This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0d5b0e1-affb-3e60-a653-98f935a107c4.roa File: d0d5b0e1-affb-3e60-a653-98f935a107c4.roa (raw, json) Hash identifier: v4M7o8mJ21oRrfSnPsnXAIrZLC+buSRkvm9kXHq6nIU= Subject key identifier: 56:2C:15:4C:A3:E3:19:C8:7E:98:24:8A:E1:27:FB:ED:62:0D:B6:DD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BDCF5ECA2A5B231D08A28AE40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0d5b0e1-affb-3e60-a653-98f935a107c4.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 31898 IP address blocks: 168.107.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:ec:a2:a5:b2:31:d0:8a:28:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=3d530b89-3062-40b9-ac22-d6d0a9220edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:ed:5b:08:7a:65:05:f5:f1:dc:ac:a0:df: 76:c1:d3:4b:d5:82:97:40:23:76:63:2b:ad:18:4e: 54:3d:aa:c6:49:6e:f0:ca:fa:b3:76:61:95:b6:21: 8b:c8:c0:37:75:69:3e:b4:73:15:f4:42:7a:56:fd: 76:5f:97:7f:ab:15:45:9a:21:21:c2:fd:ba:f1:a7: 88:18:b5:c2:e2:47:df:ef:66:49:b0:01:b8:06:67: c5:2d:60:c2:3d:30:b4:56:2c:bd:f8:c8:92:8a:0e: 8d:de:62:57:86:ec:64:17:92:2a:bc:2a:f9:9c:ed: 34:33:07:8e:1b:eb:f6:77:9d:a2:a5:b8:dd:06:38: 0f:ae:80:fa:b2:77:f7:77:92:d8:fa:46:94:16:35: c0:e7:3d:3b:f3:4d:78:0d:18:4c:0c:3c:b2:47:69: 28:29:cb:b7:4e:8f:75:4d:99:c0:79:4f:e4:0c:65: 99:92:ab:32:b6:d8:8b:d1:ac:de:6a:79:a9:3a:2a: ef:2b:d6:74:dd:f4:ff:cc:6e:c6:8d:a6:bb:a8:7b: 59:3c:bd:08:1b:1f:f5:bc:21:63:c8:99:47:3f:eb: ee:c3:7e:5d:d4:40:6e:c9:2c:02:e8:0a:0d:66:f8: 4c:93:09:ab:fc:c1:ae:37:a0:5a:81:32:e4:ac:d6: 50:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2C:15:4C:A3:E3:19:C8:7E:98:24:8A:E1:27:FB:ED:62:0D:B6:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d0d5b0e1-affb-3e60-a653-98f935a107c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.107.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:57:6c:ba:ba:84:28:cb:a7:de:51:85:32:a8:bf:a9:63:88: 6d:90:2d:a5:dc:38:52:a7:d2:e4:4e:a4:3b:87:dd:3d:fe:ad: 22:d1:bd:bc:58:7d:f8:49:ce:f9:74:84:db:3d:e3:34:21:5c: 77:25:be:9e:48:6a:52:76:a7:a2:76:9c:21:3e:ca:1a:cd:c0: 01:3c:a3:cf:fa:85:ff:89:04:30:b0:54:9c:5f:c7:02:64:3c: 34:39:da:f2:d6:9e:b3:75:20:0f:23:80:09:9f:5d:32:f6:a2: b9:0d:33:7d:cb:ba:06:fa:22:58:44:91:c7:75:be:d7:b5:11: ee:67:59:4b:64:ec:cc:b6:bb:f3:40:2d:f4:59:9b:d7:9c:b4: 5c:74:40:e7:cd:08:63:fe:c6:15:59:a5:56:8f:08:2e:7a:c8: 10:69:2f:f7:1c:d1:38:c2:f4:78:60:91:17:da:09:bc:8f:0a: 2a:cd:cf:31:cb:e7:51:0c:ab:37:1c:63:83:27:41:59:7c:37: bb:a5:c3:04:57:d0:1e:95:5b:2f:b6:08:4b:95:ad:4e:c7:66: 82:25:e5:91:c2:42:45:09:af:1b:6e:a2:4f:1d:78:9e:ca:38: 5c:35:1d:16:b1:19:6d:42:14:40:1d:91:c2:2a:9a:cc:cc:6d: 5d:ff:a9:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9eyipbIx0IoorkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk M2Q1MzBiODktMzA2Mi00MGI5LWFjMjItZDZkMGE5MjIwZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8LtWwh6ZQX18dysoN92wdNL1YKXQCN2Yyut GE5UParGSW7wyvqzdmGVtiGLyMA3dWk+tHMV9EJ6Vv12X5d/qxVFmiEhwv268aeI GLXC4kff72ZJsAG4BmfFLWDCPTC0Viy9+MiSig6N3mJXhuxkF5IqvCr5nO00MweO G+v2d52ipbjdBjgProD6snf3d5LY+kaUFjXA5z078014DRhMDDyyR2koKcu3To91 TZnAeU/kDGWZkqsyttiL0azeanmpOirvK9Z03fT/zG7Gjaa7qHtZPL0IGx/1vCFj yJlHP+vuw35d1EBuySwC6AoNZvhMkwmr/MGuN6BagTLkrNZQXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYsFUyj4xnIfpgkiuEn++1iDbbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDBkNWIwZTEtYWZmYi0z ZTYwLWE2NTMtOThmOTM1YTEwN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGvvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1XbLq6hCjLp95RhTKov6ljiG2QLaXcOFKn0uROpDuH3T3+rSLRvbxY ffhJzvl0hNs94zQhXHclvp5IalJ2p6J2nCE+yhrNwAE8o8/6hf+JBDCwVJxfxwJk PDQ52vLWnrN1IA8jgAmfXTL2orkNM33Lugb6IlhEkcd1vte1Ee5nWUtk7My2u/NA LfRZm9ectFx0QOfNCGP+xhVZpVaPCC56yBBpL/cc0TjC9HhgkRfaCbyPCirNzzHL 51EMqzccY4MnQVl8N7ulwwRX0B6VWy+2CEuVrU7HZoIl5ZHCQkUJrxtuok8deJ7K OFw1HRaxGW1CFEAdkcIqmszMbV3/qXE= -----END CERTIFICATE-----Generated at Sat Dec 6 18:26:40 2025 by rpki-client