This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bdd446b-d8ca-3ac7-91b7-261492558eca.roa File: 3bdd446b-d8ca-3ac7-91b7-261492558eca.roa (raw, json) Hash identifier: 8jEY92eP9asRFIix/gNvNd2c12WvDZczQa0H5ssM894= Subject key identifier: FC:F1:1A:0C:B3:0A:F0:BB:F0:72:82:7B:B0:A3:32:56:33:D5:B0:44 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCAD06757AA19C21AA39CDB40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bdd446b-d8ca-3ac7-91b7-261492558eca.roa Signing time: Sat 08 Nov 2025 14:00:39 +0000 ROA not before: Sat 08 Nov 2025 14:00:39 +0000 ROA not after: Fri 06 Feb 2026 14:00:39 +0000 asID: 31898 IP address blocks: 157.151.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ca:d0:67:57:aa:19:c2:1a:a3:9c:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 8 14:00:39 2025 GMT Not After : Feb 6 14:00:39 2026 GMT Subject: CN=3bf4c4c7-a9a5-4718-a855-676c33962409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fb:dc:7f:71:15:92:45:fa:3e:45:2d:39:35: 40:4c:29:ce:ef:6d:65:ef:b1:8a:d5:2e:6d:be:7d: d7:74:99:6a:65:56:20:68:11:02:d4:84:14:86:e1: 00:6f:5c:e7:32:54:d9:af:a5:aa:e9:dd:27:a2:01: cf:78:21:c8:dc:81:7f:a1:6f:92:a8:07:92:fd:04: 50:ee:bd:54:7f:99:81:8f:00:19:09:cc:00:3a:1f: ec:75:c2:55:5a:95:04:84:76:50:2f:9a:8e:53:ea: 04:7a:4f:ae:a8:97:96:09:fb:2e:76:d6:04:28:a7: 23:f4:2e:5e:5c:1e:ed:4e:80:cc:7e:94:a6:59:33: 1c:93:32:ad:b3:fb:64:fb:2f:ef:d1:64:c1:cf:f1: 81:27:27:aa:06:22:78:12:f5:86:6e:a7:cb:90:3c: 1d:75:a3:21:94:dd:c4:e7:c1:f1:9c:5e:54:a7:3e: b3:1e:c6:74:6a:b5:05:5f:17:9f:bc:7a:7b:a4:3d: 1e:c9:fa:77:7c:2a:ab:81:e2:9a:41:de:bd:1d:88: 80:2a:e4:34:39:51:ca:7d:7a:50:3b:ca:88:e2:85: e4:b5:83:95:cd:4f:93:e2:1d:89:57:15:42:08:a1: 8e:40:b1:9c:a4:e0:d2:e3:0a:3b:6c:1b:e5:d9:b5: b4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F1:1A:0C:B3:0A:F0:BB:F0:72:82:7B:B0:A3:32:56:33:D5:B0:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bdd446b-d8ca-3ac7-91b7-261492558eca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.151.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:4f:14:3d:55:a4:44:5e:7b:55:bf:ee:f5:92:d7:6d:ed:84: 68:d2:02:56:41:d8:a1:d8:92:e7:2d:2e:09:33:06:4a:48:4f: 52:00:2d:70:17:14:1f:32:fe:16:ef:73:d8:b5:b8:e5:21:b5: c4:94:67:9d:0c:29:4e:b9:0c:c8:bf:94:82:f9:d6:c5:94:82: ba:41:8e:79:b5:7d:4d:fb:01:23:72:83:72:2a:c3:3a:8a:62: 4d:b2:56:d1:26:bd:f9:c0:83:bd:b6:4a:84:4b:39:04:5f:fe: 06:bd:50:8c:9b:37:7a:68:ab:15:cc:06:68:fa:48:c3:0f:7f: 83:31:6a:62:12:e4:0a:20:6e:58:47:7d:4c:c6:40:45:f4:d9: 6a:a7:60:3d:90:c2:41:0b:5d:b0:a8:3d:7d:51:aa:78:d7:2b: aa:88:67:e6:c4:b5:94:46:cf:2f:63:ac:2f:26:03:bc:8a:23: ec:de:f7:dc:f3:62:2b:3a:bb:06:71:ba:ce:7e:ca:d1:93:60: 93:72:49:0f:60:c5:57:35:f9:fb:a6:f2:2f:be:87:d4:62:4c: 2d:bf:cb:71:f0:fb:a9:74:c9:cb:5e:a9:6d:32:8c:5d:85:e0: ea:e1:ef:25:cf:f6:93:b8:cf:68:0b:f5:47:db:a1:30:b4:13: 48:b9:b2:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvK0GdXqhnCGqOc20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwODE0MDAzOVoXDTI2MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk M2JmNGM0YzctYTlhNS00NzE4LWE4NTUtNjc2YzMzOTYyNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/vcf3EVkkX6PkUtOTVATCnO721l77GK1S5t vn3XdJlqZVYgaBEC1IQUhuEAb1znMlTZr6Wq6d0nogHPeCHI3IF/oW+SqAeS/QRQ 7r1Uf5mBjwAZCcwAOh/sdcJVWpUEhHZQL5qOU+oEek+uqJeWCfsudtYEKKcj9C5e XB7tToDMfpSmWTMckzKts/tk+y/v0WTBz/GBJyeqBiJ4EvWGbqfLkDwddaMhlN3E 58HxnF5Upz6zHsZ0arUFXxefvHp7pD0eyfp3fCqrgeKaQd69HYiAKuQ0OVHKfXpQ O8qI4oXktYOVzU+T4h2JVxVCCKGOQLGcpODS4wo7bBvl2bW0vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzxGgyzCvC78HKCe7CjMlYz1bBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2JkZDQ0NmItZDhjYS0z YWM3LTkxYjctMjYxNDkyNTU4ZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnZcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtPFD1VpERee1W/7vWS123thGjSAlZB2KHYkuctLgkzBkpIT1IALXAX FB8y/hbvc9i1uOUhtcSUZ50MKU65DMi/lIL51sWUgrpBjnm1fU37ASNyg3IqwzqK Yk2yVtEmvfnAg722SoRLOQRf/ga9UIybN3poqxXMBmj6SMMPf4MxamIS5AogblhH fUzGQEX02WqnYD2QwkELXbCoPX1RqnjXK6qIZ+bEtZRGzy9jrC8mA7yKI+ze99zz Yis6uwZxus5+ytGTYJNySQ9gxVc1+fum8i++h9RiTC2/y3Hw+6l0ycteqW0yjF2F 4Orh7yXP9pO4z2gL9UfboTC0E0i5spc= -----END CERTIFICATE-----Generated at Sat Dec 6 17:37:18 2025 by rpki-client