This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa File: dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa (raw, json) Hash identifier: 9XLAw9UACxNZTGSMoX02LKGBBEtugut6caRJJ8PU3Uw= Subject key identifier: 53:3E:71:27:7F:44:B2:A6:A5:51:31:F0:41:2A:BB:B3:C5:6A:C4:94 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584C539BDADD0DFF4118490C9300 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa Signing time: Sat 27 Dec 2025 14:00:38 +0000 ROA not before: Sat 27 Dec 2025 14:00:38 +0000 ROA not after: Fri 27 Mar 2026 13:00:38 +0000 asID: 6939 IP address blocks: 166.0.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:53:9b:da:dd:0d:ff:41:18:49:0c:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Dec 27 14:00:38 2025 GMT Not After : Mar 27 13:00:38 2026 GMT Subject: CN=ec1989db-8e61-450c-858b-1ef1d46db322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:78:c3:fe:9c:b0:cd:b3:8d:13:43:c1:10:cb: af:94:82:3f:a7:b5:28:0c:7e:f8:97:ec:34:00:ce: 1c:d1:6b:ee:31:45:d5:47:3b:db:15:98:4c:10:ea: 5c:60:23:49:f8:59:58:ea:f6:95:fc:26:9c:e3:ee: cf:88:ae:cb:30:cb:a8:42:ec:b6:18:8a:58:59:a0: 93:77:24:9c:aa:fe:5e:46:a1:37:ca:93:e5:05:09: fb:11:3e:65:1c:55:2e:ed:31:e8:d6:a2:e1:8d:ea: 47:59:5a:13:c1:c0:a2:4e:56:ad:6e:ab:64:13:d2: 03:a5:08:6a:a6:a9:4c:b4:53:26:1a:99:24:7d:70: f1:51:93:29:99:c6:1e:e7:00:1a:fa:5f:99:49:be: e5:0f:f8:49:e4:c6:a7:ba:f2:09:29:a9:9e:3d:df: a4:3d:f5:5f:b8:73:fa:1d:63:58:84:88:d7:85:04: d2:58:fa:8a:54:a1:c0:64:c9:13:eb:4d:d3:24:2a: f1:6b:34:96:b7:b9:34:22:8c:75:d8:87:67:94:35: af:22:bd:6c:03:ae:2c:cc:4d:e7:97:93:eb:a3:87: ca:63:9a:da:6f:dd:c1:70:39:a0:01:b6:5f:f1:41: 34:31:6f:16:27:dd:44:a6:e0:91:1c:ed:f4:eb:62: 1c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3E:71:27:7F:44:B2:A6:A5:51:31:F0:41:2A:BB:B3:C5:6A:C4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dfa9ec14-f8e6-375e-a04d-d7664fdfff2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d0:83:12:19:5d:e3:e3:55:62:d0:5c:a7:24:98:c2:bc:d5: cf:9b:d5:05:0b:83:fc:c9:19:d5:2c:1d:6d:1c:82:ab:62:95: 82:59:dc:ed:18:8b:9a:d9:3a:20:90:5c:3b:55:81:58:d3:48: c1:42:df:ad:64:9b:49:5b:12:ae:7a:2c:6c:14:9f:b8:46:1d: 96:8a:59:24:d9:ff:6f:df:b3:b1:6a:a2:eb:e9:d0:8b:ec:c1: d0:55:d0:29:3c:f7:cb:1b:96:5d:e9:bc:cf:60:db:55:10:c9: dc:ab:06:86:5f:78:d5:f7:ec:31:98:56:bc:8b:0b:4e:1a:9d: 83:a8:c4:57:fd:9a:a6:7b:98:71:29:e9:3e:bf:dd:f8:c6:df: 7c:75:a1:9d:8b:27:9f:06:c8:b9:79:40:d4:6b:f9:89:d4:0c: 87:c5:b5:85:9c:12:be:bf:b2:e6:6e:fe:37:1e:62:b7:9b:c0: 37:0f:84:0f:7b:12:3f:31:8c:ec:f4:ef:d6:16:c6:3f:f8:8a: af:60:61:fc:e7:58:82:67:12:04:84:db:7f:02:3d:be:ea:08: 3b:85:2d:cc:20:57:ec:1b:3e:e4:51:4d:c1:1e:3b:a6:c0:1e: 60:41:2a:81:98:ab:4a:80:3f:ab:58:1c:e1:49:dc:09:b6:70: bc:ed:a7:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExTm9rdDf9BGEkMkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTIyNzE0MDAzOFoXDTI2MDMyNzEzMDAzOFowLzEtMCsGA1UEAxMk ZWMxOTg5ZGItOGU2MS00NTBjLTg1OGItMWVmMWQ0NmRiMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHjD/pywzbONE0PBEMuvlII/p7UoDH74l+w0 AM4c0WvuMUXVRzvbFZhMEOpcYCNJ+FlY6vaV/Cac4+7PiK7LMMuoQuy2GIpYWaCT dyScqv5eRqE3ypPlBQn7ET5lHFUu7THo1qLhjepHWVoTwcCiTlatbqtkE9IDpQhq pqlMtFMmGpkkfXDxUZMpmcYe5wAa+l+ZSb7lD/hJ5ManuvIJKamePd+kPfVfuHP6 HWNYhIjXhQTSWPqKVKHAZMkT603TJCrxazSWt7k0Iox12IdnlDWvIr1sA64szE3n l5Pro4fKY5rab93BcDmgAbZf8UE0MW8WJ91EpuCRHO3062IcCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFM+cSd/RLKmpVEx8EEqu7PFasSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGZhOWVjMTQtZjhlNi0z NzVlLWEwNGQtZDc2NjRmZGZmZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbQgxIZXePjVWLQXKckmMK81c+b1QULg/zJGdUsHW0cgqtilYJZ3O0Y i5rZOiCQXDtVgVjTSMFC361km0lbEq56LGwUn7hGHZaKWSTZ/2/fs7Fqouvp0Ivs wdBV0Ck898sbll3pvM9g21UQydyrBoZfeNX37DGYVryLC04anYOoxFf9mqZ7mHEp 6T6/3fjG33x1oZ2LJ58GyLl5QNRr+YnUDIfFtYWcEr6/suZu/jceYrebwDcPhA97 Ej8xjOz079YWxj/4iq9gYfznWIJnEgSE238CPb7qCDuFLcwgV+wbPuRRTcEeO6bA HmBBKoGYq0qAP6tYHOFJ3Am2cLztpwA= -----END CERTIFICATE-----Generated at Fri Jan 23 16:44:10 2026 by rpki-client