This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99f65072-ef1d-368c-9d6e-dcbfde17a809.roa File: 99f65072-ef1d-368c-9d6e-dcbfde17a809.roa (raw, json) Hash identifier: 96gCMheDM1RtQ3uiiqE5HPU89hpjWPdlnj8WquaLHb4= Subject key identifier: 5E:A2:74:0A:19:C8:8F:1F:7D:01:68:63:E3:0B:E3:7C:1D:A8:9D:BF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCF006893CBA912FA1C7C3B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99f65072-ef1d-368c-9d6e-dcbfde17a809.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 192.29.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:68:93:cb:a9:12:fa:1c:7c:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=881f34bc-5dd0-4067-a2fa-fcec5d621f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:85:68:d1:d3:74:6c:cf:55:07:52:9d:a6:50: 0a:62:08:ba:ac:1c:55:ab:7a:b5:cf:74:7e:3f:a0: 85:5d:6a:9c:52:99:30:9f:1f:d0:af:82:2a:d5:a6: 54:55:92:2d:f1:62:ac:93:6b:3d:10:cf:0b:f9:94: b9:b9:3a:bd:58:0d:b7:d9:f3:b6:1b:11:b1:90:1d: 9f:d4:ee:e3:9b:2f:cb:e2:1c:7b:cb:68:47:0d:1b: 67:2b:64:d5:dd:37:cc:39:00:f4:eb:46:61:d7:6b: 17:d0:ab:75:8b:8a:1b:69:56:c1:0f:9b:08:e2:d1: fd:e2:bb:29:d6:fd:26:36:c8:06:f5:66:9d:92:b4: cd:95:95:b4:c8:9d:a8:8b:fd:6d:60:11:85:88:7e: d2:7e:1e:02:06:47:18:f5:48:aa:7d:14:dc:86:28: 26:e7:3e:a7:8b:49:80:2d:c4:51:65:48:c9:a7:69: 58:15:20:8e:3b:a3:08:57:89:1e:f7:11:99:1e:46: bd:d6:39:a3:6c:52:5c:30:98:ea:1a:5a:b8:a9:17: e5:04:cb:14:fe:43:1f:7c:fd:9e:bb:0a:95:cb:c4: b6:1c:97:bd:1f:73:33:f3:e4:9d:8a:89:4a:d3:98: c0:48:cd:2d:7e:96:b3:27:1c:7f:fd:a5:f2:22:f1: 21:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A2:74:0A:19:C8:8F:1F:7D:01:68:63:E3:0B:E3:7C:1D:A8:9D:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/99f65072-ef1d-368c-9d6e-dcbfde17a809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:38:8e:f2:d9:3f:48:2c:71:f1:08:b1:b0:28:d0:53:6d:e7: 94:dc:5f:7e:67:97:6e:aa:1e:66:d1:77:90:50:91:22:17:b7: 1e:91:8f:c2:f5:f2:77:76:77:2e:f6:4e:40:1e:ec:65:a2:8e: 41:c8:1c:82:0d:f2:b6:75:4a:3e:3b:3c:1c:fa:e4:87:03:f1: 21:86:f8:e3:8b:ff:a0:43:20:f2:67:2c:66:7b:3f:49:88:3e: c7:19:7a:16:78:91:02:e6:56:7e:f3:4c:4c:97:36:bf:27:f3: 86:98:fd:31:35:9f:6e:3a:db:e1:e4:ee:7c:21:cb:36:b6:fb: 01:3f:6f:8a:5e:56:08:c4:bf:b3:fe:7a:89:5e:85:59:d8:77: 79:c3:19:37:6c:4b:73:18:5e:d9:86:59:6a:0c:7a:9f:39:54: 44:0c:08:89:0f:c2:04:a5:c8:fc:22:21:34:bb:4f:48:ab:c9: 77:69:04:61:b8:b4:a4:96:70:0b:7d:f0:e2:77:ee:21:61:14: 95:d2:3e:eb:25:3b:99:23:c6:b0:3f:70:2b:88:4f:d5:e4:6b: bd:e7:d5:5e:cb:67:cf:80:08:44:07:31:1b:e4:4e:8b:70:54: aa:07:fe:c0:ed:85:92:0e:4a:c8:fd:08:24:4f:28:5b:ae:74: 57:60:18:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAGiTy6kS+hx8OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk ODgxZjM0YmMtNWRkMC00MDY3LWEyZmEtZmNlYzVkNjIxZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYVo0dN0bM9VB1KdplAKYgi6rBxVq3q1z3R+ P6CFXWqcUpkwnx/Qr4Iq1aZUVZIt8WKsk2s9EM8L+ZS5uTq9WA232fO2GxGxkB2f 1O7jmy/L4hx7y2hHDRtnK2TV3TfMOQD060Zh12sX0Kt1i4obaVbBD5sI4tH94rsp 1v0mNsgG9WadkrTNlZW0yJ2oi/1tYBGFiH7Sfh4CBkcY9UiqfRTchigm5z6ni0mA LcRRZUjJp2lYFSCOO6MIV4ke9xGZHka91jmjbFJcMJjqGlq4qRflBMsU/kMffP2e uwqVy8S2HJe9H3Mz8+SdiolK05jASM0tfpazJxx//aXyIvEhvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6idAoZyI8ffQFoY+ML43wdqJ2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTlmNjUwNzItZWYxZC0z NjhjLTlkNmUtZGNiZmRlMTdhODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo4jvLZP0gscfEIsbAo0FNt55TcX35nl26qHmbRd5BQkSIXtx6Rj8L1 8nd2dy72TkAe7GWijkHIHIIN8rZ1Sj47PBz65IcD8SGG+OOL/6BDIPJnLGZ7P0mI PscZehZ4kQLmVn7zTEyXNr8n84aY/TE1n2462+Hk7nwhyza2+wE/b4peVgjEv7P+ eolehVnYd3nDGTdsS3MYXtmGWWoMep85VEQMCIkPwgSlyPwiITS7T0iryXdpBGG4 tKSWcAt98OJ37iFhFJXSPuslO5kjxrA/cCuIT9Xka73n1V7LZ8+ACEQHMRvkTotw VKoH/sDthZIOSsj9CCRPKFuudFdgGM8= -----END CERTIFICATE-----Generated at Sat Dec 6 17:36:50 2025 by rpki-client