This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa File: e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa (raw, json) Hash identifier: 5OHI+Xnu658IbztCwtECQfkapfMGhn4YIZXB+EyGf8k= Subject key identifier: 5A:1B:AB:FD:02:29:F7:C8:FD:05:91:21:48:D8:1D:29:FC:B2:75:4E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BDCF5EA49772A14A4EA3CFB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 31898 IP address blocks: 157.137.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:ea:49:77:2a:14:a4:ea:3c:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=bdd2efea-ec34-46c2-98c4-1d21ab5cd729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2a:58:e3:6d:43:f5:11:3b:a1:e7:da:39:0c: 03:b3:84:b7:02:e0:18:14:63:b6:08:56:f2:30:4a: c5:49:af:32:8e:6d:37:54:a4:6b:5c:44:7e:51:65: cf:ec:a2:e6:69:c1:bf:11:8a:77:af:a3:be:7a:9d: 5a:0c:7b:3c:ed:66:e5:61:bd:25:01:52:d2:87:3f: fe:51:76:de:79:94:89:b1:1f:a8:cb:ad:4b:e5:de: 39:cd:e5:07:8f:3b:b2:09:d5:11:31:cc:61:b4:4d: e9:a3:67:08:26:d9:e1:35:f0:60:c0:30:87:d7:0b: 21:53:e1:7c:9f:62:6b:01:be:46:56:04:1d:3d:ac: 10:6b:cb:58:95:ee:06:4a:85:65:4a:44:81:2a:4b: e0:0b:1b:91:ba:fe:ad:2e:61:89:96:70:89:12:89: e3:28:3c:4c:b9:cc:c5:6c:52:3d:a0:98:f9:bf:7b: 27:4a:ec:7b:d2:99:14:f4:69:83:59:eb:b0:ef:49: 1d:b3:9e:fc:f2:f8:5e:26:85:ad:7c:f3:e2:b4:a7: 16:b8:e1:12:5c:14:d7:96:a5:20:37:68:1e:3d:69: 83:8e:17:9b:7d:3f:d3:69:3c:45:6e:a9:41:cb:d1: 72:f6:b7:95:bf:92:e0:0f:33:a6:0d:1d:4f:2a:91: 70:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1B:AB:FD:02:29:F7:C8:FD:05:91:21:48:D8:1D:29:FC:B2:75:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9b8c2b2-24dc-3f31-99d5-662fa1b7246c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:fc:b4:6b:79:fa:88:85:9a:c6:fe:aa:d2:e2:ba:2d:af:f8: bd:bd:4e:61:81:47:d9:ac:08:da:ff:f6:34:9a:71:e6:a4:12: 56:dd:ee:48:8a:ce:54:61:b0:49:76:68:0b:6f:11:d8:23:13: 6a:cc:5f:de:94:83:c2:76:d6:00:b1:bd:92:8a:84:10:ea:0c: 6f:31:55:07:2f:95:c3:e8:f7:f9:2c:13:aa:72:e6:42:44:85: c1:a4:a0:0c:d3:f7:29:84:ea:40:6d:51:e0:7f:f5:f6:b9:4f: c2:2d:29:21:fc:b2:a1:17:e7:e2:45:2e:68:0d:a8:b8:43:36: 75:90:8a:c9:40:35:cc:1d:46:a9:df:9a:a5:2f:f4:a5:d2:30: d2:2b:8d:d9:a2:b3:ed:96:ee:d3:c8:22:0c:8f:85:6d:4e:97: 59:a6:c2:5c:68:89:8a:26:b5:9a:7a:43:70:19:ea:93:72:5f: f5:bf:37:9c:12:7e:21:ff:84:7e:9c:3d:80:c0:1c:1f:79:d4: c1:b0:8f:80:1b:d1:bd:61:8f:fa:82:61:f9:11:bd:b0:68:a0: 49:65:e8:12:cc:6b:a2:c7:06:07:60:33:b6:71:7c:9a:14:ad: 57:63:4c:95:47:28:3c:4d:55:8b:2c:b0:d5:82:30:9d:10:73: 5a:00:50:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9epJdyoUpOo8+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk YmRkMmVmZWEtZWMzNC00NmMyLTk4YzQtMWQyMWFiNWNkNzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmipY421D9RE7oefaOQwDs4S3AuAYFGO2CFby MErFSa8yjm03VKRrXER+UWXP7KLmacG/EYp3r6O+ep1aDHs87WblYb0lAVLShz/+ UXbeeZSJsR+oy61L5d45zeUHjzuyCdURMcxhtE3po2cIJtnhNfBgwDCH1wshU+F8 n2JrAb5GVgQdPawQa8tYle4GSoVlSkSBKkvgCxuRuv6tLmGJlnCJEonjKDxMuczF bFI9oJj5v3snSux70pkU9GmDWeuw70kds5788vheJoWtfPPitKcWuOESXBTXlqUg N2gePWmDjhebfT/TaTxFbqlBy9Fy9reVv5LgDzOmDR1PKpFwowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFobq/0CKffI/QWRIUjYHSn8snVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTliOGMyYjItMjRkYy0z ZjMxLTk5ZDUtNjYyZmExYjcyNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYn6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHn8tGt5+oiFmsb+qtLiui2v+L29TmGBR9msCNr/9jSaceakElbd7kiK zlRhsEl2aAtvEdgjE2rMX96Ug8J21gCxvZKKhBDqDG8xVQcvlcPo9/ksE6py5kJE hcGkoAzT9ymE6kBtUeB/9fa5T8ItKSH8sqEX5+JFLmgNqLhDNnWQislANcwdRqnf mqUv9KXSMNIrjdmis+2W7tPIIgyPhW1Ol1mmwlxoiYomtZp6Q3AZ6pNyX/W/N5wS fiH/hH6cPYDAHB951MGwj4Ab0b1hj/qCYfkRvbBooEll6BLMa6LHBgdgM7ZxfJoU rVdjTJVHKDxNVYsssNWCMJ0Qc1oAUFg= -----END CERTIFICATE-----Generated at Sat Dec 6 18:38:13 2025 by rpki-client