This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/032db2cf-b879-3203-867a-fedba2c1f577.roa File: 032db2cf-b879-3203-867a-fedba2c1f577.roa (raw, json) Hash identifier: tTldVLpPuzhXss+9Msi5dnssgcuRzOi6MRWtJEtoMzo= Subject key identifier: 9A:0F:72:03:A5:48:03:A9:14:C0:9D:1B:95:8C:D7:8A:17:84:49:E8 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584C5F73204954116698691A2160 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/032db2cf-b879-3203-867a-fedba2c1f577.roa Signing time: Wed 31 Dec 2025 19:48:24 +0000 ROA not before: Wed 31 Dec 2025 19:48:24 +0000 ROA not after: Tue 31 Mar 2026 18:48:24 +0000 asID: 62943 IP address blocks: 170.52.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5f:73:20:49:54:11:66:98:69:1a:21:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Dec 31 19:48:24 2025 GMT Not After : Mar 31 18:48:24 2026 GMT Subject: CN=4fb9aa19-1c2d-4fbf-b296-b9f331942fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4b:e1:d1:17:e3:b3:c2:36:f2:a9:c6:c7:b6: 45:f7:77:63:ca:4f:0a:41:87:dd:a4:1c:bc:63:e3: 5d:6a:ed:33:19:bc:0a:a3:b1:de:83:2d:bc:a2:0d: aa:8f:51:07:15:ff:11:2e:ed:a0:7e:58:ba:26:8c: 89:6b:52:d7:4d:38:0a:8e:3a:77:c9:28:ea:5d:af: 91:2f:b0:b2:8e:89:2e:d2:74:43:0f:37:0c:4b:3c: f0:6d:2c:d5:98:0a:a6:38:8b:1c:63:f8:3f:7e:4b: 84:a8:f8:54:0c:de:f6:7a:c3:ac:4c:5a:94:88:86: 6d:48:d7:fa:22:02:f2:fd:42:ff:cc:75:0a:ea:cb: 4b:aa:9f:52:7f:c8:c8:c7:8d:85:d0:0f:04:f8:2e: f8:de:d5:79:17:0f:fc:12:30:3a:76:79:b8:35:bc: 69:8c:e0:ec:76:72:26:56:13:b2:89:e7:46:6b:8a: eb:e5:85:93:35:69:7d:32:8b:4f:61:bb:f6:45:54: f4:b2:05:25:4f:35:c0:df:91:4a:4f:b4:e6:bc:f7: 42:59:cc:37:49:0f:c7:c3:22:17:b4:f5:6c:c1:ce: 89:4b:21:09:66:6b:69:61:26:5c:5c:92:5e:07:cc: 99:66:6b:fc:ad:8f:a0:08:9f:e7:ad:8e:65:35:a3: 82:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0F:72:03:A5:48:03:A9:14:C0:9D:1B:95:8C:D7:8A:17:84:49:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/032db2cf-b879-3203-867a-fedba2c1f577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 170.52.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:16:6f:30:d4:f9:13:8a:d0:00:22:ff:3d:ec:84:7c:9a:58: 15:50:90:6f:71:b1:75:7b:36:4f:3b:7d:54:76:b0:79:82:41: 47:32:7a:08:22:a6:c0:0e:4c:c5:2a:1e:98:92:6f:3a:93:8d: 34:2b:a2:be:eb:74:0f:21:7e:44:d6:2c:89:39:a4:83:0e:17: 7a:c6:85:e2:7b:a9:43:14:7e:2f:1b:fb:f3:ac:20:a6:92:b7: 84:ca:a8:7a:66:1b:06:e4:27:56:f3:fd:6d:5d:69:86:1b:f0: f1:7e:c0:08:02:44:db:51:09:c6:01:ee:d9:2f:85:23:50:9f: 3c:7d:e9:30:2e:00:e3:e2:e6:de:08:8f:9e:29:e1:61:b9:ea: 48:3d:6d:f2:50:92:69:3d:ef:fd:ea:94:c6:57:3d:35:50:be: d5:ba:9a:8f:f7:bb:77:24:a9:91:06:24:6b:e4:c2:6c:16:7d: 9a:06:3e:04:84:c3:44:05:3c:5b:98:50:b9:17:86:93:2b:8a: 51:93:91:c1:f7:fd:b1:13:02:ec:1a:f8:6b:fc:b2:f2:4d:08: bd:40:0c:05:24:bc:5f:2a:f3:ca:02:6c:78:4d:61:d3:57:d1: 18:7f:95:0b:cb:c4:a1:f1:bd:69:11:fa:c9:ff:22:8a:bc:a5: a4:e9:68:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExfcyBJVBFmmGkaIWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI1MTIzMTE5NDgyNFoXDTI2MDMzMTE4NDgyNFowLzEtMCsGA1UEAxMk NGZiOWFhMTktMWMyZC00ZmJmLWIyOTYtYjlmMzMxOTQyZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkvh0Rfjs8I28qnGx7ZF93djyk8KQYfdpBy8 Y+Ndau0zGbwKo7Hegy28og2qj1EHFf8RLu2gfli6JoyJa1LXTTgKjjp3ySjqXa+R L7Cyjoku0nRDDzcMSzzwbSzVmAqmOIscY/g/fkuEqPhUDN72esOsTFqUiIZtSNf6 IgLy/UL/zHUK6stLqp9Sf8jIx42F0A8E+C743tV5Fw/8EjA6dnm4NbxpjODsdnIm VhOyiedGa4rr5YWTNWl9MotPYbv2RVT0sgUlTzXA35FKT7TmvPdCWcw3SQ/HwyIX tPVswc6JSyEJZmtpYSZcXJJeB8yZZmv8rY+gCJ/nrY5lNaOCcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoPcgOlSAOpFMCdG5WM14oXhEnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMDMyZGIyY2YtYjg3OS0z MjAzLTg2N2EtZmVkYmEyYzFmNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqjQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMWbzDU+ROK0AAi/z3shHyaWBVQkG9xsXV7Nk87fVR2sHmCQUcyeggi psAOTMUqHpiSbzqTjTQror7rdA8hfkTWLIk5pIMOF3rGheJ7qUMUfi8b+/OsIKaS t4TKqHpmGwbkJ1bz/W1daYYb8PF+wAgCRNtRCcYB7tkvhSNQnzx96TAuAOPi5t4I j54p4WG56kg9bfJQkmk97/3qlMZXPTVQvtW6mo/3u3ckqZEGJGvkwmwWfZoGPgSE w0QFPFuYULkXhpMrilGTkcH3/bETAuwa+Gv8svJNCL1ADAUkvF8q88oCbHhNYdNX 0Rh/lQvLxKHxvWkR+sn/Ioq8paTpaBo= -----END CERTIFICATE-----Generated at Sun Jan 11 03:56:59 2026 by rpki-client