This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa File: f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa (raw, json) Hash identifier: gj3/lDSmt8J3VsFNelh3hc4WlZPkN98YAe4ITmBuT/g= Subject key identifier: 3B:36:E4:46:C4:1A:9D:0C:0B:61:EE:B5:5A:F4:D0:DE:27:09:DE:26 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584C1D2B67FE628C5FF40495E000 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa Signing time: Mon 08 Dec 2025 02:00:31 +0000 ROA not before: Mon 08 Dec 2025 02:00:31 +0000 ROA not after: Sun 08 Mar 2026 02:00:31 +0000 asID: 398210 IP address blocks: 207.211.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1d:2b:67:fe:62:8c:5f:f4:04:95:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Dec 8 02:00:31 2025 GMT Not After : Mar 8 02:00:31 2026 GMT Subject: CN=b40612b1-870d-4040-9862-6a0c99718c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7b:91:73:cd:28:0a:9f:8b:7b:48:67:3e:74: e5:ad:5c:f1:bc:70:a2:4e:22:ec:f7:90:34:a7:16: 87:6a:e9:35:7d:10:f8:37:4e:07:7f:6c:49:7a:50: de:a4:d1:e7:29:1f:f0:82:27:4f:14:b6:8c:a0:52: 29:40:1c:f4:4a:2a:53:34:58:f0:75:8b:42:50:a9: 25:aa:05:3d:f8:15:eb:20:50:e4:d8:c0:7c:8e:ba: 3b:9c:f9:89:5f:a0:b3:3f:57:78:b0:a7:45:33:b5: 97:ae:08:cd:d2:d1:03:ae:77:43:e9:10:ac:a0:f9: 19:53:8f:70:03:1b:5c:d7:40:29:2a:23:dc:e7:26: 69:36:ab:8c:3c:35:01:72:56:bb:7d:a0:0d:cc:08: 99:7d:06:9a:bf:58:70:7b:a8:5e:37:7c:f3:7f:0c: 17:ad:66:ef:20:e1:c8:08:f2:ad:1d:46:34:0b:d0: b0:44:b2:e0:5e:ea:10:22:5c:aa:2f:f7:cd:3b:41: 1a:72:3a:98:03:e8:ea:70:d6:2f:ce:fa:a4:44:15: 3a:d1:20:dd:4e:ee:73:2e:6e:4a:32:60:1b:f7:52: 22:fd:ed:5e:ff:25:6a:ea:a6:e5:6f:8e:5e:34:b2: 6f:93:ba:f3:a4:46:ce:74:7f:4b:8b:11:b7:a6:dc: d9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:36:E4:46:C4:1A:9D:0C:0B:61:EE:B5:5A:F4:D0:DE:27:09:DE:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/f05b96d7-cebe-32f3-b1e2-c39d5de5d3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 207.211.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6a:32:47:e1:c3:16:a2:68:92:73:4a:95:a5:02:48:89:df: 7b:5f:6f:bf:b9:00:60:c3:7c:a9:23:e4:f0:76:3e:c9:1a:06: d1:18:8a:55:f8:5c:d6:ec:5d:85:8e:10:e4:4f:c6:da:c0:3d: f7:a9:08:ec:e8:5d:65:a8:95:e3:de:85:35:70:0e:f2:b0:43: d5:9e:c1:27:07:ce:b0:64:74:97:4d:eb:4a:b1:e3:67:3d:21: 8d:d0:7c:eb:2b:73:90:eb:b8:27:8d:1b:65:ff:8e:3a:9b:24: 75:4a:b2:11:c0:a2:be:85:ce:cc:bf:d8:62:18:5a:c2:3a:e0: 9a:87:c2:07:9c:57:1c:fd:27:33:44:b5:09:97:c6:3a:b7:50: bc:1c:2e:7e:91:39:27:91:59:1c:27:55:31:14:e8:5a:14:93: 32:95:08:c1:93:f0:27:b7:ab:22:c7:31:5c:0c:70:c9:6f:16: a2:7e:5e:e2:5e:43:5a:8f:f4:6d:82:9d:c1:6f:8b:ec:4f:af: e3:28:b3:ef:48:eb:4d:18:de:90:a8:d9:39:7a:46:85:d9:a5: cf:fa:39:ae:e2:29:fe:e9:1e:59:cc:48:ea:fc:65:e3:77:d2: 35:79:27:3d:6f:2f:e3:05:af:21:06:67:7c:85:37:52:2c:e7: 27:fc:82:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwdK2f+Yoxf9ASV4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MTIwODAyMDAzMVoXDTI2MDMwODAyMDAzMVowLzEtMCsGA1UEAxMk YjQwNjEyYjEtODcwZC00MDQwLTk4NjItNmEwYzk5NzE4YzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XuRc80oCp+Le0hnPnTlrVzxvHCiTiLs95A0 pxaHauk1fRD4N04Hf2xJelDepNHnKR/wgidPFLaMoFIpQBz0SipTNFjwdYtCUKkl qgU9+BXrIFDk2MB8jro7nPmJX6CzP1d4sKdFM7WXrgjN0tEDrndD6RCsoPkZU49w Axtc10ApKiPc5yZpNquMPDUBcla7faANzAiZfQaav1hwe6heN3zzfwwXrWbvIOHI CPKtHUY0C9CwRLLgXuoQIlyqL/fNO0EacjqYA+jqcNYvzvqkRBU60SDdTu5zLm5K MmAb91Ii/e1e/yVq6qblb45eNLJvk7rzpEbOdH9LixG3ptzZ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDs25EbEGp0MC2HutVr00N4nCd4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZjA1Yjk2ZDctY2ViZS0z MmYzLWIxZTItYzM5ZDVkZTVkM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz9P+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJqMkfhwxaiaJJzSpWlAkiJ33tfb7+5AGDDfKkj5PB2PskaBtEYilX4 XNbsXYWOEORPxtrAPfepCOzoXWWolePehTVwDvKwQ9WewScHzrBkdJdN60qx42c9 IY3QfOsrc5DruCeNG2X/jjqbJHVKshHAor6Fzsy/2GIYWsI64JqHwgecVxz9JzNE tQmXxjq3ULwcLn6ROSeRWRwnVTEU6FoUkzKVCMGT8Ce3qyLHMVwMcMlvFqJ+XuJe Q1qP9G2CncFvi+xPr+Mos+9I600Y3pCo2Tl6RoXZpc/6Oa7iKf7pHlnMSOr8ZeN3 0jV5Jz1vL+MFryEGZ3yFN1Is5yf8gnA= -----END CERTIFICATE-----Generated at Sun Dec 14 06:18:37 2025 by rpki-client