This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53/71013a3e-c566-3929-ba41-cc539946f194.roa File: 71013a3e-c566-3929-ba41-cc539946f194.roa (raw, json) Hash identifier: J19j+TH4GrzHUCpvCzlr9vntpRxQWnbyBjjkAzgSuVU= Subject key identifier: 1A:86:20:C0:BC:74:F4:F9:1B:B2:BE:69:16:7C:31:80:7C:8B:58:EC Certificate issuer: /CN=07c8af42-3e07-4a45-aa70-e40a4da66a53 Certificate serial: 010D0C9F4328584BF1E5E20BF6F6A495BC0DE0C0 Authority key identifier: 46:E6:26:D8:58:80:C3:FC:66:59:91:54:4B:59:26:81:4F:1D:F0:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53/71013a3e-c566-3929-ba41-cc539946f194.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 399580 IP address blocks: 209.209.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53/07c8af42-3e07-4a45-aa70-e40a4da66a53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53/07c8af42-3e07-4a45-aa70-e40a4da66a53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:e2:0b:f6:f6:a4:95:bc:0d:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c8af42-3e07-4a45-aa70-e40a4da66a53 Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=d3ac3998-4097-48b0-b11e-639848faabb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d7:12:56:b8:02:d3:55:7c:6f:04:92:5f:59: b4:f4:a7:82:60:2b:fe:5f:8a:0b:0a:26:da:8c:75: 8c:f1:d6:d7:ca:28:d0:19:08:0d:8a:93:de:62:c0: 3d:8c:d6:d5:c3:9b:d9:91:0f:5a:a1:06:06:ca:9b: cf:85:50:f6:b5:8a:d9:e2:09:6e:67:5f:5f:fd:a5: 5e:82:cd:12:25:07:9e:a6:7d:4b:46:3c:23:4b:5d: a3:fc:8c:81:9d:eb:9f:d5:18:7c:88:58:7c:40:44: 15:b5:f5:c0:d1:1e:94:8c:5b:ce:55:81:50:e4:49: f0:dc:8c:db:52:2d:05:a1:9a:16:c5:12:69:c5:be: 57:ef:27:61:b0:b0:fe:bb:0b:da:99:b7:15:fa:cb: c6:53:f8:72:07:fb:67:7a:52:cb:90:0f:0f:07:80: ac:be:9f:e9:d2:28:d2:60:d3:38:1d:01:ac:0d:49: 74:c2:0b:fe:25:b2:74:01:14:fd:2f:24:89:fc:59: 36:44:44:e5:e7:2b:a2:98:5a:6b:06:2d:d0:12:89: 52:8d:e8:d7:b9:5e:3b:fd:53:1f:2d:cc:03:a6:1f: 8a:18:a2:bb:75:88:3d:ee:d0:05:45:66:29:91:54: d4:19:14:3f:f1:d9:b8:d7:bb:66:3c:6e:98:b5:e4: 31:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:86:20:C0:BC:74:F4:F9:1B:B2:BE:69:16:7C:31:80:7C:8B:58:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53/71013a3e-c566-3929-ba41-cc539946f194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53/07c8af42-3e07-4a45-aa70-e40a4da66a53.crl X509v3 Authority Key Identifier: keyid:46:E6:26:D8:58:80:C3:FC:66:59:91:54:4B:59:26:81:4F:1D:F0:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53.cer sbgp-ipAddrBlock: critical IPv4: 209.209.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a4:76:a4:c0:28:bf:dc:dd:39:2d:52:86:7c:ac:10:48:d8: fb:32:fd:4c:87:c2:a2:d9:2f:8d:cc:57:71:d0:20:ef:ee:65: 5f:40:87:0f:a5:5a:6f:aa:81:17:68:2f:ac:bc:2a:c7:6e:27: 01:2d:ec:ca:17:71:46:3d:fc:66:ae:ed:74:f0:02:04:9a:30: f8:bd:76:01:08:04:c5:93:23:04:82:e4:19:a4:93:fd:a6:02: 2e:1b:f2:fe:7d:3d:ce:df:29:f0:84:1e:7c:73:85:f5:3f:17: 93:28:71:ee:e6:65:64:91:34:62:95:9c:78:e6:3b:39:29:c4: 64:77:70:93:ac:dd:d0:a5:7a:48:97:07:0f:de:3c:bb:be:25: 08:bd:07:9f:0c:ae:c2:55:27:db:1c:7a:60:6c:da:8f:7b:a3: c3:cc:e2:b6:5a:c1:43:55:48:e1:2a:35:5d:62:1d:9e:3d:c4: 6f:63:4e:76:0d:c5:90:34:a4:0e:65:2f:4f:4c:08:47:92:88: 07:16:d9:d5:e2:eb:e9:b3:d0:22:21:dc:be:da:b4:39:4a:f1: 28:db:58:19:89:28:47:a0:5d:f4:98:14:34:20:2f:80:ed:da: 1a:51:e8:36:e2:90:2d:6e:a7:0a:5c:8c:f1:b3:54:7c:4b:12: 32:c4:50:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvx5eIL9vaklbwN4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDdjOGFmNDItM2UwNy00YTQ1LWFhNzAtZTQwYTRkYTY2 YTUzMB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk ZDNhYzM5OTgtNDA5Ny00OGIwLWIxMWUtNjM5ODQ4ZmFhYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdcSVrgC01V8bwSSX1m09KeCYCv+X4oLCiba jHWM8dbXyijQGQgNipPeYsA9jNbVw5vZkQ9aoQYGypvPhVD2tYrZ4gluZ19f/aVe gs0SJQeepn1LRjwjS12j/IyBneuf1Rh8iFh8QEQVtfXA0R6UjFvOVYFQ5Enw3Izb Ui0FoZoWxRJpxb5X7ydhsLD+uwvambcV+svGU/hyB/tnelLLkA8PB4Csvp/p0ijS YNM4HQGsDUl0wgv+JbJ0ART9LySJ/Fk2RETl5yuimFprBi3QEolSjejXuV47/VMf LcwDph+KGKK7dYg97tAFRWYpkVTUGRQ/8dm417tmPG6YteQxGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqGIMC8dPT5G7K+aRZ8MYB8i1jsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wN2M4 YWY0Mi0zZTA3LTRhNDUtYWE3MC1lNDBhNGRhNjZhNTMvNzEwMTNhM2UtYzU2Ni0z OTI5LWJhNDEtY2M1Mzk5NDZmMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDdjOGFmNDItM2UwNy00YTQ1LWFh NzAtZTQwYTRkYTY2YTUzLzA3YzhhZjQyLTNlMDctNGE0NS1hYTcwLWU0MGE0ZGE2 NmE1My5jcmwwHwYDVR0jBBgwFoAURuYm2FiAw/xmWZFUS1kmgU8d8B0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wN2M4YWY0Mi0zZTA3LTRhNDUtYWE3MC1lNDBh NGRhNjZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACykdqTAKL/c3TktUoZ8rBBI2Psy/UyHwqLZL43MV3HQIO/uZV9Ahw+l Wm+qgRdoL6y8KsduJwEt7MoXcUY9/Gau7XTwAgSaMPi9dgEIBMWTIwSC5Bmkk/2m Ai4b8v59Pc7fKfCEHnxzhfU/F5Moce7mZWSRNGKVnHjmOzkpxGR3cJOs3dClekiX Bw/ePLu+JQi9B58MrsJVJ9scemBs2o97o8PM4rZawUNVSOEqNV1iHZ49xG9jTnYN xZA0pA5lL09MCEeSiAcW2dXi6+mz0CIh3L7atDlK8SjbWBmJKEegXfSYFDQgL4Dt 2hpR6DbikC1upwpcjPGzVHxLEjLEUK0= -----END CERTIFICATE-----Generated at Mon Nov 24 22:39:17 2025 by rpki-client