This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c9f38069-bbbc-3d65-89da-f1cfb84d4697.roa File: c9f38069-bbbc-3d65-89da-f1cfb84d4697.roa (raw, json) Hash identifier: Ma3HOIGhrMC1HPPBdRvAcg4wKZxRBm+bPd/rcCpaBUo= Subject key identifier: FE:5D:67:C5:F0:79:5A:49:23:83:89:6D:5A:E2:D5:31:B3:B4:60:8B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCF006604F246E305E1D4CA00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c9f38069-bbbc-3d65-89da-f1cfb84d4697.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 165.1.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:66:04:f2:46:e3:05:e1:d4:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=b9d95f2b-e84e-4a57-a424-1e097f5269c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:7e:f8:8f:5d:d1:9d:9e:26:f9:ff:2c:85: 59:aa:2b:8c:f1:08:00:64:de:ec:ba:89:4f:b8:fd: 1c:ae:47:ca:99:70:e6:8e:68:31:7e:ef:97:b2:53: 8e:3d:d2:e2:1f:6e:ec:54:9c:36:b0:5b:d7:96:aa: 05:68:3a:7f:ca:51:cd:9d:3f:8d:5b:19:23:19:27: 78:78:71:9c:d7:04:d0:af:e1:22:13:43:0c:d0:38: 56:df:72:03:c4:49:13:89:89:7c:3d:e5:c1:da:10: 6b:2d:ad:c1:65:1f:0f:00:f9:93:ec:6d:b1:ce:56: ab:bc:5c:9b:24:90:33:11:ae:fa:56:2b:90:7a:25: bc:ad:25:07:61:96:4d:f0:08:e8:a4:29:fc:b4:51: ea:e8:ae:d9:e2:8d:6d:28:7a:b8:f0:d9:0c:6a:fa: 66:db:eb:02:27:08:83:5c:e5:94:76:fa:53:91:6b: dd:d5:8e:33:cc:77:40:f8:28:49:34:1c:fe:b3:48: e4:c8:0f:fd:5f:ec:7e:eb:cd:d4:c7:4c:10:3f:b6: 2e:7b:5b:52:85:82:1a:7b:6d:21:81:90:e6:08:a4: ea:d0:0e:df:e5:13:50:4e:3e:30:47:75:c6:59:ae: 54:30:de:43:dd:b4:d6:dc:c4:06:c5:d0:07:3e:7c: 39:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5D:67:C5:F0:79:5A:49:23:83:89:6D:5A:E2:D5:31:B3:B4:60:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c9f38069-bbbc-3d65-89da-f1cfb84d4697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 165.1.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e8:c1:cc:ca:5e:6c:6d:d4:92:0a:5d:0c:cd:4a:78:90:51: 20:5c:8b:e9:d0:78:75:a5:31:f7:77:52:21:fd:6e:82:9a:61: 95:b5:1a:bd:bb:19:83:bd:7e:11:90:c9:34:6c:9f:5b:03:e6: 8e:25:77:91:d6:ed:24:aa:31:d3:11:cd:cb:7f:52:9f:d4:ef: 1c:40:ca:bf:30:d0:86:25:28:b3:0c:4c:c3:b8:51:8d:bd:f1: ba:36:3c:3d:d0:95:8f:4b:45:a2:3a:f6:c0:e1:28:93:86:49: 13:34:4f:b3:32:c3:a6:2e:7d:57:ad:61:cf:e4:be:bc:2f:6a: c0:9d:7e:cd:92:2d:4e:aa:51:76:4b:66:48:f0:65:e6:1b:b2: 0a:1f:fc:d5:bc:91:57:62:eb:a6:33:07:1a:39:06:7e:97:93: 28:d1:67:a4:79:fc:c4:8f:11:f8:84:b1:3f:a1:04:51:42:e8: 40:96:50:1b:8b:f4:e4:f2:2b:65:0f:ba:91:7a:db:3a:04:1d: c8:27:47:92:59:fb:86:5c:1e:38:4c:68:6a:e8:96:b6:23:12: 15:92:7d:7c:30:ff:72:3c:09:ec:41:4f:67:b7:4d:6e:86:0e: 32:db:c2:d7:b0:7c:28:e3:7f:1b:f8:6f:ac:68:78:5c:aa:b0: f8:fa:7d:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAGYE8kbjBeHUygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk YjlkOTVmMmItZTg0ZS00YTU3LWE0MjQtMWUwOTdmNTI2OWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IZ++I9d0Z2eJvn/LIVZqiuM8QgAZN7suolP uP0crkfKmXDmjmgxfu+XslOOPdLiH27sVJw2sFvXlqoFaDp/ylHNnT+NWxkjGSd4 eHGc1wTQr+EiE0MM0DhW33IDxEkTiYl8PeXB2hBrLa3BZR8PAPmT7G2xzlarvFyb JJAzEa76ViuQeiW8rSUHYZZN8AjopCn8tFHq6K7Z4o1tKHq48NkMavpm2+sCJwiD XOWUdvpTkWvd1Y4zzHdA+ChJNBz+s0jkyA/9X+x+683Ux0wQP7Yue1tShYIae20h gZDmCKTq0A7f5RNQTj4wR3XGWa5UMN5D3bTW3MQGxdAHPnw5wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5dZ8XweVpJI4OJbVri1TGztGCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzlmMzgwNjktYmJiYy0z ZDY1LTg5ZGEtZjFjZmI4NGQ0Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpQF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3owczKXmxt1JIKXQzNSniQUSBci+nQeHWlMfd3UiH9boKaYZW1Gr27 GYO9fhGQyTRsn1sD5o4ld5HW7SSqMdMRzct/Up/U7xxAyr8w0IYlKLMMTMO4UY29 8bo2PD3QlY9LRaI69sDhKJOGSRM0T7Myw6YufVetYc/kvrwvasCdfs2SLU6qUXZL ZkjwZeYbsgof/NW8kVdi66YzBxo5Bn6XkyjRZ6R5/MSPEfiEsT+hBFFC6ECWUBuL 9OTyK2UPupF62zoEHcgnR5JZ+4ZcHjhMaGrolrYjEhWSfXww/3I8CexBT2e3TW6G DjLbwtewfCjjfxv4b6xoeFyqsPj6fY8= -----END CERTIFICATE-----Generated at Sat Dec 6 18:37:56 2025 by rpki-client