This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa File: 977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa (raw, json) Hash identifier: VY6+CB2TjgddRCib/782DadX+w0K+d4Fam2mgz+71oc= Subject key identifier: A8:4C:20:66:02:0D:28:64:BD:6C:0A:A9:5C:98:2F:30:F2:1E:91:E9 Certificate issuer: /CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Certificate serial: 010D0C9F4328584BE56604A132EB2A42A1008B80 Authority key identifier: E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa Signing time: Tue 18 Nov 2025 02:33:22 +0000 ROA not before: Tue 18 Nov 2025 02:33:22 +0000 ROA not after: Mon 16 Feb 2026 02:33:22 +0000 asID: 14270 IP address blocks: 208.70.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:66:04:a1:32:eb:2a:42:a1:00:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Validity Not Before: Nov 18 02:33:22 2025 GMT Not After : Feb 16 02:33:22 2026 GMT Subject: CN=6c48228c-d76a-43db-9ff3-b824a40797b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:66:9d:e4:6b:ce:59:18:da:9d:8b:4c:a5:cc: 5e:eb:a0:c3:e8:30:16:eb:4c:ce:17:83:9e:f4:fd: 17:9b:8d:98:6e:fe:05:64:a7:1e:63:f4:24:49:83: 0d:99:33:04:da:f2:d4:57:de:ed:b8:2f:d9:38:96: cf:9b:50:19:0e:b5:b3:9e:28:79:73:84:63:66:ad: 9e:f1:21:8a:fc:f5:2e:d7:e9:fc:b6:87:c7:7e:e7: 69:d3:2b:f3:87:4f:9f:71:e3:d2:f3:e1:f5:a4:59: 81:eb:29:12:0f:7b:4a:74:b4:2b:bf:8b:b4:c9:04: fc:16:6e:45:a5:23:b8:2a:d8:fd:44:0d:3c:72:91: 5e:08:80:ac:98:45:dc:da:08:cd:37:6a:a1:81:d8: fe:a6:b1:43:d1:ff:78:08:ca:a6:bd:ec:3c:93:5d: d1:1f:58:51:87:e0:b4:e1:74:d2:5a:75:80:95:fa: 8c:b5:81:3b:8f:d2:b4:70:35:b0:46:25:07:09:0b: b9:78:39:82:d8:24:7f:da:c1:34:31:c0:47:49:d2: 53:c4:8e:64:37:01:01:75:ef:e2:73:f4:90:2a:39: 07:05:b7:90:e8:16:3a:47:ef:41:f2:4a:d0:d2:8f: d9:ed:4c:e7:48:d9:8b:47:98:47:f9:09:bb:59:12: c4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4C:20:66:02:0D:28:64:BD:6C:0A:A9:5C:98:2F:30:F2:1E:91:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl X509v3 Authority Key Identifier: keyid:E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer sbgp-ipAddrBlock: critical IPv4: 208.70.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:da:9e:39:ce:3e:47:51:da:38:77:45:a8:3a:e9:61:fb:d8: 46:53:d7:8b:77:e4:31:53:7b:51:0e:4e:36:27:20:c2:a1:39: b5:db:b9:a5:31:39:59:59:33:ea:db:47:2a:04:e4:d5:f8:35: 8d:a5:b9:ee:22:4a:58:c2:c0:95:dc:1a:33:e5:8d:55:4e:51: 28:c1:8d:98:f4:c5:34:a9:ce:a3:51:32:46:95:73:39:1e:f8: aa:29:6e:8b:ce:e6:24:33:0a:96:40:71:a0:43:80:12:5e:04: 50:3f:24:e5:c3:be:e3:6d:b3:87:41:fa:7a:21:80:67:15:83: 65:5d:a4:84:1f:8e:57:d6:72:bf:7e:2c:14:71:69:8c:0a:94: 56:45:d3:24:e7:ca:ab:a7:39:85:fe:ef:ad:95:fa:dd:cb:b3: c3:a0:8e:3b:a8:8d:6e:e9:a8:50:d7:83:58:36:db:f1:41:ca: b4:49:4b:7c:ce:d5:ab:f8:af:be:b7:51:c6:c9:c2:c5:f1:e3: d8:9e:cc:f5:85:3a:27:d7:c4:d9:5e:9b:54:6a:b0:01:18:bd: a5:0c:7e:f9:75:f4:98:4d:b1:c7:95:ed:67:81:16:d4:39:8b: 77:c6:72:86:c4:ac:7f:63:4d:cb:f2:af:46:a3:5c:06:e5:0a: 05:fa:31:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlZgShMusqQqEAi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUzMDZkOTAtMGYzNy00OWE4LWIwMGUtMDY4YThlNGZm MzA3MB4XDTI1MTExODAyMzMyMloXDTI2MDIxNjAyMzMyMlowLzEtMCsGA1UEAxMk NmM0ODIyOGMtZDc2YS00M2RiLTlmZjMtYjgyNGE0MDc5N2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWad5GvOWRjanYtMpcxe66DD6DAW60zOF4Oe 9P0Xm42Ybv4FZKceY/QkSYMNmTME2vLUV97tuC/ZOJbPm1AZDrWznih5c4RjZq2e 8SGK/PUu1+n8tofHfudp0yvzh0+fcePS8+H1pFmB6ykSD3tKdLQrv4u0yQT8Fm5F pSO4Ktj9RA08cpFeCICsmEXc2gjNN2qhgdj+prFD0f94CMqmvew8k13RH1hRh+C0 4XTSWnWAlfqMtYE7j9K0cDWwRiUHCQu5eDmC2CR/2sE0McBHSdJTxI5kNwEBde/i c/SQKjkHBbeQ6BY6R+9B8krQ0o/Z7UznSNmLR5hH+Qm7WRLEYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhMIGYCDShkvWwKqVyYLzDyHpHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMw NmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhhOGU0ZmYzMDcvOTc3ZmFhZjAtNzljMy0z ZGRkLThiYmQtODNhMWFhNzcyMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODUzMDZkOTAtMGYzNy00OWE4LWIw MGUtMDY4YThlNGZmMzA3Lzg1MzA2ZDkwLTBmMzctNDlhOC1iMDBlLTA2OGE4ZTRm ZjMwNy5jcmwwHwYDVR0jBBgwFoAU6W+vjk/ijY/2WK04zp8PXNFY//gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMwNmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhh OGU0ZmYzMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHanjnOPkdR2jh3Rag66WH72EZT14t35DFTe1EOTjYnIMKhObXbuaUx OVlZM+rbRyoE5NX4NY2lue4iSljCwJXcGjPljVVOUSjBjZj0xTSpzqNRMkaVczke +KopbovO5iQzCpZAcaBDgBJeBFA/JOXDvuNts4dB+nohgGcVg2VdpIQfjlfWcr9+ LBRxaYwKlFZF0yTnyqunOYX+762V+t3Ls8OgjjuojW7pqFDXg1g22/FByrRJS3zO 1av4r763UcbJwsXx49iezPWFOifXxNlem1RqsAEYvaUMfvl19JhNsceV7WeBFtQ5 i3fGcobErH9jTcvyr0ajXAblCgX6MQ8= -----END CERTIFICATE-----Generated at Fri Nov 28 07:19:25 2025 by rpki-client