This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8c90bc11-5b4a-3658-aaea-706fe3c83491.roa File: 8c90bc11-5b4a-3658-aaea-706fe3c83491.roa (raw, json) Hash identifier: JDnT6VB7xgD7/X6n9AKBVawt3Zxc2SKEBJkkrFirS3s= Subject key identifier: E0:99:3A:70:14:5F:C1:53:8A:71:BA:D3:80:76:65:8F:EC:A3:1E:97 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BDCF5EC85E7F226756FA9D2C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8c90bc11-5b4a-3658-aaea-706fe3c83491.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 31898 IP address blocks: 168.107.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:ec:85:e7:f2:26:75:6f:a9:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=e3a03272-b7be-4db3-8619-bd6f67fe4b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bd:d6:fe:1d:3c:56:aa:58:39:f4:e4:e2:48: e9:d7:d6:3e:1d:b3:ea:30:c7:09:08:04:9b:c9:27: d5:e2:68:89:20:a8:a8:44:0a:b1:da:e5:cf:b9:03: a9:af:d2:eb:30:1a:b7:44:54:2b:b9:dd:5a:e7:3c: ae:a6:8d:64:04:04:6b:6e:70:61:d6:83:fd:39:db: f9:5e:82:95:b9:df:4c:3c:f4:04:d6:ea:32:96:62: 0e:ea:5a:0e:f9:3b:21:07:b2:cb:2a:eb:2b:67:1b: a7:f0:5c:6b:cd:4f:e0:fc:c2:8c:c8:88:ef:97:a1: 21:f3:0a:60:f4:fb:3d:2b:ff:4b:db:2a:c6:b8:09: 7b:53:98:00:68:06:b7:fd:4b:6c:97:cb:3b:03:d5: 4e:8c:7e:a8:16:82:1e:29:fc:1c:2f:70:ff:7b:9a: 1c:5b:6e:41:e0:71:33:ad:98:24:8b:59:ec:5c:1c: d4:ee:f0:7f:f2:95:ce:5a:28:db:b4:d5:ff:fa:14: 13:33:17:44:95:31:7e:32:a5:4d:17:a3:7b:4a:36: 5e:a1:3c:69:35:3e:2d:ee:5c:85:b5:a2:19:df:b4: c2:61:4b:1d:1b:88:cc:d2:2c:95:18:c7:bb:84:64: 1b:56:75:89:d0:1b:2c:cc:04:e3:b3:35:e0:89:43: 4b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:99:3A:70:14:5F:C1:53:8A:71:BA:D3:80:76:65:8F:EC:A3:1E:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8c90bc11-5b4a-3658-aaea-706fe3c83491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c0:e5:04:b6:32:f6:76:42:cb:b7:04:79:39:48:b9:c3:6a: b5:be:17:ef:c1:a4:ee:0a:0e:43:a3:dd:9a:bc:ff:0c:02:96: 73:00:a6:e8:96:08:db:d8:e0:6b:dd:6a:80:69:2a:f3:a2:c9: 7c:59:8b:f0:84:11:6e:9c:47:7c:eb:fd:82:6f:e6:f4:d9:27: dd:49:a8:1e:ca:c4:78:ab:07:91:55:1a:4d:33:96:48:db:32: 52:4f:fc:67:cb:e2:6f:3f:b9:2d:e2:85:19:1f:19:4a:71:f9: ba:65:25:38:61:f6:d3:92:09:c8:93:43:7a:50:b6:e6:8a:67: 2d:44:9a:a4:16:af:c5:80:cc:2c:17:25:4c:55:c4:d9:26:6c: bf:4c:fa:4a:77:69:7f:64:ce:26:9f:44:ac:ae:ee:7c:6f:b2: 73:08:cb:e3:01:56:93:01:24:68:3e:c9:eb:08:28:2e:cd:9b: 83:68:22:d1:8f:97:0b:c1:b7:69:55:27:54:17:5d:49:e9:12: 01:82:a6:41:00:28:12:1c:b9:3d:15:1d:d5:00:b1:e6:7b:52: 74:be:7c:c3:30:f2:e0:c0:f0:1d:44:b5:10:ff:c4:11:76:37: 22:56:a0:e5:90:1e:a0:40:dd:da:ae:af:29:12:29:60:a6:9f: 71:d1:20:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9eyF5/ImdW+p0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk ZTNhMDMyNzItYjdiZS00ZGIzLTg2MTktYmQ2ZjY3ZmU0YjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr3W/h08VqpYOfTk4kjp19Y+HbPqMMcJCASb ySfV4miJIKioRAqx2uXPuQOpr9LrMBq3RFQrud1a5zyupo1kBARrbnBh1oP9Odv5 XoKVud9MPPQE1uoylmIO6loO+TshB7LLKusrZxun8FxrzU/g/MKMyIjvl6Eh8wpg 9Ps9K/9L2yrGuAl7U5gAaAa3/Utsl8s7A9VOjH6oFoIeKfwcL3D/e5ocW25B4HEz rZgki1nsXBzU7vB/8pXOWijbtNX/+hQTMxdElTF+MqVNF6N7SjZeoTxpNT4t7lyF taIZ37TCYUsdG4jM0iyVGMe7hGQbVnWJ0BsszATjszXgiUNLtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCZOnAUX8FTinG604B2ZY/sox6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGM5MGJjMTEtNWI0YS0z NjU4LWFhZWEtNzA2ZmUzYzgzNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPA5QS2MvZ2Qsu3BHk5SLnDarW+F+/BpO4KDkOj3Zq8/wwClnMApuiW CNvY4GvdaoBpKvOiyXxZi/CEEW6cR3zr/YJv5vTZJ91JqB7KxHirB5FVGk0zlkjb MlJP/GfL4m8/uS3ihRkfGUpx+bplJThh9tOSCciTQ3pQtuaKZy1EmqQWr8WAzCwX JUxVxNkmbL9M+kp3aX9kziafRKyu7nxvsnMIy+MBVpMBJGg+yesIKC7Nm4NoItGP lwvBt2lVJ1QXXUnpEgGCpkEAKBIcuT0VHdUAseZ7UnS+fMMw8uDA8B1EtRD/xBF2 NyJWoOWQHqBA3dqurykSKWCmn3HRIME= -----END CERTIFICATE-----Generated at Sat Dec 6 17:38:47 2025 by rpki-client