This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e3f2b204-39cc-3a44-b2d8-2d8e6470baaa.roa File: e3f2b204-39cc-3a44-b2d8-2d8e6470baaa.roa (raw, json) Hash identifier: wgmArub+6RaszZTvtoVLlZzqnYRKnEZXKF7VtG1BDYc= Subject key identifier: 95:BB:71:7E:CF:81:C4:58:C9:EB:E2:B3:99:33:6B:B9:59:34:A4:A6 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584C258B7C35EFCCBA07A9567F20 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e3f2b204-39cc-3a44-b2d8-2d8e6470baaa.roa Signing time: Thu 11 Dec 2025 02:00:30 +0000 ROA not before: Thu 11 Dec 2025 02:00:30 +0000 ROA not after: Wed 11 Mar 2026 01:00:30 +0000 asID: 11233 IP address blocks: 209.237.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:25:8b:7c:35:ef:cc:ba:07:a9:56:7f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Dec 11 02:00:30 2025 GMT Not After : Mar 11 01:00:30 2026 GMT Subject: CN=827fc8dc-336c-4b34-ab73-ebc69ae8ad70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:0b:ff:da:04:42:22:d9:af:2d:c6:31:8e: ea:2f:b6:05:ed:56:ca:5a:fd:c6:6b:3f:3e:de:93: cb:6b:10:28:3c:98:8d:0f:3c:88:89:a1:6a:28:01: c7:e0:1d:dd:42:e7:e3:f0:39:3e:6e:ce:b4:a8:f1: a5:74:4b:66:35:57:8c:d0:67:69:aa:53:75:f6:7c: 4a:4d:e1:2c:73:78:5c:89:9f:af:ea:44:06:38:9b: c8:29:4e:d5:06:85:5c:78:6d:66:14:d0:47:a3:c7: 61:13:56:e7:9c:58:33:da:0a:78:d6:37:e4:08:86: 68:ca:ab:c2:42:73:44:4f:23:85:20:66:74:40:25: 0d:d2:62:84:c2:3a:75:61:53:b8:80:c2:c5:76:9f: b2:3c:4b:84:22:5c:44:03:55:58:cf:da:4c:62:00: aa:58:95:0f:90:7a:32:5c:25:d7:7a:73:60:59:31: 32:17:6c:b6:e4:d3:1e:75:03:13:b4:ea:d7:66:c7: dc:f2:4b:bb:c4:7e:f0:f6:ac:1a:f3:f8:5b:bf:e3: b2:81:11:c1:83:af:fc:c7:b1:40:b3:d8:4d:82:b1: 66:2a:d7:0b:d5:88:10:6f:7c:ec:19:29:00:47:9f: 95:39:30:ca:ac:cd:62:0f:15:fa:3b:ca:72:78:63: 71:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BB:71:7E:CF:81:C4:58:C9:EB:E2:B3:99:33:6B:B9:59:34:A4:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e3f2b204-39cc-3a44-b2d8-2d8e6470baaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3d:eb:12:41:28:16:00:60:46:e4:56:72:30:3e:c7:04:32: 67:e9:c8:71:4b:45:a0:9f:75:48:4c:a3:3d:d6:59:3d:a4:81: 29:fc:b7:48:7b:04:ca:b4:80:c6:3b:5b:f6:79:65:c5:d1:82: 5a:3b:20:01:46:2f:b9:c3:87:4c:fa:7c:d2:13:ae:b1:7d:49: e1:41:a9:af:5d:bb:f3:74:9d:1d:70:50:72:23:66:54:b2:f3: 97:bb:33:64:08:7e:8b:79:3f:11:81:bf:eb:6b:56:6f:f5:60: 20:ff:8a:81:c2:2d:81:07:60:89:2c:90:3d:d6:fb:d2:dc:df: 99:24:a9:d4:c5:32:d8:e6:d4:ee:51:97:47:1f:92:bd:26:80: 00:39:6c:c1:53:71:d2:34:95:ce:42:a7:55:07:c8:04:71:cd: 40:6e:53:f2:f6:d9:de:12:e6:ea:f3:85:1a:b1:36:01:53:8c: da:db:ab:90:0c:3e:6c:f3:b6:f6:ff:27:e2:64:cf:89:91:b8: bb:3d:72:f8:9c:f8:b3:5f:c2:d8:0f:5b:bd:ef:b7:e1:06:94: e2:f0:c8:ba:f0:de:dd:11:ee:c3:5b:a1:c8:29:52:b0:57:42: 18:04:4c:e3:3a:bd:ef:de:a3:85:74:56:82:ff:c1:5f:55:55: 77:24:3d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwli3w178y6B6lWfyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTIxMTAyMDAzMFoXDTI2MDMxMTAxMDAzMFowLzEtMCsGA1UEAxMk ODI3ZmM4ZGMtMzM2Yy00YjM0LWFiNzMtZWJjNjlhZThhZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhEL/9oEQiLZry3GMY7qL7YF7VbKWv3Gaz8+ 3pPLaxAoPJiNDzyIiaFqKAHH4B3dQufj8Dk+bs60qPGldEtmNVeM0GdpqlN19nxK TeEsc3hciZ+v6kQGOJvIKU7VBoVceG1mFNBHo8dhE1bnnFgz2gp41jfkCIZoyqvC QnNETyOFIGZ0QCUN0mKEwjp1YVO4gMLFdp+yPEuEIlxEA1VYz9pMYgCqWJUPkHoy XCXXenNgWTEyF2y25NMedQMTtOrXZsfc8ku7xH7w9qwa8/hbv+OygRHBg6/8x7FA s9hNgrFmKtcL1YgQb3zsGSkAR5+VOTDKrM1iDxX6O8pyeGNx/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJW7cX7PgcRYyevis5kza7lZNKSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZTNmMmIyMDQtMzljYy0z YTQ0LWIyZDgtMmQ4ZTY0NzBiYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc96xJBKBYAYEbkVnIwPscEMmfpyHFLRaCfdUhMoz3WWT2kgSn8t0h7 BMq0gMY7W/Z5ZcXRglo7IAFGL7nDh0z6fNITrrF9SeFBqa9du/N0nR1wUHIjZlSy 85e7M2QIfot5PxGBv+trVm/1YCD/ioHCLYEHYIkskD3W+9Lc35kkqdTFMtjm1O5R l0cfkr0mgAA5bMFTcdI0lc5Cp1UHyARxzUBuU/L22d4S5urzhRqxNgFTjNrbq5AM Pmzztvb/J+Jkz4mRuLs9cvic+LNfwtgPW73vt+EGlOLwyLrw3t0R7sNbocgpUrBX QhgETOM6ve/eo4V0VoL/wV9VVXckPf0= -----END CERTIFICATE-----Generated at Mon Dec 15 12:02:43 2025 by rpki-client