This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8b9269c-db50-3610-836d-3e8d4894532a.roa File: a8b9269c-db50-3610-836d-3e8d4894532a.roa (raw, json) Hash identifier: ihDq2WweXWX7XCvrDxrG9kxm6sGAkc8rxRWBON8CBqc= Subject key identifier: 62:A0:26:5A:06:6D:C6:80:B2:EC:75:61:62:1E:18:E3:0C:4C:A3:9B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCF0075DC5BD2C157590712B4 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8b9269c-db50-3610-836d-3e8d4894532a.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 147.154.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:75:dc:5b:d2:c1:57:59:07:12:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=9f2ecbab-21c4-47b8-9e15-83f8fe4b9b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:ef:34:85:34:e9:f1:4b:9c:b5:09:93:94: 9a:41:e0:22:4d:ac:96:71:16:dc:5a:0c:78:74:17: 57:92:01:7e:5b:42:42:ec:c9:8d:74:f1:0d:b2:5b: 65:38:4f:7c:be:a0:98:24:31:17:e3:97:cc:e7:53: 32:61:62:95:47:60:df:6f:44:cf:d6:c9:2b:f6:e4: 4b:bb:00:c3:91:72:0e:ad:97:62:7d:ec:8b:21:cd: c8:8b:c0:99:e1:5b:17:1e:4e:ab:ee:7b:54:20:46: ab:88:36:82:5f:69:23:1c:01:ba:82:ee:94:a8:2a: 61:dd:79:a7:9e:f1:0a:80:d1:d7:de:d3:1e:bb:36: e2:52:9d:d9:af:ad:c4:f0:09:36:a6:52:14:1e:26: 75:0f:48:ee:b6:53:31:26:88:fc:63:0b:3d:30:40: 5e:20:2d:d7:11:49:e4:55:cf:c6:a1:73:da:e1:3a: 00:cf:1a:97:7b:34:67:66:1e:83:0e:2f:f5:a1:b3: da:8d:74:ae:39:bb:db:b7:6a:ef:c2:b5:8a:2d:e5: 6f:29:52:f5:e5:68:ab:6d:94:c6:99:53:ce:bd:8c: 2b:fe:1b:0c:12:45:43:7a:6e:32:cc:58:fa:78:26: 63:51:98:b1:b4:08:3b:15:69:2e:f8:8b:5d:64:98: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A0:26:5A:06:6D:C6:80:B2:EC:75:61:62:1E:18:E3:0C:4C:A3:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a8b9269c-db50-3610-836d-3e8d4894532a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.154.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ab:df:b3:50:67:67:58:bf:62:74:bd:9e:52:66:44:1e:63: 4f:c0:e9:4a:ca:4f:90:1a:79:96:fd:13:7c:7b:63:51:aa:76: 14:66:50:9c:e7:47:18:5b:d4:67:68:2d:dd:5b:8c:78:05:96: fd:af:f0:20:a5:50:90:61:73:e2:f6:12:bb:10:8a:a7:e4:b5: c5:6f:e9:b4:f0:0b:2c:74:9a:ef:af:d3:fe:0b:0a:36:c0:25: 69:1f:a0:45:1b:71:6a:a9:c5:65:aa:08:a8:a2:97:29:b2:fd: 13:0e:54:a3:6d:d2:45:2b:db:7b:64:69:66:e0:98:87:3d:84: 88:01:9f:2a:b9:b8:00:cb:96:b2:41:1b:b4:ef:ec:cd:9d:c7: b8:41:31:98:43:c6:ea:ce:4b:18:bf:3d:79:33:f7:61:b7:9d: a9:d7:fe:dd:fe:18:4b:e9:38:41:86:46:94:60:11:98:00:6e: 6f:2f:63:9f:75:fc:03:cc:d7:7d:b9:2c:6e:81:26:17:03:cb: 2b:3f:d8:32:1f:6f:a6:ce:9d:ea:e3:fa:3b:75:b4:e2:dd:02: 98:71:fb:a3:ff:87:8f:0c:ad:10:33:83:20:44:99:5d:f8:87: 64:45:28:d8:4e:0f:15:c7:f4:43:83:86:1f:b6:26:e5:aa:d0: 29:1d:ac:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAHXcW9LBV1kHErQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk OWYyZWNiYWItMjFjNC00N2I4LTllMTUtODNmOGZlNGI5YjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf7vNIU06fFLnLUJk5SaQeAiTayWcRbcWgx4 dBdXkgF+W0JC7MmNdPENsltlOE98vqCYJDEX45fM51MyYWKVR2Dfb0TP1skr9uRL uwDDkXIOrZdifeyLIc3Ii8CZ4VsXHk6r7ntUIEariDaCX2kjHAG6gu6UqCph3Xmn nvEKgNHX3tMeuzbiUp3Zr63E8Ak2plIUHiZ1D0jutlMxJoj8Yws9MEBeIC3XEUnk Vc/GoXPa4ToAzxqXezRnZh6DDi/1obPajXSuObvbt2rvwrWKLeVvKVL15WirbZTG mVPOvYwr/hsMEkVDem4yzFj6eCZjUZixtAg7FWku+ItdZJheywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKgJloGbcaAsux1YWIeGOMMTKObMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYThiOTI2OWMtZGI1MC0z NjEwLTgzNmQtM2U4ZDQ4OTQ1MzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk5rwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKr37NQZ2dYv2J0vZ5SZkQeY0/A6UrKT5AaeZb9E3x7Y1GqdhRmUJzn Rxhb1GdoLd1bjHgFlv2v8CClUJBhc+L2ErsQiqfktcVv6bTwCyx0mu+v0/4LCjbA JWkfoEUbcWqpxWWqCKiilymy/RMOVKNt0kUr23tkaWbgmIc9hIgBnyq5uADLlrJB G7Tv7M2dx7hBMZhDxurOSxi/PXkz92G3nanX/t3+GEvpOEGGRpRgEZgAbm8vY591 /APM1325LG6BJhcDyys/2DIfb6bOnerj+jt1tOLdAphx+6P/h48MrRAzgyBEmV34 h2RFKNhODxXH9EODhh+2JuWq0CkdrOI= -----END CERTIFICATE-----Generated at Sat Dec 6 22:16:25 2025 by rpki-client