This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98845c1e-8e53-35c4-af2b-c88cd9de6718.roa File: 98845c1e-8e53-35c4-af2b-c88cd9de6718.roa (raw, json) Hash identifier: s0OtxOjFYityV8vrF7yUsLE2AeZqsENDkPRtfcqYi9k= Subject key identifier: A7:83:24:79:62:B6:7A:1A:71:82:D3:02:23:98:BB:34:CD:7A:C9:B5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BD8C5D11295ED2EB0C28698C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98845c1e-8e53-35c4-af2b-c88cd9de6718.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 168.129.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:d1:12:95:ed:2e:b0:c2:86:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=b1e35ce7-cc52-4526-966f-b4517634959d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a1:c2:23:bd:60:5b:14:00:52:86:a9:4a:3e: a7:07:de:65:c6:d7:07:dc:c2:95:09:0a:69:de:0f: dc:75:1d:b9:7b:75:29:49:e5:65:b4:47:cc:7f:70: a8:0a:9b:d8:6c:70:3f:fa:87:92:39:16:e6:92:7d: 51:84:4f:6b:4c:e2:3e:18:1a:69:26:61:92:6f:4a: a9:dc:9c:bc:47:b7:7f:7a:4b:26:0a:c9:66:68:32: 17:74:08:1a:13:87:4d:29:3d:16:44:4d:48:22:fc: b6:2f:77:14:f6:2a:47:90:86:e5:49:8f:76:64:c3: 3a:e3:29:2f:3e:9e:1a:69:04:ce:99:4c:13:fa:47: aa:3b:2d:15:35:36:8f:64:95:66:b8:d1:6f:84:35: 7b:66:09:cb:66:75:b8:1d:25:40:9e:93:f5:c4:6f: 21:81:55:cc:7c:76:4e:74:d8:3f:a5:56:36:7a:eb: df:b2:e0:f2:0e:a9:d1:f1:77:bc:93:48:18:73:09: cd:46:f2:b3:af:68:7c:92:56:95:1f:40:8c:39:68: f6:0c:81:a8:ff:91:66:69:e2:b2:b7:96:51:86:1c: e7:2e:4c:71:60:fd:d6:e9:2a:ec:a5:a1:c9:8d:df: be:34:e1:ac:82:3f:65:8b:9f:65:9d:ec:d1:be:fb: 76:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:83:24:79:62:B6:7A:1A:71:82:D3:02:23:98:BB:34:CD:7A:C9:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98845c1e-8e53-35c4-af2b-c88cd9de6718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.129.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:6b:68:b0:60:8c:87:3c:77:46:17:e3:28:9b:9b:59:ff:f0: a8:1d:f0:60:c1:28:e5:4c:f8:9e:14:d0:bc:f1:4c:58:bb:24: 1a:aa:51:0b:39:e8:ed:46:b9:a2:d1:9a:b7:fc:0a:c2:07:30: 34:91:c0:8a:49:b1:14:57:22:71:ec:26:d0:46:ff:b4:3c:1c: d2:12:25:9a:e7:ee:15:8b:49:90:6b:f1:1f:bc:11:e6:a4:ad: ce:3d:7a:44:d4:ed:a8:5d:4e:9b:1b:d1:85:09:8c:0d:84:1e: 4d:d3:83:c1:96:73:10:d7:98:58:b4:52:0f:8b:fe:ca:a1:51: 46:78:b1:14:9c:cd:b4:4e:13:99:04:19:ce:b3:96:55:10:3d: f7:9b:8b:21:89:78:c2:06:72:f7:4b:05:75:8c:f3:b9:72:42: e2:ef:c9:33:86:70:b1:1b:c6:1b:e5:57:4d:cd:c6:25:27:60: c8:84:81:e7:b8:60:93:06:61:9a:d3:6b:c5:9b:da:1e:11:ab: 0c:04:43:ca:48:04:96:ee:02:f1:3f:3c:22:ca:8e:96:e3:9a: bf:39:4a:74:4d:29:9d:c8:e7:8f:4c:ce:71:45:ce:df:64:ac: 79:de:5a:85:4b:ad:83:1f:76:36:40:b5:92:10:29:42:22:11: de:83:32:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxdESle0usMKGmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk YjFlMzVjZTctY2M1Mi00NTI2LTk2NmYtYjQ1MTc2MzQ5NTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KHCI71gWxQAUoapSj6nB95lxtcH3MKVCQpp 3g/cdR25e3UpSeVltEfMf3CoCpvYbHA/+oeSORbmkn1RhE9rTOI+GBppJmGSb0qp 3Jy8R7d/eksmCslmaDIXdAgaE4dNKT0WRE1IIvy2L3cU9ipHkIblSY92ZMM64ykv Pp4aaQTOmUwT+keqOy0VNTaPZJVmuNFvhDV7ZgnLZnW4HSVAnpP1xG8hgVXMfHZO dNg/pVY2euvfsuDyDqnR8Xe8k0gYcwnNRvKzr2h8klaVH0CMOWj2DIGo/5FmaeKy t5ZRhhznLkxxYP3W6SrspaHJjd++NOGsgj9li59lnezRvvt2kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeDJHlitnoacYLTAiOYuzTNesm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTg4NDVjMWUtOGU1My0z NWM0LWFmMmItYzg4Y2Q5ZGU2NzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqIFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1raLBgjIc8d0YX4yibm1n/8Kgd8GDBKOVM+J4U0LzxTFi7JBqqUQs5 6O1GuaLRmrf8CsIHMDSRwIpJsRRXInHsJtBG/7Q8HNISJZrn7hWLSZBr8R+8Eeak rc49ekTU7ahdTpsb0YUJjA2EHk3Tg8GWcxDXmFi0Ug+L/sqhUUZ4sRSczbROE5kE Gc6zllUQPfebiyGJeMIGcvdLBXWM87lyQuLvyTOGcLEbxhvlV03NxiUnYMiEgee4 YJMGYZrTa8Wb2h4RqwwEQ8pIBJbuAvE/PCLKjpbjmr85SnRNKZ3I549MznFFzt9k rHneWoVLrYMfdjZAtZIQKUIiEd6DMjo= -----END CERTIFICATE-----Generated at Sat Dec 6 23:12:46 2025 by rpki-client