This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b65734f-fcfb-37f0-8411-3a764220da9f.roa File: 4b65734f-fcfb-37f0-8411-3a764220da9f.roa (raw, json) Hash identifier: ZR3hZmyCYXV9Wa+CIrIs04DG+tVcTArmxL6TrPP/yTY= Subject key identifier: 65:23:AD:8E:F5:3D:2E:C4:F0:03:6C:98:D8:0C:8E:10:11:7E:75:57 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCF006309A5B4E5CAE1E0DE40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b65734f-fcfb-37f0-8411-3a764220da9f.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 170.9.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:63:09:a5:b4:e5:ca:e1:e0:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=535f92d4-f529-4655-adfe-9f7be265d07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:91:e8:be:7f:72:ed:07:37:53:95:88:01:6a: 27:68:fe:24:dc:59:1c:73:e3:77:17:fd:72:8a:c3: 74:0f:57:65:8c:a8:aa:e0:c5:25:30:51:9e:d6:fe: 13:b1:69:14:a6:04:3b:0c:b2:ec:d3:25:3f:17:f8: cf:a0:a5:86:db:ed:f4:9e:5e:a3:aa:b5:1e:17:9d: 88:5c:e6:19:b0:17:d1:5b:6e:50:85:53:81:19:e6: 7e:fa:a5:41:05:a6:05:40:ae:c0:c7:07:cd:d5:69: 81:11:62:7b:81:76:d6:53:ef:aa:6c:05:8d:af:f3: fd:f0:dd:db:5f:5f:fa:df:92:74:ee:7d:c8:0d:a6: ac:95:0a:12:fb:61:25:fe:f5:b3:77:16:8a:f7:69: 15:5f:53:b7:bd:e0:e7:48:fe:01:33:3d:9b:1d:32: 60:b2:08:5e:b0:0c:d0:69:11:e2:20:e6:7c:a9:28: c0:40:fd:35:b6:09:fa:1b:ed:88:20:a5:25:82:85: f8:53:3f:e5:09:d8:6a:25:a9:91:ba:3d:2f:a5:8e: 78:99:6f:19:24:3a:b7:26:03:c9:cd:58:a1:c7:2b: 5b:38:ef:51:03:5c:f8:5f:64:a6:3a:6e:02:66:5f: b2:96:56:85:2e:0b:78:ec:5e:c5:28:85:c3:d7:b5: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:23:AD:8E:F5:3D:2E:C4:F0:03:6C:98:D8:0C:8E:10:11:7E:75:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b65734f-fcfb-37f0-8411-3a764220da9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 170.9.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ae:5c:2b:f8:37:e8:f8:51:10:c5:f5:62:7a:3c:a6:b4:19: b3:f3:ca:a5:93:b2:5a:e6:7f:0a:44:21:6a:ba:b3:ff:a9:31: 9e:04:b4:28:ea:3f:9b:0c:0b:be:b3:cb:36:64:48:34:84:3e: 0f:3e:08:2f:2c:07:2e:aa:61:f5:5d:be:f4:66:46:fd:b9:76: d3:d1:28:9d:d2:ed:4e:fa:16:7e:5e:c1:c9:09:99:43:66:9a: 06:dd:4e:cc:9e:42:84:fd:49:31:8d:a7:68:e3:e4:05:fb:5b: bf:50:a7:cc:4f:e8:1c:2a:dd:17:3d:75:69:62:49:ee:d1:51: a4:47:d3:06:65:39:b3:1d:81:04:f9:1b:ec:f5:1a:2d:8b:8f: 79:35:16:a8:ea:40:39:05:a4:13:bc:c2:dc:12:54:dc:b1:d2: e3:5e:fd:9c:aa:c9:37:c7:e5:cb:48:46:f4:51:1e:8e:10:2f: 74:e3:bc:b1:97:85:75:92:70:bb:d0:8d:90:37:16:c7:5d:a9: 3f:22:64:2d:73:ff:c0:e3:2e:9a:35:6a:8d:14:6f:a2:54:67: 99:ac:35:1e:6a:0d:40:f1:59:03:31:4a:aa:28:6b:b1:17:1d: 2a:1e:ab:92:46:42:72:39:10:56:fc:96:0b:38:f5:17:8f:12: 0f:11:81:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAGMJpbTlyuHg3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk NTM1ZjkyZDQtZjUyOS00NjU1LWFkZmUtOWY3YmUyNjVkMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZHovn9y7Qc3U5WIAWonaP4k3Fkcc+N3F/1y isN0D1dljKiq4MUlMFGe1v4TsWkUpgQ7DLLs0yU/F/jPoKWG2+30nl6jqrUeF52I XOYZsBfRW25QhVOBGeZ++qVBBaYFQK7AxwfN1WmBEWJ7gXbWU++qbAWNr/P98N3b X1/635J07n3IDaaslQoS+2El/vWzdxaK92kVX1O3veDnSP4BMz2bHTJgsghesAzQ aRHiIOZ8qSjAQP01tgn6G+2IIKUlgoX4Uz/lCdhqJamRuj0vpY54mW8ZJDq3JgPJ zVihxytbOO9RA1z4X2SmOm4CZl+yllaFLgt47F7FKIXD17UafQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUjrY71PS7E8ANsmNgMjhARfnVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGI2NTczNGYtZmNmYi0z N2YwLTg0MTEtM2E3NjQyMjBkYTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqgkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyuXCv4N+j4URDF9WJ6PKa0GbPzyqWTslrmfwpEIWq6s/+pMZ4EtCjq P5sMC76zyzZkSDSEPg8+CC8sBy6qYfVdvvRmRv25dtPRKJ3S7U76Fn5ewckJmUNm mgbdTsyeQoT9STGNp2jj5AX7W79Qp8xP6Bwq3Rc9dWliSe7RUaRH0wZlObMdgQT5 G+z1Gi2Lj3k1FqjqQDkFpBO8wtwSVNyx0uNe/ZyqyTfH5ctIRvRRHo4QL3TjvLGX hXWScLvQjZA3FsddqT8iZC1z/8DjLpo1ao0Ub6JUZ5msNR5qDUDxWQMxSqooa7EX HSoeq5JGQnI5EFb8lgs49RePEg8Rga8= -----END CERTIFICATE-----Generated at Sat Dec 6 17:39:10 2025 by rpki-client