This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c4071dca-2e69-349d-b2f3-f928ded29618.roa File: c4071dca-2e69-349d-b2f3-f928ded29618.roa (raw, json) Hash identifier: u4sq3aQOdmZtXxNkFB2LvuNxJfVNjKLiyHY1ZyMAsVY= Subject key identifier: 2E:62:C1:38:29:02:CA:EC:B8:9D:A2:3E:D8:75:EB:7C:34:30:52:4A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C8E3C2B02FEF0815C69561800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c4071dca-2e69-349d-b2f3-f928ded29618.roa Signing time: Sat 17 Jan 2026 14:00:38 +0000 ROA not before: Sat 17 Jan 2026 14:00:38 +0000 ROA not after: Fri 17 Apr 2026 13:00:38 +0000 asID: 31898 IP address blocks: 140.238.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8e:3c:2b:02:fe:f0:81:5c:69:56:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 17 14:00:38 2026 GMT Not After : Apr 17 13:00:38 2026 GMT Subject: CN=99f7c020-30b9-4ecd-b554-9b125e1556f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dd:43:64:59:cb:cc:8c:8e:80:aa:70:8a:20: 80:6b:b4:b8:6d:07:95:fe:c8:e9:14:53:51:a9:40: 0a:d0:e5:a3:e6:11:f0:db:3e:d9:43:bc:1f:e1:ae: 20:5a:c6:2c:6d:ec:39:74:0c:2c:ce:8d:53:ca:e0: d1:03:26:4a:a3:35:11:2c:17:8c:a5:6c:38:bb:69: cc:6c:a3:01:71:48:9e:e8:e6:40:2f:78:94:17:ad: 42:58:b8:cd:29:d3:24:61:77:95:69:93:ea:5e:20: 42:b2:18:fc:10:9a:50:68:8d:97:bf:e9:74:4c:0c: 34:51:ea:84:36:06:30:bd:80:ac:98:f7:98:cd:31: 26:35:19:e3:67:4a:01:b1:b8:c4:e0:57:3f:78:3f: 7c:a5:91:94:f8:dc:78:2b:e8:88:a6:0b:de:07:1f: 68:ed:78:7f:26:70:62:32:e0:9d:43:ac:9e:c7:c0: 5e:74:cb:a6:da:22:8b:a5:0f:bc:72:00:1a:04:ea: 40:ac:46:e8:a0:83:06:e0:85:83:f7:93:f7:67:5a: f8:11:3f:70:50:51:40:72:cc:59:a0:2e:6a:a4:9a: 98:a2:b9:81:16:13:47:af:6e:8f:34:7f:71:25:be: fe:c4:60:88:6f:6b:cf:7c:1f:af:a8:82:1a:c6:2e: d3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:62:C1:38:29:02:CA:EC:B8:9D:A2:3E:D8:75:EB:7C:34:30:52:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c4071dca-2e69-349d-b2f3-f928ded29618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5c:cf:7b:d5:01:38:4a:96:43:4b:53:0c:f6:55:be:c9:fa: ac:22:b3:db:58:58:b7:e1:b4:68:ae:af:ad:2d:01:70:4a:0d: f5:f8:6c:3f:99:c7:9d:84:65:d2:ca:a8:dc:a8:b6:3d:35:43: 34:56:c7:6f:49:02:7f:39:ec:3d:c2:91:7e:8f:95:bb:96:96: 0c:d3:3b:a6:10:5b:c3:f2:35:9e:6e:36:26:7b:ce:93:29:ed: 5a:1b:37:a0:20:9c:82:c0:3b:ca:e8:57:17:28:89:66:ac:68: f6:a6:7b:0c:21:57:8b:9a:e7:67:b6:43:6d:92:98:47:c1:fb: 40:74:0e:a2:36:8e:8d:bd:90:07:81:f2:c3:f2:9b:cf:98:dc: 4b:4f:2a:3f:5a:94:4a:ea:f0:b5:fa:c2:63:e2:45:87:68:4a: 12:40:ce:57:f6:d3:ac:ba:1b:8e:66:5b:6d:9a:5f:25:ee:92: bd:f9:c7:5f:38:cc:cb:d1:87:66:69:5a:43:5e:69:8e:22:1d: e1:31:d1:7b:aa:26:cc:98:66:f2:47:07:ad:18:2c:2f:ed:f1: 02:61:a0:1f:60:fe:a4:73:48:07:68:99:60:0b:fa:3b:68:ec: 15:65:a5:78:f6:78:11:b2:98:f0:e4:0f:da:ae:f3:a5:ed:4c: 06:3b:72:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyOPCsC/vCBXGlWGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDExNzE0MDAzOFoXDTI2MDQxNzEzMDAzOFowLzEtMCsGA1UEAxMk OTlmN2MwMjAtMzBiOS00ZWNkLWI1NTQtOWIxMjVlMTU1NmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt1DZFnLzIyOgKpwiiCAa7S4bQeV/sjpFFNR qUAK0OWj5hHw2z7ZQ7wf4a4gWsYsbew5dAwszo1TyuDRAyZKozURLBeMpWw4u2nM bKMBcUie6OZAL3iUF61CWLjNKdMkYXeVaZPqXiBCshj8EJpQaI2Xv+l0TAw0UeqE NgYwvYCsmPeYzTEmNRnjZ0oBsbjE4Fc/eD98pZGU+Nx4K+iIpgveBx9o7Xh/JnBi MuCdQ6yex8BedMum2iKLpQ+8cgAaBOpArEbooIMG4IWD95P3Z1r4ET9wUFFAcsxZ oC5qpJqYormBFhNHr26PNH9xJb7+xGCIb2vPfB+vqIIaxi7T+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5iwTgpAsrsuJ2iPth163w0MFJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzQwNzFkY2EtMmU2OS0z NDlkLWIyZjMtZjkyOGRlZDI5NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjO54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFcz3vVAThKlkNLUwz2Vb7J+qwis9tYWLfhtGiur60tAXBKDfX4bD+Z x52EZdLKqNyotj01QzRWx29JAn857D3CkX6PlbuWlgzTO6YQW8PyNZ5uNiZ7zpMp 7VobN6AgnILAO8roVxcoiWasaPamewwhV4ua52e2Q22SmEfB+0B0DqI2jo29kAeB 8sPym8+Y3EtPKj9alErq8LX6wmPiRYdoShJAzlf206y6G45mW22aXyXukr35x184 zMvRh2ZpWkNeaY4iHeEx0XuqJsyYZvJHB60YLC/t8QJhoB9g/qRzSAdomWAL+jto 7BVlpXj2eBGymPDkD9qu86XtTAY7cqk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:54 2026 by rpki-client