This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa File: 8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa (raw, json) Hash identifier: omOcWgMecywepEXK1ySggcjbAylNHt1HWJHdNXxhP6w= Subject key identifier: 38:CF:D4:37:EF:99:45:DC:86:C9:B7:D8:D1:4F:C6:FB:DE:79:B8:E0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BC96B0D0B46C3FC17BFD62E00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 31898 IP address blocks: 152.70.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6b:0d:0b:46:c3:fc:17:bf:d6:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=a8e260a8-9b40-4807-9433-0bf7254a3877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:79:15:b6:8b:45:9b:3e:e1:20:f9:15:c9:96: db:10:b4:10:be:6a:db:3d:24:72:3b:18:55:47:c9: 69:6e:6d:4c:73:66:ad:ef:cf:56:71:cb:5e:bb:ae: be:20:bc:1b:ec:88:fe:11:e4:c9:86:f0:6b:68:11: fa:a8:70:14:07:15:9c:ce:1e:c7:ae:ad:53:f5:ec: c5:ff:b2:17:00:9c:f7:bb:94:a2:9a:e9:74:ae:5b: e4:e4:4a:d2:37:18:31:d9:0b:28:de:bd:de:3b:6a: f7:13:0e:88:b0:0b:1b:3e:87:68:8b:86:a8:4a:b2: 96:47:d6:12:30:77:20:91:b6:44:88:8c:77:d0:cc: 37:84:83:b9:64:93:27:d1:37:c1:80:c7:11:e2:23: ee:d7:fa:a5:2b:a6:fb:ad:fe:36:4b:92:84:8f:0e: 4f:7e:9e:d2:cc:37:e2:ab:f6:4b:41:76:1a:3d:ac: 3e:71:6c:7d:3b:04:99:dc:ac:5d:e8:f9:cf:c2:58: 31:2e:8c:dd:5b:5d:b6:03:68:e1:e3:6b:39:f1:eb: e4:14:33:9e:bf:1a:b4:62:e3:79:8c:fc:78:a7:93: 36:e7:f1:52:46:48:24:3e:e6:71:8c:aa:80:b3:ce: e0:28:74:34:e0:d1:13:ec:cc:a8:57:92:4a:96:56: 2d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CF:D4:37:EF:99:45:DC:86:C9:B7:D8:D1:4F:C6:FB:DE:79:B8:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8035f04e-7c50-34f0-a895-6c5f92aca2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:52:a8:90:90:ae:bc:a5:9c:8e:f6:0c:7d:fa:20:3e:2a:63: 57:7f:16:ee:94:b0:c3:76:70:40:c3:15:14:b6:33:38:5d:a6: f8:7b:ea:0f:c7:73:d8:e3:eb:62:ee:ec:59:e2:b5:ed:90:89: 30:46:4d:20:f4:73:97:d4:f1:9e:b3:d7:9d:6d:cc:f4:34:72: 53:eb:d7:4f:13:65:f5:1a:39:95:23:2e:4b:f7:7c:1a:ac:0c: 8c:76:a4:10:65:7f:dd:60:7a:7b:31:36:8b:97:53:65:7c:05: 77:74:c5:4d:b8:e9:a8:50:ee:85:ab:9b:8e:59:84:6a:b4:da: d0:d0:20:47:b4:da:bc:d3:86:07:09:0d:6a:9f:55:20:1d:d2: d1:ed:cd:81:d7:14:9e:24:d2:8d:0c:a4:b2:da:d1:87:c5:9d: be:60:af:1a:c9:23:36:8f:8f:92:db:19:b5:bb:15:92:fc:7b: de:af:35:f2:90:41:35:6e:be:b3:3c:7a:0a:53:a7:17:bb:6b: 61:2f:bd:01:74:43:d3:ad:03:fd:af:ba:a5:9f:79:6a:ed:0c: 90:25:80:e6:e3:2c:ce:eb:e5:c8:99:b1:f2:49:f0:e4:98:d9: 23:b7:19:18:bf:c5:d4:4c:41:e8:0c:eb:fe:6b:76:ff:10:20: 92:3e:a0:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvJaw0LRsP8F7/WLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk YThlMjYwYTgtOWI0MC00ODA3LTk0MzMtMGJmNzI1NGEzODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXkVtotFmz7hIPkVyZbbELQQvmrbPSRyOxhV R8lpbm1Mc2at789Wccteu66+ILwb7Ij+EeTJhvBraBH6qHAUBxWczh7Hrq1T9ezF /7IXAJz3u5Simul0rlvk5ErSNxgx2Qso3r3eO2r3Ew6IsAsbPodoi4aoSrKWR9YS MHcgkbZEiIx30Mw3hIO5ZJMn0TfBgMcR4iPu1/qlK6b7rf42S5KEjw5Pfp7SzDfi q/ZLQXYaPaw+cWx9OwSZ3Kxd6PnPwlgxLozdW122A2jh42s58evkFDOevxq0YuN5 jPx4p5M25/FSRkgkPuZxjKqAs87gKHQ04NET7MyoV5JKllYt8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjP1DfvmUXchsm32NFPxvveebjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODAzNWYwNGUtN2M1MC0z NGYwLWE4OTUtNmM1ZjkyYWNhMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBSqJCQrrylnI72DH36ID4qY1d/Fu6UsMN2cEDDFRS2Mzhdpvh76g/H c9jj62Lu7Fnite2QiTBGTSD0c5fU8Z6z151tzPQ0clPr108TZfUaOZUjLkv3fBqs DIx2pBBlf91gensxNouXU2V8BXd0xU246ahQ7oWrm45ZhGq02tDQIEe02rzThgcJ DWqfVSAd0tHtzYHXFJ4k0o0MpLLa0YfFnb5grxrJIzaPj5LbGbW7FZL8e96vNfKQ QTVuvrM8egpTpxe7a2EvvQF0Q9OtA/2vuqWfeWrtDJAlgObjLM7r5ciZsfJJ8OSY 2SO3GRi/xdRMQegM6/5rdv8QIJI+oD0= -----END CERTIFICATE-----Generated at Sat Dec 6 19:44:01 2025 by rpki-client