This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa File: 8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa (raw, json) Hash identifier: P4+4U1aJv6vSzFgc9LEr6IQml59iZf7pJBCgORYTr5U= Subject key identifier: 89:BE:70:4E:70:C8:1B:D5:4F:0B:A8:C5:83:E4:6C:19:A9:1C:91:9C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BD8C5D0885BCFDB1DA2BCA080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 147.154.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:d0:88:5b:cf:db:1d:a2:bc:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=f8d8172b-f81f-4746-8f77-d4bada0cdb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b7:cd:73:64:de:34:33:08:e8:95:2b:bd:d9: 54:42:c8:32:21:70:52:1d:5c:64:56:da:d4:40:e3: 31:94:78:39:64:16:12:32:84:65:30:ac:3b:df:e8: 7b:04:08:ad:23:b3:8a:45:3b:b8:c5:78:fb:9f:a7: e1:ff:58:fd:da:8b:49:fa:cd:37:01:ab:95:93:4f: 23:fa:25:ec:a0:97:c4:cf:82:8d:58:05:f9:14:1e: 48:d4:4c:93:61:ce:f5:d3:7b:16:a6:59:14:71:de: 30:6e:ee:aa:4e:08:e0:b6:4c:0f:88:7e:fb:d1:90: 11:3b:60:c7:fe:35:55:68:22:c8:5c:42:b3:7e:df: 97:97:3f:90:e4:4e:43:0d:54:3d:8c:22:0d:bd:c1: ad:c1:68:c2:c2:f8:c1:f8:fb:42:0d:c9:01:df:e5: b6:11:54:b8:f2:cc:27:3d:39:21:6b:c1:81:e9:c8: 70:b4:1c:09:a5:e1:bd:5f:96:58:3f:3c:97:cc:27: bb:4a:56:c7:63:df:4c:47:c2:df:15:4b:49:70:b7: 3e:ac:91:68:31:7a:08:26:60:5f:06:01:d6:63:4c: 08:dd:27:75:60:46:5a:a4:62:25:24:2d:75:c5:56: 2d:2b:d6:69:47:fe:4a:71:a1:27:b5:06:6c:bb:89: 11:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BE:70:4E:70:C8:1B:D5:4F:0B:A8:C5:83:E4:6C:19:A9:1C:91:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bc3f3db-5a95-3768-96d8-2b31aac6cd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e3:ca:62:78:e3:73:71:81:2d:17:aa:ce:15:db:c8:73:5d: 6a:51:a7:5a:5a:fb:59:53:4f:c9:f5:81:50:89:ae:92:d9:43: 0f:e7:87:d9:f6:9b:77:f2:56:93:96:00:bd:d2:50:56:a6:9a: fe:b2:19:d9:30:98:02:ed:cf:17:d5:c1:48:1f:dd:56:0e:fa: 43:5e:ad:5e:cc:68:e1:65:a6:ce:c3:9c:4d:55:fb:de:fc:ed: de:80:b4:23:10:09:ae:fc:09:82:22:93:82:9e:02:ab:e7:ef: 69:7b:75:8b:28:c0:a9:e2:36:ab:ba:00:bc:04:25:54:f5:d0: fc:46:76:16:45:eb:2b:df:08:4f:b2:b2:13:d4:fd:a9:ce:e3: 13:b0:3a:d7:56:53:50:7d:58:72:e6:13:6a:2f:c5:5a:70:6a: d7:a4:05:f6:ae:95:10:a0:38:b5:f3:0b:2b:ef:8f:14:4c:3e: 50:48:f6:0b:d4:a6:e5:23:99:9b:11:d0:67:4c:cc:f2:12:f8: b7:f1:02:7b:82:0e:ee:e8:bf:e1:9d:7a:a8:bc:44:9c:2c:d3: 27:a1:67:eb:bd:9f:bd:b4:f4:27:18:c9:66:32:cf:fe:42:ff: b6:1f:7e:27:f6:f0:d8:5b:e4:a6:97:e5:79:1f:d8:6e:a8:53: 50:ab:08:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxdCIW8/bHaK8oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk ZjhkODE3MmItZjgxZi00NzQ2LThmNzctZDRiYWRhMGNkYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrfNc2TeNDMI6JUrvdlUQsgyIXBSHVxkVtrU QOMxlHg5ZBYSMoRlMKw73+h7BAitI7OKRTu4xXj7n6fh/1j92otJ+s03AauVk08j +iXsoJfEz4KNWAX5FB5I1EyTYc7103sWplkUcd4wbu6qTgjgtkwPiH770ZARO2DH /jVVaCLIXEKzft+Xlz+Q5E5DDVQ9jCINvcGtwWjCwvjB+PtCDckB3+W2EVS48swn PTkha8GB6chwtBwJpeG9X5ZYPzyXzCe7SlbHY99MR8LfFUtJcLc+rJFoMXoIJmBf BgHWY0wI3Sd1YEZapGIlJC11xVYtK9ZpR/5KcaEntQZsu4kR8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm+cE5wyBvVTwuoxYPkbBmpHJGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGJjM2YzZGItNWE5NS0z NzY4LTk2ZDgtMmIzMWFhYzZjZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk5pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvjymJ443NxgS0Xqs4V28hzXWpRp1pa+1lTT8n1gVCJrpLZQw/nh9n2 m3fyVpOWAL3SUFammv6yGdkwmALtzxfVwUgf3VYO+kNerV7MaOFlps7DnE1V+978 7d6AtCMQCa78CYIik4KeAqvn72l7dYsowKniNqu6ALwEJVT10PxGdhZF6yvfCE+y shPU/anO4xOwOtdWU1B9WHLmE2ovxVpwatekBfaulRCgOLXzCyvvjxRMPlBI9gvU puUjmZsR0GdMzPIS+LfxAnuCDu7ov+Gdeqi8RJws0yehZ+u9n7209CcYyWYyz/5C /7Yffif28Nhb5KaX5Xkf2G6oU1CrCDM= -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:20 2025 by rpki-client