This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db9df24f-e518-3142-aced-9dbaf6b43f10.roa File: db9df24f-e518-3142-aced-9dbaf6b43f10.roa (raw, json) Hash identifier: N7di7w87L81xaI2wo4dpbXcXT3V78q15FnZt0feKDPc= Subject key identifier: 42:38:41:9E:2E:06:5C:2E:8B:DE:62:82:89:64:D3:2C:DB:29:18:CE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BD065B8BC9E248AC291F5CF00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db9df24f-e518-3142-aced-9dbaf6b43f10.roa Signing time: Mon 10 Nov 2025 14:00:38 +0000 ROA not before: Mon 10 Nov 2025 14:00:38 +0000 ROA not after: Sun 08 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 134.70.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d0:65:b8:bc:9e:24:8a:c2:91:f5:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 14:00:38 2025 GMT Not After : Feb 8 14:00:38 2026 GMT Subject: CN=4004e1b7-47e1-4a8c-8287-ec7611e0df8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:85:83:8e:83:d6:33:6c:43:8f:ac:9b:ae:66: 24:ea:be:ce:2d:05:7e:40:73:47:ec:19:d6:34:de: b9:fd:c6:08:58:de:cb:9e:4e:23:da:95:90:3d:15: 1e:a8:b5:d4:9b:66:c2:69:93:03:cb:43:35:02:28: fb:c5:50:a8:22:5b:3c:5d:de:52:ae:3d:5f:53:b7: 1d:79:ea:4b:a8:2c:50:5b:da:29:f2:3b:6f:fc:94: fb:28:52:d7:58:fd:38:c2:14:06:4d:dd:4e:49:da: db:e3:6e:1e:7c:b0:37:95:fd:67:72:58:6d:66:dd: 76:59:30:8c:d2:94:ea:cd:83:7b:21:ea:93:86:61: 98:a3:65:83:09:54:3d:76:92:87:a6:e5:32:0a:06: 0b:41:f1:8e:f4:3c:56:e2:d0:01:8d:88:c4:c3:63: 44:f4:08:81:2d:27:5d:79:ab:e4:46:94:45:d8:99: 6d:52:0a:a8:7a:67:f8:1c:1f:59:f6:b7:b2:17:50: 56:ee:a3:26:37:ab:e2:d0:22:b8:b8:4b:b2:ba:21: 54:a0:13:78:58:30:7e:c7:5e:b6:25:ce:58:1e:7c: 70:64:98:b0:ba:41:27:32:1e:fa:65:20:24:df:17: 75:12:45:90:13:34:54:b8:3c:90:ec:52:a8:ab:d5: 3d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:38:41:9E:2E:06:5C:2E:8B:DE:62:82:89:64:D3:2C:DB:29:18:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db9df24f-e518-3142-aced-9dbaf6b43f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 134.70.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:34:51:65:15:f1:c5:cf:65:79:93:8f:3a:4b:a8:c5:f3:71: 83:b8:c1:41:c9:6c:ec:5f:4d:a6:a6:8b:0c:b2:7a:a2:1d:38: 78:e8:f7:2c:c4:b7:e8:ea:d4:aa:b3:ae:4e:b2:49:77:be:ba: c8:3d:a3:0d:7b:b9:4f:9f:90:32:6f:88:1d:cf:86:77:1e:88: 10:64:cd:97:37:e1:2c:7f:b4:e3:ab:8b:71:49:53:0a:dd:54: 69:21:de:cd:5e:e9:13:18:b2:0f:83:d7:06:03:cf:d1:9a:a4: ca:9a:45:9c:5b:fe:73:0d:51:17:3e:55:0f:f8:5e:d0:4b:66: aa:93:ff:4f:e5:e0:77:44:80:1c:03:4f:6f:54:b9:4e:85:1e: 68:05:e2:95:7b:8e:ca:e4:e1:c6:9f:cb:bf:ea:fb:66:6e:15: c4:ef:35:c9:61:a5:15:2a:06:98:90:c3:46:7b:6b:4a:9f:ff: d3:5a:d0:50:32:16:30:02:c2:9a:bd:e3:cd:ec:89:62:ed:36: 81:60:fd:01:a9:41:33:b6:16:fd:4c:a5:be:82:c0:dd:4f:9a: fb:99:12:23:f8:63:7a:9a:4b:58:3d:f9:35:47:37:bb:c9:de: b7:a3:b7:95:84:b7:85:4f:7b:fe:25:80:05:23:71:39:b7:a8: b8:8a:5f:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvQZbi8niSKwpH1zwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDE0MDAzOFoXDTI2MDIwODE0MDAzOFowLzEtMCsGA1UEAxMk NDAwNGUxYjctNDdlMS00YThjLTgyODctZWM3NjExZTBkZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IWDjoPWM2xDj6ybrmYk6r7OLQV+QHNH7BnW NN65/cYIWN7Lnk4j2pWQPRUeqLXUm2bCaZMDy0M1Aij7xVCoIls8Xd5Srj1fU7cd eepLqCxQW9op8jtv/JT7KFLXWP04whQGTd1OSdrb424efLA3lf1nclhtZt12WTCM 0pTqzYN7IeqThmGYo2WDCVQ9dpKHpuUyCgYLQfGO9DxW4tABjYjEw2NE9AiBLSdd eavkRpRF2JltUgqoemf4HB9Z9reyF1BW7qMmN6vi0CK4uEuyuiFUoBN4WDB+x162 Jc5YHnxwZJiwukEnMh76ZSAk3xd1EkWQEzRUuDyQ7FKoq9U9bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI4QZ4uBlwui95igolk0yzbKRjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGI5ZGYyNGYtZTUxOC0z MTQyLWFjZWQtOWRiYWY2YjQzZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhkYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG00UWUV8cXPZXmTjzpLqMXzcYO4wUHJbOxfTaamiwyyeqIdOHjo9yzE t+jq1Kqzrk6ySXe+usg9ow17uU+fkDJviB3PhnceiBBkzZc34Sx/tOOri3FJUwrd VGkh3s1e6RMYsg+D1wYDz9GapMqaRZxb/nMNURc+VQ/4XtBLZqqT/0/l4HdEgBwD T29UuU6FHmgF4pV7jsrk4cafy7/q+2ZuFcTvNclhpRUqBpiQw0Z7a0qf/9Na0FAy FjACwpq9483siWLtNoFg/QGpQTO2Fv1Mpb6CwN1PmvuZEiP4Y3qaS1g9+TVHN7vJ 3rejt5WEt4VPe/4lgAUjcTm3qLiKX/c= -----END CERTIFICATE-----Generated at Sat Dec 6 17:33:14 2025 by rpki-client