This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/e9118524-ea78-3d58-a7f1-bb0892a23904.roa File: e9118524-ea78-3d58-a7f1-bb0892a23904.roa (raw, json) Hash identifier: S1LxN61RIUxLUVdBElNLj5q4Kof+T+dZy6KMRTmwEVw= Subject key identifier: 31:1E:3A:70:E1:8D:97:10:2A:03:C6:57:C0:E6:EA:1D:F5:03:17:31 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584BF080759B5D285EEF66E2A650 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/e9118524-ea78-3d58-a7f1-bb0892a23904.roa Signing time: Sat 22 Nov 2025 02:00:30 +0000 ROA not before: Sat 22 Nov 2025 02:00:30 +0000 ROA not after: Fri 20 Feb 2026 02:00:30 +0000 asID: 21947 IP address blocks: 69.165.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f0:80:75:9b:5d:28:5e:ef:66:e2:a6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Nov 22 02:00:30 2025 GMT Not After : Feb 20 02:00:30 2026 GMT Subject: CN=20b2ae97-cf66-4141-9543-86cafb91f813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6f:45:ee:f2:21:64:0f:9a:57:62:54:7f:5a: 5f:ba:98:8a:23:e2:0d:90:b7:39:bf:d5:f6:8d:33: 70:2e:b6:67:14:93:93:f8:a9:e0:69:31:fd:37:53: 40:36:05:ac:87:70:10:38:b9:11:8f:a9:cf:44:aa: f5:77:eb:39:a9:47:ea:a2:e5:d7:de:e4:77:69:ee: d7:d1:d8:41:eb:71:5a:59:8c:ed:79:2e:ef:91:47: f8:10:9e:58:67:a9:3c:c7:d5:5d:06:9b:33:f9:19: bd:42:86:72:64:83:21:44:bd:cc:ca:a4:f9:4f:3c: 3b:7c:3e:81:b2:2b:b0:f9:13:6e:c9:93:4a:7f:59: f6:53:0d:06:76:0d:ab:a5:f2:32:76:68:44:05:3f: e4:52:ed:12:91:b5:6e:28:a5:19:bf:04:b1:4e:0b: 6b:af:79:ed:59:c5:a5:06:40:7c:03:e5:2c:80:5d: da:21:97:23:da:1d:4c:72:b9:ae:d2:e7:55:af:1e: 4a:ac:7d:3f:20:57:1a:f1:20:09:f5:e9:95:17:fb: 4b:50:63:a6:18:09:87:f8:e3:db:d3:94:35:fe:2d: 7a:c4:d5:99:f9:a7:81:c2:c6:7a:44:18:a3:e1:56: 76:77:48:a7:f6:84:04:37:c1:1f:5e:8a:1e:7e:61: 51:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1E:3A:70:E1:8D:97:10:2A:03:C6:57:C0:E6:EA:1D:F5:03:17:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/e9118524-ea78-3d58-a7f1-bb0892a23904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 69.165.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:73:8b:ae:aa:33:7f:9f:0d:e2:c0:5f:c7:14:a7:dc:be:2e: 72:9d:d5:bc:7d:4a:d6:b6:d4:d7:dd:55:96:32:5c:81:99:e1: ae:f0:03:b8:a8:4f:d2:5b:00:14:73:57:e7:a1:16:99:0d:f2: a5:e3:42:d3:41:0d:fe:b5:1d:d0:dc:83:93:97:3f:cb:db:3f: c7:51:d4:48:7b:3e:d3:b3:70:6f:5c:de:99:c0:b4:85:29:bf: 40:ce:e9:45:62:2d:2e:1e:43:7a:50:ec:80:81:7f:04:3a:c7: e7:b7:be:48:5f:86:7b:50:3f:c1:a9:3f:61:4e:6c:75:7b:1e: 21:68:a7:7e:1c:ff:91:11:4b:fd:63:e7:ef:44:92:4f:49:ec: 41:1a:46:b5:70:ad:0b:ee:1a:7d:2c:78:7d:a3:ed:09:b8:00: cb:50:6a:74:85:bf:54:14:16:b8:25:62:04:8a:bb:4f:d7:16: 62:65:ae:7a:1d:bb:98:1a:de:16:1f:8f:c2:25:64:a7:b3:4f: 76:a7:3a:56:e5:fd:1a:0d:66:ba:e6:c4:1b:f8:ab:a7:a3:70: 57:d7:a6:c1:d4:3a:99:46:c0:b2:31:b9:f8:72:2e:59:6d:33: 22:6c:59:62:d9:08:59:14:0d:f5:64:61:27:b3:4d:64:19:52: 9b:b4:ec:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvwgHWbXShe72biplAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MTEyMjAyMDAzMFoXDTI2MDIyMDAyMDAzMFowLzEtMCsGA1UEAxMk MjBiMmFlOTctY2Y2Ni00MTQxLTk1NDMtODZjYWZiOTFmODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm9F7vIhZA+aV2JUf1pfupiKI+INkLc5v9X2 jTNwLrZnFJOT+KngaTH9N1NANgWsh3AQOLkRj6nPRKr1d+s5qUfqouXX3uR3ae7X 0dhB63FaWYzteS7vkUf4EJ5YZ6k8x9VdBpsz+Rm9QoZyZIMhRL3MyqT5Tzw7fD6B siuw+RNuyZNKf1n2Uw0Gdg2rpfIydmhEBT/kUu0SkbVuKKUZvwSxTgtrr3ntWcWl BkB8A+UsgF3aIZcj2h1Mcrmu0udVrx5KrH0/IFca8SAJ9emVF/tLUGOmGAmH+OPb 05Q1/i16xNWZ+aeBwsZ6RBij4VZ2d0in9oQEN8EfXooefmFRVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEeOnDhjZcQKgPGV8Dm6h31AxcxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvZTkxMTg1MjQtZWE3OC0z ZDU4LWE3ZjEtYmIwODkyYTIzOTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERaVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZzi66qM3+fDeLAX8cUp9y+LnKd1bx9Sta21NfdVZYyXIGZ4a7wA7io T9JbABRzV+ehFpkN8qXjQtNBDf61HdDcg5OXP8vbP8dR1Eh7PtOzcG9c3pnAtIUp v0DO6UViLS4eQ3pQ7ICBfwQ6x+e3vkhfhntQP8GpP2FObHV7HiFop34c/5ERS/1j 5+9Ekk9J7EEaRrVwrQvuGn0seH2j7Qm4AMtQanSFv1QUFrglYgSKu0/XFmJlrnod u5ga3hYfj8IlZKezT3anOlbl/RoNZrrmxBv4q6ejcFfXpsHUOplGwLIxufhyLllt MyJsWWLZCFkUDfVkYSezTWQZUpu07KU= -----END CERTIFICATE-----Generated at Tue Nov 25 09:57:53 2025 by rpki-client