Rr89lEhia4Y5fn1uWOcR4V1vlQVrZgBAc6esmfEbIJp0F8PzCFZVMjH aXkJTG9uqankz/tol+SiqjH/7Ux/BM6srtKLvPltrVbGWgI8zJKm8yOYoz5NMbpN dFY2yMHW4rytjrWgxZxnNjxbJiQ7TTqoQVr6jnfa5p5wPUtwXsMrwScRil3L4RaN Qr65qih1XqHFSZpn91cs0DrUE+9zXdlk78ZU87QAGwG7nx4hiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxiUf55OdM4x7x9Iwv6QzFFhBvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjRiMjAyMDEtMzg1YS0z OGM4LTkwYjQtNjRmYzM5MTMyN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFjHEfmX9rwOfrEqY5iEpWrEKQIKn6an7D8eK8OdogNtNHld9J3QDDJ oeWVkDvvKazVgyNIVz9Rb574ZSJx1/rMwXNurYu0iJPUKI+DjSimUFBZdmZf+aNe IMAlRKBXanYMFdGe9ovq8iWhGLma1XXn9/LeJpS1o3m5iF3NtU6idZ4No/OOEbwa nwwR2JjuDBTKKvTtGW4tWdowPUW/bPOW0nxMgCeuTWeX4JFkVT10cXhljcmq8S10 6+ciiHCckwI4hnP++Wb05dVT8NIQSfJiaOCyBasuWcAczIJR3jfKvoVKCQ5dyC22 FGAPJihorCoZAfCMYoy+i1TFCrMcKbM= -----END CERTIFICATE-----Generated at Sat Dec 6 22:35:44 2025 by rpki-client