This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b6f6770-e46a-3534-bfee-23f2d9adf3f2.roa File: 2b6f6770-e46a-3534-bfee-23f2d9adf3f2.roa (raw, json) Hash identifier: ArdSqWHouGS8Qa1YTdLdGZ8cWUx+uorOWZ/sg7ZpTWg= Subject key identifier: 51:EE:BB:43:C7:0D:74:04:EC:C6:14:02:98:86:E2:94:E5:49:31:21 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BC6A0376F14778AB0B9323AC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b6f6770-e46a-3534-bfee-23f2d9adf3f2.roa Signing time: Fri 07 Nov 2025 02:00:30 +0000 ROA not before: Fri 07 Nov 2025 02:00:30 +0000 ROA not after: Thu 05 Feb 2026 02:00:30 +0000 asID: 31898 IP address blocks: 152.70.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c6:a0:37:6f:14:77:8a:b0:b9:32:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 7 02:00:30 2025 GMT Not After : Feb 5 02:00:30 2026 GMT Subject: CN=9f734061-8690-41e9-b666-9f170e574a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b8:c8:0c:94:3a:1e:21:dc:e0:d2:7a:e8:2c: 75:e0:c5:c2:c7:ae:ae:ee:99:a5:42:21:bf:f5:9e: 35:71:5f:93:32:87:d8:57:8b:ad:43:f5:70:09:e3: b2:9b:eb:5e:65:34:3e:67:32:9c:a3:7a:99:56:6e: 64:7f:ef:5d:08:5c:fb:43:91:28:28:f0:ab:ec:27: 5b:6c:6b:ef:ad:2d:20:e1:5f:63:7f:b7:f2:f9:9e: b9:e3:c5:d0:9f:f9:f5:dd:14:44:5d:7b:d8:61:a5: 4f:d2:85:ac:75:c2:5b:21:3d:72:c0:a7:49:07:a9: d2:3a:b0:f7:3b:c3:98:3e:f4:df:84:f3:9a:99:d3: 02:c0:ed:9d:31:56:b0:3a:99:92:11:29:a0:6a:a2: 9e:62:7d:ae:04:ab:d3:73:a9:61:cf:93:16:62:0a: 1c:88:09:86:e0:d1:94:4d:37:50:97:75:58:2e:b0: 93:99:80:1a:c7:12:53:9d:f6:e7:e9:c8:e1:5f:79: 70:ab:9e:40:44:71:40:02:83:4e:14:01:8e:e7:3c: 96:65:f5:2f:e0:d7:5b:af:8f:a0:0b:b3:95:e9:56: 0b:1e:fb:f7:aa:52:e1:ad:d9:02:a8:d1:42:f0:d4: 35:f8:fc:94:45:a0:7b:30:c2:9e:fd:c1:9e:28:be: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EE:BB:43:C7:0D:74:04:EC:C6:14:02:98:86:E2:94:E5:49:31:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2b6f6770-e46a-3534-bfee-23f2d9adf3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f7:e0:91:f0:54:75:a1:62:2a:9b:f2:36:b7:46:c9:6e:ca: 57:8b:f9:db:52:44:ee:c4:08:8b:e1:5d:d4:b6:1f:5e:af:1e: 20:b1:43:68:b8:c0:9f:d8:70:9f:fe:c7:85:61:bf:c2:33:42: c9:80:53:2c:09:1c:27:90:ea:c4:37:91:5a:3e:78:e7:73:4f: f5:51:0d:29:40:74:74:20:55:8e:98:22:01:48:33:79:85:e3: 30:1f:ca:6b:c0:1b:e5:50:de:99:07:f2:ad:dc:6d:93:11:c4: 33:d4:a7:6a:9b:d7:20:2c:24:75:cf:ac:7f:0d:dc:32:95:bf: de:36:91:31:ac:e7:a1:0b:23:e0:f5:a6:dd:ad:27:65:2c:6e: 3b:2e:a7:c7:b5:4d:f5:68:dd:a6:97:1f:d5:fe:e6:b6:c8:1f: 2c:b9:de:e9:99:c8:4c:77:37:4c:72:f1:42:84:5b:16:39:20: de:2a:24:44:66:e2:10:b2:e2:cd:a9:e8:82:fb:99:e0:ca:cb: 24:36:2f:b8:ff:f3:f4:65:49:f7:c9:ea:b3:2e:f1:6e:df:6e: 2a:15:69:ce:33:a5:e4:89:67:2d:90:6e:08:a8:61:ef:75:b0: ba:84:49:bc:99:fe:de:16:bf:b8:2d:1c:d1:4d:23:84:ae:fb: 79:70:f9:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvGoDdvFHeKsLkyOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNzAyMDAzMFoXDTI2MDIwNTAyMDAzMFowLzEtMCsGA1UEAxMk OWY3MzQwNjEtODY5MC00MWU5LWI2NjYtOWYxNzBlNTc0YTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbjIDJQ6HiHc4NJ66Cx14MXCx66u7pmlQiG/ 9Z41cV+TMofYV4utQ/VwCeOym+teZTQ+ZzKco3qZVm5kf+9dCFz7Q5EoKPCr7Cdb bGvvrS0g4V9jf7fy+Z6548XQn/n13RREXXvYYaVP0oWsdcJbIT1ywKdJB6nSOrD3 O8OYPvTfhPOamdMCwO2dMVawOpmSESmgaqKeYn2uBKvTc6lhz5MWYgociAmG4NGU TTdQl3VYLrCTmYAaxxJTnfbn6cjhX3lwq55ARHFAAoNOFAGO5zyWZfUv4Ndbr4+g C7OV6VYLHvv3qlLhrdkCqNFC8NQ1+PyURaB7MMKe/cGeKL4mxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHuu0PHDXQE7MYUApiG4pTlSTEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmI2ZjY3NzAtZTQ2YS0z NTM0LWJmZWUtMjNmMmQ5YWRmM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJD34JHwVHWhYiqb8ja3RsluyleL+dtSRO7ECIvhXdS2H16vHiCxQ2i4 wJ/YcJ/+x4Vhv8IzQsmAUywJHCeQ6sQ3kVo+eOdzT/VRDSlAdHQgVY6YIgFIM3mF 4zAfymvAG+VQ3pkH8q3cbZMRxDPUp2qb1yAsJHXPrH8N3DKVv942kTGs56ELI+D1 pt2tJ2Usbjsup8e1TfVo3aaXH9X+5rbIHyy53umZyEx3N0xy8UKEWxY5IN4qJERm 4hCy4s2p6IL7meDKyyQ2L7j/8/RlSffJ6rMu8W7fbioVac4zpeSJZy2QbgioYe91 sLqESbyZ/t4Wv7gtHNFNI4Su+3lw+So= -----END CERTIFICATE-----Generated at Sat Dec 6 18:26:43 2025 by rpki-client