This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bff3a0fb-c657-3bcc-a3bf-1b1982c25b37.roa File: bff3a0fb-c657-3bcc-a3bf-1b1982c25b37.roa (raw, json) Hash identifier: pF+JJMpxpNNZNCZs7QmCeoW/PFk58yeaepgo/hLKHig= Subject key identifier: 00:E6:99:0F:2B:DA:A5:EE:DF:7F:63:3C:1C:18:0A:19:C5:16:D0:2E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C223022F3CD17A2B13184F600 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bff3a0fb-c657-3bcc-a3bf-1b1982c25b37.roa Signing time: Tue 09 Dec 2025 21:09:07 +0000 ROA not before: Tue 09 Dec 2025 21:09:07 +0000 ROA not after: Mon 09 Mar 2026 20:09:07 +0000 asID: 11404 IP address blocks: 198.170.0.0/17 maxlen: 24 198.171.0.0/16 maxlen: 24 198.172.0.0/18 maxlen: 24 198.173.64.0/18 maxlen: 24 199.103.192.0/18 maxlen: 24 199.236.0.0/16 maxlen: 24 199.237.0.0/18 maxlen: 24 199.237.128.0/17 maxlen: 24 199.239.192.0/18 maxlen: 24 206.50.64.0/18 maxlen: 24 206.184.64.0/18 maxlen: 24 206.184.128.0/17 maxlen: 24 206.239.64.0/18 maxlen: 24 206.239.128.0/17 maxlen: 24 207.20.0.0/18 maxlen: 24 207.20.128.0/17 maxlen: 24 207.137.128.0/17 maxlen: 24 209.39.128.0/17 maxlen: 24 209.57.128.0/17 maxlen: 24 209.70.0.0/17 maxlen: 24 209.70.128.0/18 maxlen: 24 216.42.0.0/17 maxlen: 24 216.44.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:30:22:f3:cd:17:a2:b1:31:84:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Dec 9 21:09:07 2025 GMT Not After : Mar 9 20:09:07 2026 GMT Subject: CN=709aadc3-280b-4ec9-95af-41260d5abc34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:23:6b:18:c5:c3:ab:9b:1e:3d:cb:b8:1c:b6: 65:b3:28:2c:1d:ce:7b:f4:b2:42:13:69:66:a5:7a: d4:f5:6a:25:67:61:42:22:a1:c4:64:5b:f2:b2:66: 9d:9a:d5:cf:92:14:db:75:4a:f0:ed:7a:69:18:e3: e1:c7:5a:00:08:ca:09:fe:d1:b7:09:a8:99:6d:e9: 77:a2:6c:6d:2b:71:7c:f5:33:75:82:de:a9:13:80: 90:f1:55:74:70:cb:16:22:44:c7:36:3d:a6:16:29: 30:67:10:7c:93:d1:d0:57:ca:78:f6:62:f5:ee:f0: 4f:bf:c4:92:b2:24:1e:37:e7:5f:5b:93:91:00:50: e2:df:97:94:44:ba:4f:24:b4:9e:43:7c:4a:0f:93: 6f:53:e6:42:aa:19:7a:2a:f3:c1:51:bd:07:d1:0a: 31:35:21:60:01:4f:80:98:96:52:27:79:d1:19:91: 64:e4:7b:6e:54:24:a6:73:1d:c8:6c:1d:f0:1b:02: 61:25:38:1f:1a:e6:e8:de:7f:7b:c4:aa:f2:d3:1f: 3c:8c:3c:93:f0:4b:3c:73:fa:eb:75:90:81:38:7d: 08:b6:30:65:e3:e6:81:cd:b5:ad:f8:9f:61:98:77: 9d:ef:5c:64:8f:0a:f4:cc:24:18:5b:98:f9:64:a9: 4a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E6:99:0F:2B:DA:A5:EE:DF:7F:63:3C:1C:18:0A:19:C5:16:D0:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bff3a0fb-c657-3bcc-a3bf-1b1982c25b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.170.0.0/17 198.171.0.0-198.172.63.255 198.173.64.0/18 199.103.192.0/18 199.236.0.0-199.237.63.255 199.237.128.0/17 199.239.192.0/18 206.50.64.0/18 206.184.64.0-206.184.255.255 206.239.64.0-206.239.255.255 207.20.0.0/18 207.20.128.0/17 207.137.128.0/17 209.39.128.0/17 209.57.128.0/17 209.70.0.0-209.70.191.255 216.42.0.0/17 216.44.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f4:d2:9f:a1:4e:79:64:ee:1e:1e:78:b4:28:aa:10:f0:97: 2c:d4:35:f4:42:80:fc:37:b1:95:2b:4e:36:b8:79:d2:90:bd: 39:2c:c3:ab:60:dc:33:1c:d9:b4:ca:fe:37:91:9e:ad:dd:44: d3:8d:82:1a:7e:0c:83:4d:f7:fa:dc:4e:68:09:82:c2:ed:9d: 90:06:9d:1d:d0:7e:bc:01:e1:a1:37:4b:49:d5:54:2c:ca:62: 56:1b:47:7e:a5:cf:74:cd:8f:5a:0e:48:1f:ad:eb:13:ee:cb: 85:94:e3:f0:bd:9a:e9:8e:96:99:02:df:89:02:26:14:ed:c4: 57:7f:47:7f:1d:c1:92:2a:73:55:5f:05:39:c6:52:f3:2f:aa: a8:dd:9d:a3:7e:38:0e:51:4c:d2:5e:8a:4a:6b:07:b9:a0:bc: d0:6e:d8:be:81:67:5b:57:1c:1f:fa:06:55:08:a0:fe:a2:ca: 96:99:ad:e2:99:93:89:a0:13:7b:c4:e8:2d:34:50:1f:0c:2f: 49:31:17:a9:ad:5a:a9:9c:0f:ab:09:0f:91:84:fd:e9:83:df: a5:07:51:91:5a:2c:d8:af:f6:5e:05:ac:2d:7f:8e:6f:72:2b: 21:70:0c:5e:f8:73:32:10:4f:f1:35:4f:94:00:ba:c5:de:f1: de:c2:29:79 -----BEGIN CERTIFICATE----- MIIG0TCCBbmgAwIBAgIUAQ0Mn0MoWEwiMCLzzReisTGE9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTIwOTIxMDkwN1oXDTI2MDMwOTIwMDkwN1owLzEtMCsGA1UEAxMk NzA5YWFkYzMtMjgwYi00ZWM5LTk1YWYtNDEyNjBkNWFiYzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSNrGMXDq5sePcu4HLZlsygsHc579LJCE2lm pXrU9WolZ2FCIqHEZFvysmadmtXPkhTbdUrw7XppGOPhx1oACMoJ/tG3CaiZbel3 omxtK3F89TN1gt6pE4CQ8VV0cMsWIkTHNj2mFikwZxB8k9HQV8p49mL17vBPv8SS siQeN+dfW5ORAFDi35eURLpPJLSeQ3xKD5NvU+ZCqhl6KvPBUb0H0QoxNSFgAU+A mJZSJ3nRGZFk5HtuVCSmcx3IbB3wGwJhJTgfGubo3n97xKry0x88jDyT8Es8c/rr dZCBOH0ItjBl4+aBzbWt+J9hmHed71xkjwr0zCQYW5j5ZKlKpQIDAQABo4ID4zCC A98wHQYDVR0OBBYEFADmmQ8r2qXu339jPBwYChnFFtAuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmZmM2EwZmItYzY1Ny0z YmNjLWEzYmYtMWIxOTgyYzI1YjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMIGsBggrBgEFBQcBBwEB/wSBnDCBmTCBlgQCAAEwgY8DBAfG qgAwCwMDAMarAwQGxqwAAwQGxq1AAwQGx2fAMAsDAwLH7AMEBsftAAMEB8ftgAME BsfvwAMEBs4yQDALAwQGzrhAAwMAzrgwCwMEBs7vQAMDBM7gAwQGzxQAAwQHzxSA AwQHz4mAAwQH0SeAAwQH0TmAMAsDAwHRRgMEBtFGgAMEB9gqAAMEB9gsgDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQB+9NKfoU55ZO4eHni0KKoQ8Jcs1DX0QoD8N7GVK042uHnSkL05LMOrYNwz HNm0yv43kZ6t3UTTjYIafgyDTff63E5oCYLC7Z2QBp0d0H68AeGhN0tJ1VQsymJW G0d+pc90zY9aDkgfresT7suFlOPwvZrpjpaZAt+JAiYU7cRXf0d/HcGSKnNVXwU5 xlLzL6qo3Z2jfjgOUUzSXopKawe5oLzQbti+gWdbVxwf+gZVCKD+osqWma3imZOJ oBN7xOgtNFAfDC9JMReprVqpnA+rCQ+RhP3pg9+lB1GRWizYr/ZeBawtf45vcish cAxe+HMyEE/xNU+UALrF3vHewil5 -----END CERTIFICATE-----Generated at Thu Dec 18 12:22:13 2025 by rpki-client