This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924c0f53-3657-3125-882c-52af8ebfd139.roa File: 924c0f53-3657-3125-882c-52af8ebfd139.roa (raw, json) Hash identifier: siWgk6Q/xQ2U93aGlgnfk5hYEI7wfd37gbcWsQOVFAw= Subject key identifier: E4:E0:A8:FB:01:11:2A:49:96:D5:AA:E7:B0:8D:14:45:C4:05:0D:39 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCD9F399F7A8170D0B4E0D000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924c0f53-3657-3125-882c-52af8ebfd139.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 161.153.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9f:39:9f:7a:81:70:d0:b4:e0:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=3f6f60ac-42f3-4a43-9b72-73f96d8c6dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:8f:aa:c4:d4:ab:1d:33:81:4b:cc:8d:1c: c4:f0:fc:87:50:8a:85:4e:d5:59:98:f4:25:c3:a1: 39:5c:a0:00:c4:ef:80:b7:a5:e2:58:f3:4c:a0:01: 3e:90:97:84:c2:18:99:93:bb:97:60:bd:88:e8:55: 2d:99:eb:78:a0:96:6c:23:74:be:ba:c8:b5:9e:6d: ff:6a:e8:ed:23:a6:79:05:91:4d:67:b9:e4:5a:ab: b5:7a:60:cb:0f:7b:29:16:5f:b7:62:22:3b:1d:31: 1b:85:d2:a7:e4:20:24:35:59:ca:86:2d:37:fd:bd: 5d:aa:ab:5c:50:7b:91:22:ab:e4:cd:a8:41:2c:60: c3:60:8e:01:d9:a5:4b:88:89:f7:a9:6c:a5:72:09: 4f:c0:f4:87:3d:85:11:ce:04:9e:88:fc:3e:f5:00: 00:a2:49:ad:e4:95:17:8c:d6:10:3f:f7:eb:27:74: f4:bc:da:b6:22:e3:79:bd:8a:79:e7:f7:c8:68:31: cd:e3:99:4b:db:f3:f4:66:28:69:58:a2:b2:e3:1e: 85:23:97:e1:55:76:af:3d:a2:8f:14:4e:f1:64:06: 63:69:46:56:80:2e:7c:3d:61:84:b6:93:cc:7c:95: 64:99:a2:7c:a2:da:d0:2e:f3:79:f8:6a:6c:1c:c8: fb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E0:A8:FB:01:11:2A:49:96:D5:AA:E7:B0:8D:14:45:C4:05:0D:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924c0f53-3657-3125-882c-52af8ebfd139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b9:9e:32:55:6f:e8:3e:06:37:af:f1:31:3c:ec:a4:7d:0c: a5:9b:4d:00:1d:f4:37:93:5b:60:41:ac:ec:c2:66:36:09:2b: 09:3c:f9:57:c1:53:1c:4a:9a:25:db:5c:c8:81:02:89:04:86: d5:73:23:14:4b:76:6a:09:6e:2d:8c:8d:b9:3a:dd:93:5d:fd: 94:7c:0c:d3:0c:b3:38:f9:07:f7:c5:ce:0c:e6:c3:e7:cc:85: a0:4b:df:99:4d:23:87:52:b4:93:c1:87:0d:cc:18:28:f8:dc: 73:ac:db:31:a0:f8:da:7d:30:db:a3:70:ad:51:42:81:05:46: 59:0d:16:31:a1:a6:8d:b7:05:ef:d4:a9:d4:14:82:c9:a8:f4: 12:95:5b:57:38:ec:a2:f8:4f:42:39:48:ef:58:93:0b:1b:60: 49:c9:a3:4a:59:65:f7:58:4a:1f:82:ae:67:52:80:6d:63:77: 67:71:1d:7b:f9:73:9b:c6:5a:17:e7:21:44:7b:fa:bc:fb:62: 45:67:3b:7c:c4:2b:57:3a:a7:36:d7:ec:21:16:43:4d:78:78: c7:28:cb:45:f2:55:63:d3:94:65:88:15:8c:20:12:6d:dc:b7: 6f:86:d4:3e:71:28:07:e4:30:35:e5:67:fa:29:7d:e9:0e:57: 6e:27:6c:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNnzmfeoFw0LTg0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk M2Y2ZjYwYWMtNDJmMy00YTQzLTliNzItNzNmOTZkOGM2ZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1KPqsTUqx0zgUvMjRzE8PyHUIqFTtVZmPQl w6E5XKAAxO+At6XiWPNMoAE+kJeEwhiZk7uXYL2I6FUtmet4oJZsI3S+usi1nm3/ aujtI6Z5BZFNZ7nkWqu1emDLD3spFl+3YiI7HTEbhdKn5CAkNVnKhi03/b1dqqtc UHuRIqvkzahBLGDDYI4B2aVLiIn3qWylcglPwPSHPYURzgSeiPw+9QAAokmt5JUX jNYQP/frJ3T0vNq2IuN5vYp55/fIaDHN45lL2/P0ZihpWKKy4x6FI5fhVXavPaKP FE7xZAZjaUZWgC58PWGEtpPMfJVkmaJ8otrQLvN5+GpsHMj7nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTgqPsBESpJltWq57CNFEXEBQ05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTI0YzBmNTMtMzY1Ny0z MTI1LTg4MmMtNTJhZjhlYmZkMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoZnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq5njJVb+g+Bjev8TE87KR9DKWbTQAd9DeTW2BBrOzCZjYJKwk8+VfB UxxKmiXbXMiBAokEhtVzIxRLdmoJbi2Mjbk63ZNd/ZR8DNMMszj5B/fFzgzmw+fM haBL35lNI4dStJPBhw3MGCj43HOs2zGg+Np9MNujcK1RQoEFRlkNFjGhpo23Be/U qdQUgsmo9BKVW1c47KL4T0I5SO9YkwsbYEnJo0pZZfdYSh+CrmdSgG1jd2dxHXv5 c5vGWhfnIUR7+rz7YkVnO3zEK1c6pzbX7CEWQ014eMcoy0XyVWPTlGWIFYwgEm3c t2+G1D5xKAfkMDXlZ/opfekOV24nbA8= -----END CERTIFICATE-----Generated at Sat Dec 6 18:38:06 2025 by rpki-client