This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5582a624-75f7-33f3-a5f5-7a699e4856dc.roa File: 5582a624-75f7-33f3-a5f5-7a699e4856dc.roa (raw, json) Hash identifier: G2b94najJ1lW4nxrAbwkhSr4mnnL+QMMNg4LcXORMR8= Subject key identifier: A0:0E:6D:CF:D6:E6:1D:BB:C7:D2:3F:84:E8:C8:95:E4:17:1A:04:6F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCF006BF2443D8239350EDD40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5582a624-75f7-33f3-a5f5-7a699e4856dc.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 134.70.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:6b:f2:44:3d:82:39:35:0e:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=9ece75b6-9c84-4eeb-9395-dc82b428207a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:12:90:f0:b5:98:78:01:82:b6:1c:d2:83: a6:7b:78:d9:f7:fd:02:89:56:2a:58:53:b9:e9:59: fe:9e:fb:b7:ab:12:9a:fb:37:77:fb:55:a5:db:74: 1d:ac:c6:09:4e:73:4b:4d:aa:44:f0:d8:e0:24:05: 03:bf:c9:3b:d8:a3:f6:84:8c:55:15:2a:0f:a7:a9: a2:1d:81:37:64:63:b2:93:0f:5d:b8:e6:93:c5:46: 3e:86:3d:61:ca:44:ee:dc:cc:99:0f:fb:6b:a8:65: 7e:42:1c:d1:c3:c1:0c:ff:7b:b0:54:dc:87:63:2d: 25:96:a9:cc:20:f1:85:0e:df:36:dd:d5:12:e7:62: 29:26:6b:e7:55:51:2f:61:8c:cd:de:31:be:c9:e5: ec:c0:32:72:bf:63:20:ab:80:a2:34:80:5f:ed:69: f2:27:00:61:ef:37:48:a9:36:da:dc:69:1b:75:32: 02:a9:c3:19:39:5c:db:ee:d2:76:74:f2:71:c9:ba: 99:01:79:84:a3:61:78:59:98:22:36:df:ca:40:45: 60:31:17:e1:25:45:17:8e:cd:61:2b:9a:a9:23:60: 55:05:ec:50:78:d1:48:dd:82:50:74:c6:18:e7:a4: ee:8f:2d:9f:dc:e9:87:7a:02:02:fb:70:67:06:52: 3c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0E:6D:CF:D6:E6:1D:BB:C7:D2:3F:84:E8:C8:95:E4:17:1A:04:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5582a624-75f7-33f3-a5f5-7a699e4856dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:34:cc:25:e4:1c:34:89:34:68:f2:75:5e:37:8f:52:b1:d8: 21:e2:7a:70:2c:ae:76:d8:38:48:f8:85:d9:c2:53:00:02:a8: 3f:e1:22:b9:2d:a5:ca:22:d8:dc:6c:a2:32:7f:d3:a9:0c:19: f0:c9:b5:bf:99:21:65:ac:f5:02:f9:43:0f:35:17:9f:dd:f3: 3e:8d:03:59:44:56:d7:71:4c:c3:99:0e:5e:ed:8e:33:31:9c: 6f:b6:63:b2:81:67:a1:d8:15:f9:c3:bc:cf:9a:3d:d8:f8:67: 51:06:7d:fa:0f:7d:01:5d:db:a3:c6:b1:00:76:30:d9:97:90: 1e:86:72:dd:9c:ab:1d:34:d8:63:40:87:a6:75:f6:06:7e:4b: d4:81:82:ba:8c:41:20:7d:4a:fb:77:05:f1:33:c8:ee:c7:fc: 4c:1b:01:dc:1a:90:0b:75:7a:37:51:da:cc:35:b7:9a:19:56: b4:e5:f1:62:d0:d2:61:cf:02:84:f4:ac:85:36:bc:95:d2:1a: 9a:51:1b:4f:ae:6c:be:0d:81:0b:c3:70:76:ed:c6:df:8b:bf: d6:22:b3:05:13:86:b1:28:b0:3e:dc:1b:f4:ec:08:94:c9:75: 14:7d:44:64:2c:e7:a6:fd:51:27:b4:19:63:f9:7f:ae:06:1f: 11:77:71:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAGvyRD2COTUO3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk OWVjZTc1YjYtOWM4NC00ZWViLTkzOTUtZGM4MmI0MjgyMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJcSkPC1mHgBgrYc0oOme3jZ9/0CiVYqWFO5 6Vn+nvu3qxKa+zd3+1Wl23QdrMYJTnNLTapE8NjgJAUDv8k72KP2hIxVFSoPp6mi HYE3ZGOykw9duOaTxUY+hj1hykTu3MyZD/trqGV+QhzRw8EM/3uwVNyHYy0llqnM IPGFDt823dUS52IpJmvnVVEvYYzN3jG+yeXswDJyv2Mgq4CiNIBf7WnyJwBh7zdI qTba3GkbdTICqcMZOVzb7tJ2dPJxybqZAXmEo2F4WZgiNt/KQEVgMRfhJUUXjs1h K5qpI2BVBexQeNFI3YJQdMYY56Tujy2f3OmHegIC+3BnBlI8NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAObc/W5h27x9I/hOjIleQXGgRvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTU4MmE2MjQtNzVmNy0z M2YzLWE1ZjUtN2E2OTllNDg1NmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE80zCXkHDSJNGjydV43j1Kx2CHienAsrnbYOEj4hdnCUwACqD/hIrkt pcoi2NxsojJ/06kMGfDJtb+ZIWWs9QL5Qw81F5/d8z6NA1lEVtdxTMOZDl7tjjMx nG+2Y7KBZ6HYFfnDvM+aPdj4Z1EGffoPfQFd26PGsQB2MNmXkB6Gct2cqx002GNA h6Z19gZ+S9SBgrqMQSB9Svt3BfEzyO7H/EwbAdwakAt1ejdR2sw1t5oZVrTl8WLQ 0mHPAoT0rIU2vJXSGppRG0+ubL4NgQvDcHbtxt+Lv9YiswUThrEosD7cG/TsCJTJ dRR9RGQs56b9USe0GWP5f64GHxF3cQo= -----END CERTIFICATE-----Generated at Sat Dec 6 18:38:19 2025 by rpki-client