This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdb0ebd4-7d72-37d1-86db-c0aa1af5b87b.roa File: fdb0ebd4-7d72-37d1-86db-c0aa1af5b87b.roa (raw, json) Hash identifier: LjcYU3xoXHjsBtn4k3Gm4ghZ8NcQbImPKgpb1WZbyY4= Subject key identifier: BF:BF:F6:FB:24:2B:8F:49:7F:9F:F3:26:E7:5B:4D:DD:88:34:89:D8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCF006286F9E8812A67DEF2F0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdb0ebd4-7d72-37d1-86db-c0aa1af5b87b.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 152.70.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:62:86:f9:e8:81:2a:67:de:f2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=2d2f2f3e-8833-4762-a909-f590eff7ff09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:f3:a1:14:64:4a:a5:3b:b9:58:d8:f2:4e: 22:81:62:b2:c4:97:d2:fa:07:ff:54:9f:a4:8b:b9: 3a:ec:1b:f1:ea:a0:9e:8e:0d:4e:50:09:73:e1:31: c2:ab:24:ef:88:eb:0b:ac:f9:66:04:ad:d7:ee:6b: 92:1c:f2:34:bf:5f:be:17:91:f5:f1:0c:33:60:2c: b7:6b:3e:8d:81:56:3d:a4:26:9d:bf:e7:90:ec:ea: 4d:b9:27:66:85:b2:bd:df:4e:be:77:76:78:0f:db: 45:c0:5b:01:61:f5:91:59:29:05:6d:bf:68:30:3d: db:b6:67:a1:03:bf:ab:eb:e7:77:04:4d:10:da:1f: f6:3a:55:66:0c:62:a3:47:12:8a:00:1c:14:d7:7f: 04:3a:43:aa:e9:ed:1b:fc:21:ca:b9:65:3b:23:b3: aa:17:e5:d5:71:08:2f:28:a5:51:e1:93:92:00:8b: 66:a2:08:58:2b:5d:fe:d7:9e:47:85:7d:15:64:67: d4:8d:1a:9f:c8:f5:f4:e5:fd:a0:50:40:57:1a:3f: 72:bc:35:8a:2b:da:ec:5d:15:87:f7:73:e1:62:0e: 65:e3:9c:11:ab:ee:22:d9:bf:51:f0:80:fb:ba:c1: ae:c5:c8:36:dc:2b:81:1b:db:2c:70:01:1a:f9:fd: b9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BF:F6:FB:24:2B:8F:49:7F:9F:F3:26:E7:5B:4D:DD:88:34:89:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdb0ebd4-7d72-37d1-86db-c0aa1af5b87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 152.70.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7f:c7:23:98:44:07:74:a3:73:b6:b3:3b:ea:3c:a5:cc:29: 07:27:fc:a1:d3:9c:f4:db:e3:4a:50:2a:72:3b:22:2e:49:4d: 5f:09:a7:61:16:36:1d:3d:e3:66:f2:82:1b:81:47:ab:3c:91: 27:e7:ab:50:89:08:f0:49:3f:11:34:3c:12:31:6f:a2:05:21: 83:0d:9c:fb:95:b8:3c:ff:9f:ca:20:5e:d8:d9:2d:e0:d4:be: 52:98:92:b8:6c:03:4c:04:bb:57:eb:62:8c:6a:ee:35:ff:dd: 70:03:35:e5:93:f1:5b:79:93:67:25:85:9d:28:82:14:90:da: 01:39:0b:f0:21:00:e1:4c:2b:eb:33:09:60:a7:ab:16:ca:83: 0a:21:fe:b3:d6:68:e3:9c:14:34:af:18:9d:ce:85:e1:87:2d: 29:44:29:10:50:57:2d:cc:da:83:6e:30:5e:e9:af:ec:d0:89: e1:b4:10:09:5a:0b:1e:0b:50:da:f1:7a:71:d9:7b:4e:1c:ee: 35:c7:0f:42:00:c3:f9:be:28:f5:ce:42:ad:18:d3:25:58:d1: e9:b7:0d:9e:84:0f:b7:78:30:66:87:69:07:a5:9e:d7:7c:05: cf:73:82:1b:28:e7:48:14:25:45:c4:f6:c4:48:9b:24:35:5b: 47:ea:f6:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAGKG+eiBKmfe8vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk MmQyZjJmM2UtODgzMy00NzYyLWE5MDktZjU5MGVmZjdmZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscPzoRRkSqU7uVjY8k4igWKyxJfS+gf/VJ+k i7k67Bvx6qCejg1OUAlz4THCqyTviOsLrPlmBK3X7muSHPI0v1++F5H18QwzYCy3 az6NgVY9pCadv+eQ7OpNuSdmhbK9306+d3Z4D9tFwFsBYfWRWSkFbb9oMD3btmeh A7+r6+d3BE0Q2h/2OlVmDGKjRxKKABwU138EOkOq6e0b/CHKuWU7I7OqF+XVcQgv KKVR4ZOSAItmoghYK13+155HhX0VZGfUjRqfyPX05f2gUEBXGj9yvDWKK9rsXRWH 93PhYg5l45wRq+4i2b9R8ID7usGuxcg23CuBG9sscAEa+f25QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+/9vskK49Jf5/zJudbTd2INInYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmRiMGViZDQtN2Q3Mi0z N2QxLTg2ZGItYzBhYTFhZjViODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5/xyOYRAd0o3O2szvqPKXMKQcn/KHTnPTb40pQKnI7Ii5JTV8Jp2EW Nh0942byghuBR6s8kSfnq1CJCPBJPxE0PBIxb6IFIYMNnPuVuDz/n8ogXtjZLeDU vlKYkrhsA0wEu1frYoxq7jX/3XADNeWT8Vt5k2clhZ0oghSQ2gE5C/AhAOFMK+sz CWCnqxbKgwoh/rPWaOOcFDSvGJ3OheGHLSlEKRBQVy3M2oNuMF7pr+zQieG0EAla Cx4LUNrxenHZe04c7jXHD0IAw/m+KPXOQq0Y0yVY0em3DZ6ED7d4MGaHaQelntd8 Bc9zghso50gUJUXE9sRImyQ1W0fq9vM= -----END CERTIFICATE-----Generated at Sun Dec 7 02:49:38 2025 by rpki-client