This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2dce6000-c112-3dbd-a403-c351462057df.roa File: 2dce6000-c112-3dbd-a403-c351462057df.roa (raw, json) Hash identifier: 3TGfqJsCoRyE1b5+FPjBDqV7JX8IZIp1Zq0OpppvjCU= Subject key identifier: A7:AA:59:20:E7:C1:3F:A5:50:25:48:1D:70:E2:91:13:F8:B5:A6:B2 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584C550128B10A7D900116BAB580 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2dce6000-c112-3dbd-a403-c351462057df.roa Signing time: Sun 28 Dec 2025 02:00:30 +0000 ROA not before: Sun 28 Dec 2025 02:00:30 +0000 ROA not after: Sat 28 Mar 2026 01:00:30 +0000 asID: 14618 IP address blocks: 170.85.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:55:01:28:b1:0a:7d:90:01:16:ba:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Dec 28 02:00:30 2025 GMT Not After : Mar 28 01:00:30 2026 GMT Subject: CN=e326e643-3e05-4358-8520-082b257bcee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:28:ff:b1:aa:bf:af:f9:a7:fa:2f:0b:51:0e: fa:40:eb:f9:3f:34:9f:63:c9:6b:64:8e:fd:63:e7: 87:4e:80:1a:9e:28:7c:d1:2b:ea:4e:27:02:4e:ca: 16:66:42:b1:73:c0:29:4a:d9:19:6d:e7:be:42:61: 7d:bd:7e:b5:e4:af:ab:10:27:70:34:04:e7:dc:c6: 87:58:24:f2:ae:66:8b:66:45:8d:70:21:44:e3:64: e5:d8:79:9e:2f:f5:b4:10:f1:9f:a2:f9:cd:6a:57: 31:7f:77:7f:66:da:c3:ae:15:b2:9f:1f:f1:08:cc: 01:aa:3b:4d:33:eb:32:9a:f7:90:cf:3a:11:10:00: 97:cd:45:88:ea:26:ae:39:39:2a:09:a2:d2:a8:fd: bb:96:57:6c:5f:be:57:02:a7:b2:76:50:be:9e:cf: 1a:78:e8:c6:2c:20:68:00:fb:2f:0c:79:dc:c4:88: 6d:73:3d:f7:b5:1a:48:b3:b8:8e:32:da:91:67:c1: 09:88:29:e9:2d:26:f5:44:25:2b:78:e1:73:3c:14: 5d:1d:1a:c6:74:86:15:ad:bd:45:2c:c4:c3:50:eb: 81:9b:f5:04:5c:7a:94:50:c5:80:ec:c2:7f:c5:df: 75:68:58:2f:37:63:31:7d:e7:f2:03:9b:22:b6:05: 25:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AA:59:20:E7:C1:3F:A5:50:25:48:1D:70:E2:91:13:F8:B5:A6:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2dce6000-c112-3dbd-a403-c351462057df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a1:2a:29:55:5c:96:b7:4f:6d:8d:13:e7:b2:1b:aa:2a:bc: cb:6f:e5:0a:cd:e0:65:71:bf:bb:6a:65:0b:2f:ff:c5:9f:78: c9:30:5b:36:23:c0:b8:3f:83:a3:2e:87:83:a1:37:17:f6:d0: 92:04:0e:4d:12:6a:e1:f1:ae:0c:25:01:5f:cb:06:a8:20:32: 2e:ac:a5:bd:e4:9d:62:f7:7d:66:37:95:eb:ee:85:88:0d:63: cf:ed:d6:d0:8b:92:7c:c1:da:26:ec:56:e9:f2:84:19:b6:b8: 4f:b4:c0:fb:c8:12:ca:3a:39:62:f3:c0:e3:71:68:c0:b3:03: f3:fc:45:ad:92:cc:d4:df:23:a6:da:7a:f8:2f:b1:3c:c6:96: 66:9d:8d:8b:df:b4:0f:6f:64:f2:bc:aa:aa:a9:d0:7d:cd:45: d5:1b:db:a0:90:1b:ab:f2:c5:7f:d7:1c:e3:3d:66:15:48:29: 27:19:b2:f0:df:f0:80:52:7c:98:42:cf:b2:8b:01:70:49:c7: 25:5d:c1:2b:c4:23:49:38:23:05:be:bc:7b:c8:60:fc:a1:4c: c6:d7:f4:a3:6f:2f:a7:bd:8b:c4:9f:92:1a:bd:af:57:f3:3e: 5f:f9:46:17:77:cd:fd:fb:fb:97:d8:82:70:a5:6e:c3:e7:31: 5c:f8:33:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExVASixCn2QARa6tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTIyODAyMDAzMFoXDTI2MDMyODAxMDAzMFowLzEtMCsGA1UEAxMk ZTMyNmU2NDMtM2UwNS00MzU4LTg1MjAtMDgyYjI1N2JjZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCj/saq/r/mn+i8LUQ76QOv5PzSfY8lrZI79 Y+eHToAanih80SvqTicCTsoWZkKxc8ApStkZbee+QmF9vX615K+rECdwNATn3MaH WCTyrmaLZkWNcCFE42Tl2HmeL/W0EPGfovnNalcxf3d/ZtrDrhWynx/xCMwBqjtN M+symveQzzoREACXzUWI6iauOTkqCaLSqP27lldsX75XAqeydlC+ns8aeOjGLCBo APsvDHncxIhtcz33tRpIs7iOMtqRZ8EJiCnpLSb1RCUreOFzPBRdHRrGdIYVrb1F LMTDUOuBm/UEXHqUUMWA7MJ/xd91aFgvN2MxfefyA5sitgUl5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeqWSDnwT+lUCVIHXDikRP4taayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmRjZTYwMDAtYzExMi0z ZGJkLWE0MDMtYzM1MTQ2MjA1N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADShKilVXJa3T22NE+eyG6oqvMtv5QrN4GVxv7tqZQsv/8WfeMkwWzYj wLg/g6Muh4OhNxf20JIEDk0SauHxrgwlAV/LBqggMi6spb3knWL3fWY3levuhYgN Y8/t1tCLknzB2ibsVunyhBm2uE+0wPvIEso6OWLzwONxaMCzA/P8Ra2SzNTfI6ba evgvsTzGlmadjYvftA9vZPK8qqqp0H3NRdUb26CQG6vyxX/XHOM9ZhVIKScZsvDf 8IBSfJhCz7KLAXBJxyVdwSvEI0k4IwW+vHvIYPyhTMbX9KNvL6e9i8Sfkhq9r1fz Pl/5Rhd3zf37+5fYgnClbsPnMVz4My4= -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:13 2026 by rpki-client