This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b952558-1bb6-34da-9934-96f2a6260c1d.roa File: 3b952558-1bb6-34da-9934-96f2a6260c1d.roa (raw, json) Hash identifier: 5/4D/Hfh5xj/eRJjlGwEHOTadsE/sK3AAdMYb04xj8A= Subject key identifier: 09:8F:C9:40:5F:C4:9B:24:57:B8:FA:33:37:23:7C:C9:3B:64:E9:6D Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584BEFA06E21FCF8F1AABCACF680 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b952558-1bb6-34da-9934-96f2a6260c1d.roa Signing time: Fri 21 Nov 2025 18:29:09 +0000 ROA not before: Fri 21 Nov 2025 18:29:09 +0000 ROA not after: Thu 19 Feb 2026 18:29:09 +0000 asID: 149440 IP address blocks: 166.0.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:a0:6e:21:fc:f8:f1:aa:bc:ac:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Nov 21 18:29:09 2025 GMT Not After : Feb 19 18:29:09 2026 GMT Subject: CN=c08d84d8-26ed-4a68-8bdc-a4b8f5e86246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a6:de:07:a5:22:18:41:76:64:3a:78:0f:eb: d1:b3:b2:0d:22:37:04:8c:83:5f:d3:6a:c5:a9:8c: b5:2d:59:cc:20:95:d9:2a:f7:bc:92:fd:2e:09:2f: 55:6e:db:2b:3e:47:50:33:a4:cf:94:66:c7:4a:62: 14:2b:b6:2e:67:1a:5d:ab:87:e5:3f:59:8d:4f:b7: a1:7c:b6:e4:44:b3:1e:7c:54:31:d6:fa:65:93:dc: 07:da:57:65:98:47:1e:99:9b:56:aa:4f:96:fd:69: a2:71:56:27:3d:1e:5b:2a:cf:1f:25:18:07:df:08: 14:41:31:56:6d:85:bc:49:99:d6:38:9c:dc:83:cb: 89:86:80:7c:7f:3e:1d:ae:2f:0b:be:30:fb:c8:24: ae:14:e2:3e:b8:31:32:a8:fa:6b:b1:1b:b2:3b:c9: fa:e4:0c:f6:8d:72:58:b1:ef:dc:7a:f0:a9:08:6b: 7b:5e:09:03:79:e5:ec:15:0d:cb:33:a4:b3:cf:10: 5e:76:65:10:07:fa:ee:01:a0:94:1f:46:36:46:df: b7:ff:d1:59:b1:40:af:35:1d:43:82:33:8b:41:7b: 75:44:df:80:f6:4e:7c:6c:8c:2e:fb:53:aa:11:9d: ce:e6:dd:f5:ba:ba:a9:81:68:7e:60:14:22:05:b5: 75:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8F:C9:40:5F:C4:9B:24:57:B8:FA:33:37:23:7C:C9:3B:64:E9:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3b952558-1bb6-34da-9934-96f2a6260c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:9f:4a:0c:be:2d:c9:6f:1f:e0:f7:eb:c8:0e:3a:be:fa:35: 1c:11:06:5e:bd:14:ac:76:a2:42:7f:62:6e:c7:3a:cc:d7:26: 24:a4:86:03:86:62:0f:72:74:3d:f1:c9:3e:a1:9b:64:54:bc: 48:47:64:c4:25:6b:b6:f9:68:9b:46:f1:64:75:44:cc:cf:a8: ce:44:ed:6b:f0:9d:15:06:12:59:9a:fd:e6:82:cb:1f:fa:b3: 4f:0f:4a:a1:69:af:9a:e0:66:ec:c3:63:32:f5:ce:8b:b8:48: b8:46:c6:fd:4f:d3:e6:c6:a2:4e:81:44:94:9e:e4:52:c4:a9: fc:e1:dd:6d:fd:44:9b:0a:5a:00:47:51:45:79:a3:db:78:6c: 1d:31:9d:a0:34:1d:da:b0:e2:c0:03:d6:bb:5a:f9:49:53:44: 7a:62:77:56:7c:7c:79:da:0a:ca:1c:b6:12:fc:43:ad:5f:7f: 54:89:99:04:21:37:76:2e:f9:30:4d:00:99:2a:1e:20:a5:40: 30:76:7f:d7:b8:0c:21:03:64:a4:9a:95:b7:d4:57:fe:4c:8c: d9:f1:b6:be:de:6d:e2:9d:72:ee:e7:af:fc:d8:b0:49:23:e7: a3:9d:a1:37:b7:ee:bd:dd:bb:77:cf:84:7b:ec:a1:18:7b:f9: ff:b1:54:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvoG4h/Pjxqrys9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTEyMTE4MjkwOVoXDTI2MDIxOTE4MjkwOVowLzEtMCsGA1UEAxMk YzA4ZDg0ZDgtMjZlZC00YTY4LThiZGMtYTRiOGY1ZTg2MjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6beB6UiGEF2ZDp4D+vRs7INIjcEjINf02rF qYy1LVnMIJXZKve8kv0uCS9VbtsrPkdQM6TPlGbHSmIUK7YuZxpdq4flP1mNT7eh fLbkRLMefFQx1vplk9wH2ldlmEcemZtWqk+W/WmicVYnPR5bKs8fJRgH3wgUQTFW bYW8SZnWOJzcg8uJhoB8fz4dri8LvjD7yCSuFOI+uDEyqPprsRuyO8n65Az2jXJY se/cevCpCGt7XgkDeeXsFQ3LM6SzzxBedmUQB/ruAaCUH0Y2Rt+3/9FZsUCvNR1D gjOLQXt1RN+A9k58bIwu+1OqEZ3O5t31urqpgWh+YBQiBbV1awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmPyUBfxJskV7j6MzcjfMk7ZOltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2I5NTI1NTgtMWJiNi0z NGRhLTk5MzQtOTZmMmE2MjYwYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgD9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyfSgy+LclvH+D368gOOr76NRwRBl69FKx2okJ/Ym7HOszXJiSkhgOG Yg9ydD3xyT6hm2RUvEhHZMQla7b5aJtG8WR1RMzPqM5E7WvwnRUGElma/eaCyx/6 s08PSqFpr5rgZuzDYzL1zou4SLhGxv1P0+bGok6BRJSe5FLEqfzh3W39RJsKWgBH UUV5o9t4bB0xnaA0Hdqw4sAD1rta+UlTRHpid1Z8fHnaCsocthL8Q61ff1SJmQQh N3Yu+TBNAJkqHiClQDB2f9e4DCEDZKSalbfUV/5MjNnxtr7ebeKdcu7nr/zYsEkj 56OdoTe37r3du3fPhHvsoRh7+f+xVHE= -----END CERTIFICATE-----Generated at Sun Nov 23 14:39:18 2025 by rpki-client