This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d9dc5b5e-f96d-3f8d-a048-247f0f269121.roa File: d9dc5b5e-f96d-3f8d-a048-247f0f269121.roa (raw, json) Hash identifier: PGZNru9WY7fJvl2yl21wll29EZihKAMuNgFbVBUY9jU= Subject key identifier: BB:8F:24:86:0E:78:11:7A:1D:C6:53:F1:7C:FC:A0:F8:2E:A6:70:EC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C06D619BD155EE4BCE2869880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d9dc5b5e-f96d-3f8d-a048-247f0f269121.roa Signing time: Sun 30 Nov 2025 02:00:31 +0000 ROA not before: Sun 30 Nov 2025 02:00:31 +0000 ROA not after: Sat 28 Feb 2026 02:00:31 +0000 asID: 54253 IP address blocks: 131.186.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:06:d6:19:bd:15:5e:e4:bc:e2:86:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 30 02:00:31 2025 GMT Not After : Feb 28 02:00:31 2026 GMT Subject: CN=2fb8965c-172e-4676-aeef-dc693a8c1ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:91:c4:4b:58:f5:44:90:32:ed:71:d4:81:74: 54:e3:d2:1f:07:94:9e:8e:a9:ac:69:bd:41:03:08: 56:78:fb:ea:ae:ba:e3:cc:49:ef:11:df:2a:8d:11: 4f:cb:85:db:c4:f5:53:8a:08:00:4b:a4:1b:62:36: c8:7f:fe:62:da:fd:40:58:ce:c0:12:32:16:28:82: 95:3f:40:a3:c6:2c:03:d3:8f:1a:91:cf:2d:f8:65: 89:34:c8:d8:83:a6:e7:73:6a:41:ac:47:42:ba:e2: ab:af:78:57:af:30:bd:95:0d:20:98:25:80:45:b7: e5:f4:3b:08:5e:64:1e:85:fd:6f:4d:65:21:8a:0c: ae:05:28:a7:67:b5:8f:4c:aa:b6:ac:77:84:f8:6b: ad:25:4f:3f:5b:b3:df:0f:89:ef:f9:a4:b0:b4:c0: 9f:38:88:ac:00:10:d6:90:ae:8a:6b:84:c4:b7:ea: 16:1c:ab:df:1c:b6:68:9e:15:4c:c6:93:f1:0a:88: c2:8d:d2:7d:8c:ea:9e:e1:96:f8:b5:82:74:fc:a5: 87:39:8e:30:17:b9:80:b0:38:65:8f:e4:59:87:ca: 17:25:62:39:33:5f:6e:02:93:3a:c9:bf:e1:38:a6: e4:b6:b6:22:13:a8:63:6a:03:25:e2:da:ad:91:db: b0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8F:24:86:0E:78:11:7A:1D:C6:53:F1:7C:FC:A0:F8:2E:A6:70:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d9dc5b5e-f96d-3f8d-a048-247f0f269121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 131.186.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:64:a3:a4:6e:6e:64:98:0a:c0:d0:4c:b0:ae:7d:16:be:79: b6:2d:9b:e1:b3:9e:b2:7d:84:5c:51:0f:af:1d:35:0b:bc:c1: 91:f6:8e:4c:e5:fc:d7:45:14:23:cf:05:2f:ea:8a:88:1b:a2: cc:a3:8b:ee:dc:f2:80:60:4c:42:ae:2a:04:27:bf:cc:4f:f9: c7:35:31:ab:36:3f:69:a5:5f:5d:c4:27:2c:1b:a6:3d:c8:b4: 19:f3:58:88:b0:95:8d:2e:96:3f:79:5d:e0:39:90:f3:c8:3a: 38:1e:91:cf:93:f5:38:7b:fc:bb:00:a7:b0:70:f2:69:2f:aa: 8f:8f:e8:51:53:b1:f5:b6:13:20:af:25:f6:fb:b1:ea:71:e4: 56:a1:31:fa:6c:48:be:38:4a:65:0c:20:db:9a:a0:3d:f2:79: d0:02:09:53:66:67:48:cd:72:0e:81:ef:6e:3c:91:9b:8b:cb: f3:19:26:2f:b2:99:e3:5f:d0:6e:3a:90:80:e0:f0:69:37:04: e6:87:56:76:ef:31:53:49:0a:70:29:a9:64:ae:cc:c9:0f:24: 45:e3:ce:de:76:5b:e0:70:b5:a4:ad:9b:52:fc:9c:87:fd:c1: 1d:d7:14:1a:60:66:3d:c6:01:a1:5f:9f:a9:81:a1:3c:28:bb: 8f:ff:c7:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwG1hm9FV7kvOKGmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEzMDAyMDAzMVoXDTI2MDIyODAyMDAzMVowLzEtMCsGA1UEAxMk MmZiODk2NWMtMTcyZS00Njc2LWFlZWYtZGM2OTNhOGMxY2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJHES1j1RJAy7XHUgXRU49IfB5Sejqmsab1B AwhWePvqrrrjzEnvEd8qjRFPy4XbxPVTiggAS6QbYjbIf/5i2v1AWM7AEjIWKIKV P0CjxiwD048akc8t+GWJNMjYg6bnc2pBrEdCuuKrr3hXrzC9lQ0gmCWARbfl9DsI XmQehf1vTWUhigyuBSinZ7WPTKq2rHeE+GutJU8/W7PfD4nv+aSwtMCfOIisABDW kK6Ka4TEt+oWHKvfHLZonhVMxpPxCojCjdJ9jOqe4Zb4tYJ0/KWHOY4wF7mAsDhl j+RZh8oXJWI5M19uApM6yb/hOKbktrYiE6hjagMl4tqtkduwdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuPJIYOeBF6HcZT8Xz8oPgupnDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDlkYzViNWUtZjk2ZC0z ZjhkLWEwNDgtMjQ3ZjBmMjY5MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg7psMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZko6RubmSYCsDQTLCufRa+ebYtm+GznrJ9hFxRD68dNQu8wZH2jkzl /NdFFCPPBS/qiogbosyji+7c8oBgTEKuKgQnv8xP+cc1Mas2P2mlX13EJywbpj3I tBnzWIiwlY0ulj95XeA5kPPIOjgekc+T9Th7/LsAp7Bw8mkvqo+P6FFTsfW2EyCv Jfb7sepx5FahMfpsSL44SmUMINuaoD3yedACCVNmZ0jNcg6B7248kZuLy/MZJi+y meNf0G46kIDg8Gk3BOaHVnbvMVNJCnApqWSuzMkPJEXjzt52W+BwtaStm1L8nIf9 wR3XFBpgZj3GAaFfn6mBoTwou4//xxc= -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:00 2025 by rpki-client