This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa File: 929941d8-be63-3be5-89d7-62a997289367.roa (raw, json) Hash identifier: BSnWt5jCUnTl74nenAfRmYIseKfb7BKnvaPmdX3AAI0= Subject key identifier: 74:7D:EC:F7:92:B9:9D:F5:64:71:B1:A5:2F:03:54:FB:33:98:B6:5A Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584C50D14575F265A7F219F13500 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 14618 IP address blocks: 208.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:45:75:f2:65:a7:f2:19:f1:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=b7dc2dac-bcfe-462b-b9b7-8dddcc480ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:72:9c:80:9d:a1:62:39:42:f1:d2:ac:3f: 59:94:b1:f3:68:50:78:ce:bb:9d:1c:2b:57:37:e3: 4f:91:eb:d4:35:b6:09:e8:4c:e7:7c:46:09:7e:e6: bc:9b:e4:7b:ba:22:fe:e8:78:eb:dd:2c:ee:c8:9b: 53:a3:34:2a:8f:51:0d:85:d4:9b:6a:1c:ba:ea:38: 51:36:aa:62:3b:e1:fe:bc:10:c2:42:fd:56:e3:ee: 6e:82:37:ec:b0:20:e3:b2:9b:be:4e:69:dd:11:ff: 6e:f9:7f:c5:7e:fe:98:9b:d3:b0:fd:28:88:98:d1: 6b:6e:4f:99:46:9b:3e:f3:e1:97:25:cc:8d:d3:8b: e8:29:73:2f:2c:1c:aa:df:a3:d3:be:e7:17:53:a9: 95:56:79:2c:97:5a:c6:bf:18:dc:e5:e9:bb:cf:ac: 8c:62:24:c3:18:7b:eb:a8:da:af:12:84:30:98:91: 23:3f:93:5e:e4:ab:cb:fc:46:46:1a:82:f3:2a:ce: a6:d0:2d:8f:87:74:be:d0:7b:5b:fa:94:4f:15:5c: 7a:d7:1a:d9:f7:0c:0c:c0:50:f2:e7:53:74:5e:f5: c8:fe:42:4f:c5:86:0e:4b:45:b3:4a:ac:fb:dd:32: 80:cd:d1:9f:a5:44:52:7c:1e:73:50:ef:71:b8:dc: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7D:EC:F7:92:B9:9D:F5:64:71:B1:A5:2F:03:54:FB:33:98:B6:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:65:00:67:a6:e0:e8:f3:06:60:3c:ad:63:b5:8e:c6:23:3f: 9e:55:49:6b:0c:49:61:7f:aa:b5:c7:d0:c5:65:46:10:35:37: f2:a3:d8:7c:5c:4d:17:dc:41:0b:69:1f:0c:8d:d7:e1:d6:a3: c7:3b:35:1c:be:10:e1:34:8a:b5:f7:a9:e7:b9:11:5d:8f:e2: 27:5e:7c:33:68:81:ef:52:71:f8:a8:4c:9f:0a:7a:82:c4:e0: 71:95:5a:72:3e:68:32:83:7b:06:b4:06:ec:24:6e:4d:01:95: bb:96:81:a9:1f:d9:55:6a:61:29:0d:d5:4a:2e:bf:a4:df:31: b7:30:c2:97:f9:8c:6e:8d:0a:8d:8b:07:76:d8:86:2e:33:1f: 1c:f4:76:bb:15:70:2a:9c:c5:d3:92:e2:64:93:af:1a:71:b2: 17:cb:d6:ae:87:c4:1b:5d:25:a4:c5:b7:a8:a9:a6:66:76:c6: d2:d0:83:3d:c5:be:f0:1f:c4:07:5a:a3:e1:2f:68:ed:5c:9d: 29:d1:2a:f9:0d:06:d4:84:53:60:a7:3f:7e:e8:a5:63:a9:34: 9a:1c:b2:8d:39:c0:91:65:9b:cb:a1:63:9f:c2:97:48:5a:57: d7:d3:b6:12:fa:3b:25:2e:db:7b:05:5f:9e:08:6e:6c:53:f6: 0d:63:f1:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0UV18mWn8hnxNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YjdkYzJkYWMtYmNmZS00NjJiLWI5YjctOGRkZGNjNDgwY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvItynICdoWI5QvHSrD9ZlLHzaFB4zrudHCtX N+NPkevUNbYJ6EznfEYJfua8m+R7uiL+6Hjr3SzuyJtTozQqj1ENhdSbahy66jhR NqpiO+H+vBDCQv1W4+5ugjfssCDjspu+TmndEf9u+X/Ffv6Ym9Ow/SiImNFrbk+Z Rps+8+GXJcyN04voKXMvLByq36PTvucXU6mVVnksl1rGvxjc5em7z6yMYiTDGHvr qNqvEoQwmJEjP5Ne5KvL/EZGGoLzKs6m0C2Ph3S+0Htb+pRPFVx61xrZ9wwMwFDy 51N0XvXI/kJPxYYOS0WzSqz73TKAzdGfpURSfB5zUO9xuNw/XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHR97PeSuZ31ZHGxpS8DVPszmLZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvOTI5OTQxZDgtYmU2My0z YmU1LTg5ZDctNjJhOTk3Mjg5MzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZlAGem4OjzBmA8rWO1jsYjP55VSWsMSWF/qrXH0MVlRhA1N/Kj2Hxc TRfcQQtpHwyN1+HWo8c7NRy+EOE0irX3qee5EV2P4idefDNoge9ScfioTJ8KeoLE 4HGVWnI+aDKDewa0Buwkbk0BlbuWgakf2VVqYSkN1Uouv6TfMbcwwpf5jG6NCo2L B3bYhi4zHxz0drsVcCqcxdOS4mSTrxpxshfL1q6HxBtdJaTFt6ippmZ2xtLQgz3F vvAfxAdao+EvaO1cnSnRKvkNBtSEU2CnP37opWOpNJocso05wJFlm8uhY5/Cl0ha V9fTthL6OyUu23sFX54IbmxT9g1j8bE= -----END CERTIFICATE-----Generated at Wed Jan 7 23:52:02 2026 by rpki-client