This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87c86eb2-4a3b-348a-9316-65ffc2b7a36a.roa File: 87c86eb2-4a3b-348a-9316-65ffc2b7a36a.roa (raw, json) Hash identifier: wbWpoMw0GgWHT+NNQ12lXT/ZSblcx6nrUbKBs5sbRSM= Subject key identifier: F7:7F:D6:A6:B3:02:69:4C:AD:B7:20:E0:A8:5F:C8:0B:FE:55:94:C7 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BD8C5D1717223193238B68340 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87c86eb2-4a3b-348a-9316-65ffc2b7a36a.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 207.135.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:d1:71:72:23:19:32:38:b6:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=216b4c09-de16-4cf9-8722-c78230131252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:02:08:b2:ce:06:1f:6e:4a:65:c9:38:34:53: fd:95:a9:89:19:87:da:88:5e:5e:bd:44:20:a2:48: 33:b8:92:87:57:57:ce:63:6e:78:ed:b1:30:2b:ba: be:3d:80:aa:97:e8:64:c3:0b:28:d7:d8:45:ff:9d: c0:80:15:48:b0:4d:68:2a:41:89:cb:63:cd:e8:0e: 89:a5:7a:a9:e5:54:0a:19:c6:07:55:2d:64:90:11: c9:01:83:80:b0:0d:91:37:27:83:84:d1:a8:87:31: b5:60:5f:b0:d0:37:04:9b:cf:0e:50:64:17:8f:14: 43:a5:74:69:ae:17:5c:48:bd:43:a3:de:23:76:b3: dd:bc:c3:cb:fb:f4:2d:0c:8d:c5:2f:ed:2c:53:9e: aa:dc:66:02:9e:45:80:87:d9:43:e5:b2:12:82:3f: 87:be:89:e2:f1:7d:78:7e:f3:2a:a7:d8:2f:8d:b8: d9:04:f1:02:fc:53:35:23:63:7c:d1:48:99:bb:53: 26:d0:21:39:1c:5f:f4:48:48:69:49:ac:44:40:bb: 52:71:99:07:7c:c1:38:42:d2:0c:e3:6a:54:92:c2: 19:74:0d:c5:6f:cd:22:93:10:4b:a2:8f:54:40:f2: 75:37:50:41:57:0e:4d:8e:d0:6e:86:64:87:ad:97: da:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7F:D6:A6:B3:02:69:4C:AD:B7:20:E0:A8:5F:C8:0B:FE:55:94:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87c86eb2-4a3b-348a-9316-65ffc2b7a36a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 207.135.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:fa:00:a3:f1:40:5d:fb:d2:32:80:f7:96:1d:89:41:6e:e4: 89:86:8f:43:f7:2e:5c:6b:53:3e:1b:96:5f:8b:dd:94:97:eb: 14:3d:7b:d4:a7:4b:7e:a8:4a:b3:5a:9f:f8:72:d4:bc:8b:15: 72:4b:15:e2:79:99:97:95:7e:a4:d8:57:ee:c8:be:95:62:cd: 63:66:d4:ed:f5:96:53:b2:8f:2e:c6:bd:62:30:de:1c:0d:9d: 75:47:ce:3b:6b:91:41:24:c4:d8:14:87:1e:3f:84:17:1e:0d: 94:93:02:83:3d:d4:c7:c4:d2:1e:52:7d:86:a5:1d:d5:61:63: 0b:b3:48:e7:0b:cc:26:4f:bc:d9:2a:38:51:15:09:60:d3:17: 5d:aa:9e:bd:4c:8c:43:3c:97:f4:58:73:95:9b:0c:1c:a2:b4: bb:82:92:4b:35:77:24:39:07:10:c7:90:8e:10:59:83:98:61: 3d:b3:55:9d:97:33:4f:a9:03:6d:86:f3:0f:51:26:f8:6c:10: d9:98:81:cf:1e:a1:6e:99:d9:b4:7a:f8:15:c4:d4:70:4d:cc: aa:96:90:81:0b:e1:a6:53:e5:5e:9a:69:cd:11:53:b7:69:3a: 4e:4e:78:d3:b5:c6:76:7e:61:45:e1:6f:a0:6a:95:a4:d5:2d: b8:59:f4:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxdFxciMZMji2g0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk MjE2YjRjMDktZGUxNi00Y2Y5LTg3MjItYzc4MjMwMTMxMjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAIIss4GH25KZck4NFP9lamJGYfaiF5evUQg okgzuJKHV1fOY2547bEwK7q+PYCql+hkwwso19hF/53AgBVIsE1oKkGJy2PN6A6J pXqp5VQKGcYHVS1kkBHJAYOAsA2RNyeDhNGohzG1YF+w0DcEm88OUGQXjxRDpXRp rhdcSL1Do94jdrPdvMPL+/QtDI3FL+0sU56q3GYCnkWAh9lD5bISgj+Hvoni8X14 fvMqp9gvjbjZBPEC/FM1I2N80UiZu1Mm0CE5HF/0SEhpSaxEQLtScZkHfME4QtIM 42pUksIZdA3Fb80ikxBLoo9UQPJ1N1BBVw5NjtBuhmSHrZfaNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPd/1qazAmlMrbcg4KhfyAv+VZTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODdjODZlYjItNGEzYi0z NDhhLTkzMTYtNjVmZmMyYjdhMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz4cKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHP6AKPxQF370jKA95YdiUFu5ImGj0P3LlxrUz4bll+L3ZSX6xQ9e9Sn S36oSrNan/hy1LyLFXJLFeJ5mZeVfqTYV+7IvpVizWNm1O31llOyjy7GvWIw3hwN nXVHzjtrkUEkxNgUhx4/hBceDZSTAoM91MfE0h5SfYalHdVhYwuzSOcLzCZPvNkq OFEVCWDTF12qnr1MjEM8l/RYc5WbDByitLuCkks1dyQ5BxDHkI4QWYOYYT2zVZ2X M0+pA22G8w9RJvhsENmYgc8eoW6Z2bR6+BXE1HBNzKqWkIEL4aZT5V6aac0RU7dp Ok5OeNO1xnZ+YUXhb6BqlaTVLbhZ9H0= -----END CERTIFICATE-----Generated at Sat Dec 6 17:36:45 2025 by rpki-client