This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a7afddd3-4488-3a04-aa1d-3c0331112320.roa File: a7afddd3-4488-3a04-aa1d-3c0331112320.roa (raw, json) Hash identifier: 0/R//O4e6g+qqP0VCzhQ3zM+AaW9KY3uVwt9avBSsa4= Subject key identifier: CE:4C:C9:C2:50:90:1A:25:8E:C7:A6:F7:3B:83:28:76:FC:B9:CF:9D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BC96B0F7B3782A194A37FBE00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a7afddd3-4488-3a04-aa1d-3c0331112320.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 31898 IP address blocks: 192.29.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6b:0f:7b:37:82:a1:94:a3:7f:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=f394babd-402d-4b49-8bbe-8dfdc6fd5abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b6:ed:e6:fc:b1:c8:2c:1f:e7:3d:6e:94:0e: 2c:56:e9:57:73:40:3f:24:a2:b6:ab:83:06:f4:38: ed:34:a2:fb:2d:e1:e6:2e:97:e9:9e:09:29:8a:9e: 28:f8:8f:92:7e:82:79:f6:7e:16:98:64:0b:5b:90: e0:f3:99:74:b4:10:89:8d:49:74:99:54:9b:6d:69: 35:d1:ce:a6:cd:b1:b3:98:74:62:d4:17:8c:be:a7: 9f:f7:28:95:b9:46:67:c8:30:13:7f:fc:2c:dc:fb: db:3f:36:ed:76:ae:65:ee:c7:59:41:d9:f7:b3:a3: da:62:9f:75:4a:ca:49:0b:6a:42:3d:62:99:fd:cb: 46:19:d5:7b:2c:92:03:03:3b:2e:f8:c6:bc:92:b8: 61:9d:9a:a0:73:92:38:d4:c6:b0:4e:b9:33:95:84: 4a:ee:6f:3b:e7:e3:42:66:5d:83:fb:d7:4c:5f:04: f8:53:6a:68:e3:74:fd:40:3f:88:63:83:0a:22:c7: 49:72:74:d0:77:55:70:e6:f2:86:2f:dc:63:78:2d: b4:3b:d2:22:16:68:f6:71:56:08:49:04:73:8a:13: ae:c3:4b:9a:e0:6d:a9:df:c1:02:c2:80:12:f8:43: 02:3f:7d:62:cc:e0:95:68:9f:6a:78:ac:d6:ea:ca: 5d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4C:C9:C2:50:90:1A:25:8E:C7:A6:F7:3B:83:28:76:FC:B9:CF:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a7afddd3-4488-3a04-aa1d-3c0331112320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:fa:6a:76:3b:d8:05:e0:72:72:69:9f:47:ff:35:b8:a6:63: 68:81:9f:15:3f:2e:10:8b:33:87:e3:87:47:e3:46:08:34:7c: 18:f2:80:60:10:25:58:48:38:e4:18:14:e9:21:7f:1a:8b:24: c4:55:d6:33:2b:9c:df:a9:23:02:62:d2:ff:86:fe:bf:84:11: 08:78:a2:10:24:0e:a5:9c:e5:b6:c2:6d:63:52:26:96:c2:ad: da:0a:df:a0:b8:82:a2:e2:f7:c2:10:91:d1:50:75:94:11:a5: 18:68:cb:a8:1e:1a:c1:be:1a:d4:f1:68:f5:0e:57:63:3d:a8: e0:c0:0e:74:13:f8:41:ae:64:5c:e2:d5:cf:1b:34:3a:68:a9: 80:63:b1:ab:31:63:7a:4b:60:11:8e:e8:d0:53:ad:e0:2b:ee: ae:15:ce:15:b8:e0:4c:f9:a5:98:06:0b:8b:6b:a1:76:da:3b: dc:fb:ee:04:c2:ba:c9:be:9b:5f:d3:9d:91:a9:f8:fe:c3:36: 27:b1:dd:ed:46:f9:fa:9a:41:b2:1b:0a:7a:2a:d7:5b:7b:b9: 1d:02:4d:d3:dd:00:17:1b:91:7a:8d:b0:2e:66:48:bb:e7:1c: 10:7d:cb:99:34:24:76:d1:70:2e:c7:aa:10:d2:ca:d5:34:76: 33:ee:ca:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvJaw97N4KhlKN/vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk ZjM5NGJhYmQtNDAyZC00YjQ5LThiYmUtOGRmZGM2ZmQ1YWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibbt5vyxyCwf5z1ulA4sVulXc0A/JKK2q4MG 9DjtNKL7LeHmLpfpngkpip4o+I+SfoJ59n4WmGQLW5Dg85l0tBCJjUl0mVSbbWk1 0c6mzbGzmHRi1BeMvqef9yiVuUZnyDATf/ws3PvbPzbtdq5l7sdZQdn3s6PaYp91 SspJC2pCPWKZ/ctGGdV7LJIDAzsu+Ma8krhhnZqgc5I41MawTrkzlYRK7m875+NC Zl2D+9dMXwT4U2po43T9QD+IY4MKIsdJcnTQd1Vw5vKGL9xjeC20O9IiFmj2cVYI SQRzihOuw0ua4G2p38ECwoAS+EMCP31izOCVaJ9qeKzW6spdDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5MycJQkBoljsem9zuDKHb8uc+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTdhZmRkZDMtNDQ4OC0z YTA0LWFhMWQtM2MwMzMxMTEyMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwB24MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn6anY72AXgcnJpn0f/NbimY2iBnxU/LhCLM4fjh0fjRgg0fBjygGAQ JVhIOOQYFOkhfxqLJMRV1jMrnN+pIwJi0v+G/r+EEQh4ohAkDqWc5bbCbWNSJpbC rdoK36C4gqLi98IQkdFQdZQRpRhoy6geGsG+GtTxaPUOV2M9qODADnQT+EGuZFzi 1c8bNDpoqYBjsasxY3pLYBGO6NBTreAr7q4VzhW44Ez5pZgGC4troXbaO9z77gTC usm+m1/TnZGp+P7DNiex3e1G+fqaQbIbCnoq11t7uR0CTdPdABcbkXqNsC5mSLvn HBB9y5k0JHbRcC7HqhDSytU0djPuyhU= -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:54 2025 by rpki-client