This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8aeac39-c794-349e-bef6-fb3c8890d20d.roa File: a8aeac39-c794-349e-bef6-fb3c8890d20d.roa (raw, json) Hash identifier: IL6pJmfrWXvseL792dcgNqALdvYwVsE0t4oj6b/mvnM= Subject key identifier: B8:AA:7E:20:23:27:14:39:30:89:5E:C8:05:21:3E:7B:8A:47:93:45 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCD9F2ECBB24C1304473C2C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8aeac39-c794-349e-bef6-fb3c8890d20d.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 168.138.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9f:2e:cb:b2:4c:13:04:47:3c:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=1ab63ec6-1e9d-484b-82ed-c1aacf094504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:85:f3:3b:ec:bf:4f:27:01:0f:95:a4:a3: 71:c6:97:81:2e:6b:93:19:16:95:f9:53:ee:ad:99: 5f:61:5c:46:b0:39:b3:34:fc:37:56:f7:0a:12:04: 7b:14:7f:22:e2:2a:ee:16:16:b3:69:73:3e:1e:1c: 71:9b:9d:e6:15:fa:ed:3a:2d:4b:2e:1c:62:43:ec: 74:a2:16:d5:cf:18:23:97:aa:c3:07:cf:8d:9a:22: 89:6c:42:d6:f2:27:7e:54:17:c6:b0:03:d1:1f:85: 01:b0:70:d1:24:3d:6f:62:78:a2:dc:f7:37:2c:7e: 8c:16:c5:2e:d7:39:ca:ac:e1:49:38:1f:1c:7c:48: fa:8a:8e:c5:1a:c5:ba:2b:85:c6:06:8f:72:c9:02: cb:5c:c0:08:66:d1:15:ad:68:bf:21:fb:e9:11:5a: 0e:2e:0e:68:3e:a1:95:80:c7:79:25:8e:11:00:e6: 9c:a9:f2:74:1d:ea:67:2f:00:46:af:16:e9:35:d4: fb:8c:3f:a3:ae:6c:70:1d:18:4a:51:9d:d9:57:4d: f1:54:64:c7:56:f1:05:60:0f:4d:21:ff:48:1a:6e: 45:58:45:b2:fc:62:a8:3f:30:6a:1f:92:f2:a8:03: 28:e5:c0:52:e5:40:97:89:52:53:f1:f4:fa:5a:34: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AA:7E:20:23:27:14:39:30:89:5E:C8:05:21:3E:7B:8A:47:93:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8aeac39-c794-349e-bef6-fb3c8890d20d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:00:8e:59:c3:a5:00:01:e2:49:86:57:f2:60:84:a5:8e:f7: 41:cd:25:fc:e8:52:d0:ad:a3:e6:90:20:6d:76:f2:7f:b0:35: 5e:6e:6f:75:2f:2a:28:b1:4e:6c:27:46:de:bb:72:55:b5:a0: ed:37:f0:7a:0d:24:bf:10:65:f9:d1:f7:35:3d:1a:ad:80:b8: e7:25:25:bf:15:02:ed:1a:00:35:48:0f:13:14:a2:bf:f5:75: f3:11:34:15:4f:b6:03:52:f9:d2:4a:93:2d:33:e9:b6:35:e4: 0c:31:9b:b5:af:2e:61:5c:a2:cb:e5:8c:49:0c:55:32:7e:7a: 1e:9f:82:b2:75:e1:89:35:0a:15:2a:7d:7e:ae:75:56:46:30: 62:ed:94:e9:4d:ef:e0:61:c3:29:ce:8b:ba:fb:5c:42:58:17: 52:a2:0e:cb:75:9f:20:9c:95:93:76:40:ea:82:85:16:89:9a: b3:6d:cd:23:87:53:96:5d:b9:5a:84:92:0c:b6:45:5a:65:64: 37:d9:07:6c:98:13:0a:3d:07:07:3f:5e:2b:7b:13:5c:14:6a: 9f:b3:01:da:73:2b:2c:5e:26:0e:2f:0a:bc:84:67:bf:10:eb: 07:c8:2d:e3:7f:cc:f5:d6:aa:9a:f7:21:68:89:fe:07:ff:e4: 12:12:10:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNny7LskwTBEc8LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk MWFiNjNlYzYtMWU5ZC00ODRiLTgyZWQtYzFhYWNmMDk0NTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcGF8zvsv08nAQ+VpKNxxpeBLmuTGRaV+VPu rZlfYVxGsDmzNPw3VvcKEgR7FH8i4iruFhazaXM+Hhxxm53mFfrtOi1LLhxiQ+x0 ohbVzxgjl6rDB8+NmiKJbELW8id+VBfGsAPRH4UBsHDRJD1vYnii3Pc3LH6MFsUu 1znKrOFJOB8cfEj6io7FGsW6K4XGBo9yyQLLXMAIZtEVrWi/IfvpEVoOLg5oPqGV gMd5JY4RAOacqfJ0HepnLwBGrxbpNdT7jD+jrmxwHRhKUZ3ZV03xVGTHVvEFYA9N If9IGm5FWEWy/GKoPzBqH5LyqAMo5cBS5UCXiVJT8fT6WjRZXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiqfiAjJxQ5MIleyAUhPnuKR5NFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYThhZWFjMzktYzc5NC0z NDllLWJlZjYtZmIzYzg4OTBkMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqIp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUAjlnDpQAB4kmGV/JghKWO90HNJfzoUtCto+aQIG128n+wNV5ub3Uv KiixTmwnRt67clW1oO038HoNJL8QZfnR9zU9Gq2AuOclJb8VAu0aADVIDxMUor/1 dfMRNBVPtgNS+dJKky0z6bY15Awxm7WvLmFcosvljEkMVTJ+eh6fgrJ14Yk1ChUq fX6udVZGMGLtlOlN7+BhwynOi7r7XEJYF1KiDst1nyCclZN2QOqChRaJmrNtzSOH U5ZduVqEkgy2RVplZDfZB2yYEwo9Bwc/Xit7E1wUap+zAdpzKyxeJg4vCryEZ78Q 6wfILeN/zPXWqpr3IWiJ/gf/5BISEHc= -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:53 2025 by rpki-client