This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4de5ec-d19f-3dc0-a2b4-bab98c2dc6d4.roa File: 9f4de5ec-d19f-3dc0-a2b4-bab98c2dc6d4.roa (raw, json) Hash identifier: MSr0qiBB3Ql/ilRq6pK9/8Dz0UMpISp2BWMPWHM9QLA= Subject key identifier: C9:A7:AF:78:73:2A:E8:3A:40:C7:42:87:E5:3F:53:65:6C:27:C3:D4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C06D61876BB5AB41BDFD22F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4de5ec-d19f-3dc0-a2b4-bab98c2dc6d4.roa Signing time: Sun 30 Nov 2025 02:00:31 +0000 ROA not before: Sun 30 Nov 2025 02:00:31 +0000 ROA not after: Sat 28 Feb 2026 02:00:31 +0000 asID: 54253 IP address blocks: 167.234.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:06:d6:18:76:bb:5a:b4:1b:df:d2:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 30 02:00:31 2025 GMT Not After : Feb 28 02:00:31 2026 GMT Subject: CN=b3f89497-803f-4cb4-be65-ccbca8c845e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ab:ec:9f:da:97:6d:e1:4b:35:ed:f9:c8:b9: f0:e3:67:db:95:b4:15:2f:ab:1c:12:e2:f6:d9:c7: f8:af:54:72:8d:1f:4b:3f:10:af:f3:96:4f:92:ae: b4:1c:e4:c0:17:45:a5:a1:f9:76:a4:ff:a7:25:be: ba:b0:df:2e:5c:5d:12:5a:9f:ce:a4:ea:c7:34:e2: c6:fc:d2:ed:21:36:9a:92:ce:cf:50:ef:11:18:15: 26:91:78:fa:3d:f6:d8:fc:26:87:52:f7:c1:d5:87: d6:da:fd:5e:1e:41:34:84:22:1f:b0:f5:12:11:67: ee:5c:9f:8e:c4:2a:24:bf:97:54:90:7c:5d:e9:f7: f9:40:c1:44:76:58:6f:26:eb:b6:3d:6c:7a:dd:24: 5a:6d:43:aa:41:61:a7:5b:42:05:c0:9a:3f:07:8a: cf:f8:98:e5:94:69:7b:0c:d5:80:88:7f:83:a7:57: c5:9d:b1:e1:f8:35:79:07:a1:ea:aa:71:67:25:e4: 04:ce:31:66:b9:3a:6d:13:9f:4f:5a:78:d9:19:6f: af:32:1c:58:eb:8d:ab:e5:9d:72:6d:ff:22:5f:31: de:8d:71:de:87:2c:a8:d9:0a:85:9a:5a:95:e7:df: 2d:88:68:17:17:2e:f9:cf:13:cc:04:13:30:47:47: 57:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A7:AF:78:73:2A:E8:3A:40:C7:42:87:E5:3F:53:65:6C:27:C3:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f4de5ec-d19f-3dc0-a2b4-bab98c2dc6d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 167.234.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b9:f8:28:f2:30:fe:ab:a5:4b:52:2e:da:de:99:0b:8c:ea: e3:92:72:c1:0e:85:05:ab:9b:0f:ea:15:2b:66:04:7a:0a:d5: 15:39:8e:8e:4b:5e:87:f4:68:d2:7c:a2:09:dd:d9:d8:54:51: a6:d5:39:f2:a4:06:56:a0:7b:c1:a6:90:b0:5e:8d:35:05:fa: 31:18:20:9a:28:ec:b5:f2:e3:6e:46:9c:53:56:83:65:76:ce: 00:37:09:57:a6:47:e7:98:c1:e7:c3:40:20:d2:0b:46:43:8e: 2d:24:d5:f6:cd:28:d3:2f:40:9d:01:92:a6:0e:48:17:f1:a6: b8:9c:bd:4a:5b:d5:42:1a:d9:a8:e5:52:f7:50:5c:d4:5b:62: 89:6d:17:3d:f4:2c:90:01:e6:fd:6f:64:13:7c:80:fb:4b:2e: ae:69:da:ba:74:02:a8:d9:8d:6f:c5:43:7c:aa:91:cd:67:a7: 92:8d:12:5e:dd:b2:61:ed:70:2e:99:17:ff:12:a3:a0:3b:52: 8c:53:6c:cb:60:42:da:ec:fe:43:23:12:27:56:e1:85:e8:2f: 4a:7c:25:b6:b9:51:c2:b7:3f:cb:49:2e:65:26:c1:bb:30:1d: 33:1d:35:7c:c5:0a:5b:20:13:93:b5:2f:4b:67:23:c1:bc:21: 54:ff:a4:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwG1hh2u1q0G9/SLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEzMDAyMDAzMVoXDTI2MDIyODAyMDAzMVowLzEtMCsGA1UEAxMk YjNmODk0OTctODAzZi00Y2I0LWJlNjUtY2NiY2E4Yzg0NWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qvsn9qXbeFLNe35yLnw42fblbQVL6scEuL2 2cf4r1RyjR9LPxCv85ZPkq60HOTAF0Wlofl2pP+nJb66sN8uXF0SWp/OpOrHNOLG /NLtITaaks7PUO8RGBUmkXj6PfbY/CaHUvfB1YfW2v1eHkE0hCIfsPUSEWfuXJ+O xCokv5dUkHxd6ff5QMFEdlhvJuu2PWx63SRabUOqQWGnW0IFwJo/B4rP+JjllGl7 DNWAiH+Dp1fFnbHh+DV5B6HqqnFnJeQEzjFmuTptE59PWnjZGW+vMhxY642r5Z1y bf8iXzHejXHehyyo2QqFmlqV598tiGgXFy75zxPMBBMwR0dX7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmnr3hzKug6QMdCh+U/U2VsJ8PUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWY0ZGU1ZWMtZDE5Zi0z ZGMwLWEyYjQtYmFiOThjMmRjNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp+qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm5+CjyMP6rpUtSLtremQuM6uOScsEOhQWrmw/qFStmBHoK1RU5jo5L Xof0aNJ8ognd2dhUUabVOfKkBlage8GmkLBejTUF+jEYIJoo7LXy425GnFNWg2V2 zgA3CVemR+eYwefDQCDSC0ZDji0k1fbNKNMvQJ0BkqYOSBfxpricvUpb1UIa2ajl UvdQXNRbYoltFz30LJAB5v1vZBN8gPtLLq5p2rp0AqjZjW/FQ3yqkc1np5KNEl7d smHtcC6ZF/8So6A7UoxTbMtgQtrs/kMjEidW4YXoL0p8Jba5UcK3P8tJLmUmwbsw HTMdNXzFClsgE5O1L0tnI8G8IVT/pFY= -----END CERTIFICATE-----Generated at Sat Dec 6 22:39:48 2025 by rpki-client