This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68c6ddd0-a38a-3ea3-8582-0ae4b2a2ebde.roa File: 68c6ddd0-a38a-3ea3-8582-0ae4b2a2ebde.roa (raw, json) Hash identifier: SSUmp/c1gjIQAuEcW+HfxxBvuFH/ZP9lXj1t5LICxkI= Subject key identifier: 70:CD:24:ED:9F:4E:05:B9:5A:5F:FE:AC:4E:A2:3C:0C:9C:40:20:CC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BC805A16E9F53430535228720 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68c6ddd0-a38a-3ea3-8582-0ae4b2a2ebde.roa Signing time: Fri 07 Nov 2025 14:00:38 +0000 ROA not before: Fri 07 Nov 2025 14:00:38 +0000 ROA not after: Thu 05 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 157.137.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c8:05:a1:6e:9f:53:43:05:35:22:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 7 14:00:38 2025 GMT Not After : Feb 5 14:00:38 2026 GMT Subject: CN=942ec208-2f23-4c5d-8e76-bfa5046fc9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d9:69:d6:5b:b6:71:b1:75:7b:5a:38:e7:54: 01:2a:9f:4a:e3:58:72:84:16:69:f6:76:d8:d4:c4: 82:d4:01:65:59:b3:d0:c4:a4:bb:81:6c:ba:bd:18: 2b:06:ec:e6:9c:a9:37:94:fb:2b:3b:93:49:17:33: 87:f6:74:03:f1:0d:81:d9:66:3b:0f:ac:0e:08:37: 88:12:60:ac:22:d8:7e:b4:74:05:f8:5d:6f:f0:e6: da:bc:c2:16:60:5e:55:d9:77:6b:d4:cd:b4:9e:ec: a8:bf:ee:dc:b7:a6:15:1a:fb:c5:7f:c7:6e:1f:81: 22:bb:64:64:ed:79:84:af:21:bd:3e:d4:11:28:5d: b8:ef:25:38:82:6b:a1:e3:69:94:08:53:e6:4b:45: c3:b5:9c:1f:9e:39:18:33:6c:4d:60:78:b9:8a:13: 51:aa:02:6c:90:96:ff:13:e5:5c:ea:30:85:1e:10: e7:32:b6:2a:cb:6b:5a:be:99:c6:64:1b:d0:56:a6: 46:6c:0f:c6:4e:2e:f0:20:4b:81:f8:6d:51:d1:b9: fd:c7:98:32:d0:fa:1e:16:b0:e2:7b:97:87:8f:18: 0d:7f:54:5a:7f:c7:44:01:a9:54:a9:9b:af:72:26: f9:9a:41:dd:d4:03:6d:2c:54:2e:48:84:da:b1:f0: 32:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CD:24:ED:9F:4E:05:B9:5A:5F:FE:AC:4E:A2:3C:0C:9C:40:20:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/68c6ddd0-a38a-3ea3-8582-0ae4b2a2ebde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:2f:47:98:3f:20:3b:c5:f3:ae:0d:25:d9:f2:84:11:5d:96: 77:69:2d:42:dc:65:66:35:56:b0:a2:d0:8d:78:90:a5:d9:f1: da:33:1e:27:75:3b:e0:ab:45:d4:b0:6a:70:a5:dd:7d:9f:d5: 3a:e7:e5:59:3a:6a:72:59:1f:da:fe:2e:66:01:f8:82:f5:c1: 15:e0:3c:03:e0:9d:cb:45:78:c9:42:35:50:f6:5a:17:e0:cd: 44:20:14:c8:3a:b3:fa:d1:bb:cc:87:c7:6c:31:0c:e6:8d:54: f8:d1:d0:ec:c7:ff:04:3e:5e:0d:70:2c:f6:29:9f:c7:f3:78: 2e:ef:42:d0:bf:bd:4d:43:15:c3:5a:b8:74:0e:46:07:3f:e6: 25:de:d8:0f:e8:67:cd:e7:e6:d4:a2:3d:89:f1:62:d0:39:7b: 86:9a:8c:87:98:0f:4a:64:79:f5:68:e4:fb:21:9d:70:ad:47: 6c:dc:05:a2:b6:3b:bb:4e:20:29:f0:cf:c4:01:7c:85:93:5c: d4:07:38:1b:ad:31:b6:d1:2e:ab:65:5e:3a:de:7c:a1:e2:a0: 04:f3:d0:b3:04:02:18:39:2e:28:23:44:76:9d:40:5e:98:93: 1f:6a:02:49:99:8c:e4:38:2b:f9:4a:e9:6e:c8:ea:4f:fa:6b: 4d:52:d6:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvIBaFun1NDBTUihyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNzE0MDAzOFoXDTI2MDIwNTE0MDAzOFowLzEtMCsGA1UEAxMk OTQyZWMyMDgtMmYyMy00YzVkLThlNzYtYmZhNTA0NmZjOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtlp1lu2cbF1e1o451QBKp9K41hyhBZp9nbY 1MSC1AFlWbPQxKS7gWy6vRgrBuzmnKk3lPsrO5NJFzOH9nQD8Q2B2WY7D6wOCDeI EmCsIth+tHQF+F1v8ObavMIWYF5V2Xdr1M20nuyov+7ct6YVGvvFf8duH4Eiu2Rk 7XmEryG9PtQRKF247yU4gmuh42mUCFPmS0XDtZwfnjkYM2xNYHi5ihNRqgJskJb/ E+Vc6jCFHhDnMrYqy2tavpnGZBvQVqZGbA/GTi7wIEuB+G1R0bn9x5gy0PoeFrDi e5eHjxgNf1Raf8dEAalUqZuvcib5mkHd1ANtLFQuSITasfAyawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDNJO2fTgW5Wl/+rE6iPAycQCDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjhjNmRkZDAtYTM4YS0z ZWEzLTg1ODItMGFlNGIyYTJlYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnYnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcvR5g/IDvF864NJdnyhBFdlndpLULcZWY1VrCi0I14kKXZ8dozHid1 O+CrRdSwanCl3X2f1Trn5Vk6anJZH9r+LmYB+IL1wRXgPAPgnctFeMlCNVD2Whfg zUQgFMg6s/rRu8yHx2wxDOaNVPjR0OzH/wQ+Xg1wLPYpn8fzeC7vQtC/vU1DFcNa uHQORgc/5iXe2A/oZ83n5tSiPYnxYtA5e4aajIeYD0pkefVo5PshnXCtR2zcBaK2 O7tOICnwz8QBfIWTXNQHOButMbbRLqtlXjrefKHioATz0LMEAhg5LigjRHadQF6Y kx9qAkmZjOQ4K/lK6W7I6k/6a01S1no= -----END CERTIFICATE-----Generated at Sat Dec 6 18:26:43 2025 by rpki-client