This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa File: db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa (raw, json) Hash identifier: DpzB0RkT1vBZglJrbrvvjarHK550i44pjUo2gxGVqHk= Subject key identifier: CD:31:96:0E:F8:B2:16:81:43:94:0E:20:57:48:CA:6A:6F:36:38:E5 Certificate issuer: /CN=8f0b1fb6-c822-4463-9321-b88b9a81302c Certificate serial: 010D0C9F4328584BEC508DB8C5FC3C9601C93080 Authority key identifier: 01:F6:42:9E:0B:5B:80:A4:DC:E4:64:15:83:C6:8C:41:69:C7:33:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 400204 IP address blocks: 207.167.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:8d:b8:c5:fc:3c:96:01:c9:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0b1fb6-c822-4463-9321-b88b9a81302c Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=b00879a8-0de8-4de6-87f1-6d23432a1219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:9b:f7:6b:2e:7b:7d:19:08:9f:f3:26:46: cc:9d:a3:82:fc:26:07:4d:2c:82:0d:e3:0a:12:3f: 87:85:b1:b8:b9:49:71:9e:9e:62:0b:e6:5d:53:4c: 6b:f3:b1:b4:ac:ac:5d:6e:5a:9c:e8:71:d3:ba:2c: ad:e6:19:80:ef:d0:68:92:ce:ec:75:95:49:4a:53: c9:53:90:22:8e:1d:1c:65:e9:2a:fe:a2:8b:ce:a8: a5:a8:f2:99:df:fc:bb:aa:bd:76:07:aa:a9:93:0c: bc:59:97:d3:4b:87:b1:c6:5a:50:30:9f:b0:12:db: b5:45:76:ac:42:ad:9b:9e:17:eb:d7:8f:e6:c8:97: 1b:60:f6:7d:d3:56:b7:be:78:ee:48:d2:56:43:30: 91:59:e5:31:b4:ca:c1:00:1d:93:60:f0:93:71:90: 25:ee:69:ce:56:c7:78:fe:ca:c3:cd:de:f1:07:81: 72:15:46:5a:18:6d:94:d2:7d:27:83:83:80:03:51: e6:3c:ee:90:00:a5:68:10:38:aa:6f:3d:96:e2:6a: 10:18:84:84:ad:36:ff:0e:79:d8:72:0d:f5:d1:aa: a7:26:6f:d0:1f:e0:b4:26:e4:ab:fe:61:9e:65:76: b3:91:e5:c2:75:d1:ea:74:32:d1:4d:f2:b3:db:c9: 9d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:31:96:0E:F8:B2:16:81:43:94:0E:20:57:48:CA:6A:6F:36:38:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/db6221b0-2a35-37dc-b02d-7429cd3d3e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c/8f0b1fb6-c822-4463-9321-b88b9a81302c.crl X509v3 Authority Key Identifier: keyid:01:F6:42:9E:0B:5B:80:A4:DC:E4:64:15:83:C6:8C:41:69:C7:33:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f0b1fb6-c822-4463-9321-b88b9a81302c.cer sbgp-ipAddrBlock: critical IPv4: 207.167.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:60:cd:e0:db:4a:45:cc:68:2a:c9:04:48:fd:84:1f:e1:ba: d5:07:b2:0b:d0:4e:b8:a7:ba:a4:0f:81:8a:a0:ba:53:8c:2b: 0f:bc:55:ed:4a:8e:06:7d:2d:23:42:ae:98:07:fb:43:75:11: fd:83:85:b3:70:0e:a2:49:43:95:85:e8:c1:c1:9e:29:a9:a5: b0:72:b2:95:e3:72:c2:98:d7:d1:8b:78:c0:58:5d:b1:bb:1c: 7b:90:b5:fe:7a:70:39:91:bc:8c:4d:03:b5:95:fe:bd:95:92: 98:15:b6:e1:95:c9:ae:a3:93:48:5c:bc:94:8b:29:83:ce:41: 64:a0:93:51:cd:07:11:b2:5e:0d:23:35:f2:2d:a5:56:cc:b9: e3:34:87:fb:ad:c7:41:db:bd:d2:31:93:db:f9:74:cb:7b:d2: a3:b9:bd:a2:8a:f7:bc:67:d9:62:f4:16:3d:84:db:fe:27:e6: 8b:3d:44:5c:c3:0e:4c:ee:e0:f5:2c:72:38:8f:ca:c4:ae:71: 68:43:84:77:9f:63:f7:2d:ec:04:a3:51:d4:02:ba:ec:3b:88: 08:35:cc:53:90:7e:77:4d:0f:f4:a2:a6:ff:29:5b:30:13:35: f9:17:42:5c:f1:1c:cc:65:d9:ed:3b:1d:60:a5:78:02:98:2b: 11:48:c3:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsUI24xfw8lgHJMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYjFmYjYtYzgyMi00NDYzLTkzMjEtYjg4YjlhODEz MDJjMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk YjAwODc5YTgtMGRlOC00ZGU2LTg3ZjEtNmQyMzQzMmExMjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfub92sue30ZCJ/zJkbMnaOC/CYHTSyCDeMK Ej+HhbG4uUlxnp5iC+ZdU0xr87G0rKxdblqc6HHTuiyt5hmA79Boks7sdZVJSlPJ U5Aijh0cZekq/qKLzqilqPKZ3/y7qr12B6qpkwy8WZfTS4exxlpQMJ+wEtu1RXas Qq2bnhfr14/myJcbYPZ901a3vnjuSNJWQzCRWeUxtMrBAB2TYPCTcZAl7mnOVsd4 /srDzd7xB4FyFUZaGG2U0n0ng4OAA1HmPO6QAKVoEDiqbz2W4moQGISErTb/DnnY cg310aqnJm/QH+C0JuSr/mGeZXazkeXCddHqdDLRTfKz28mdFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0xlg74shaBQ5QOIFdIympvNjjlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjBi MWZiNi1jODIyLTQ0NjMtOTMyMS1iODhiOWE4MTMwMmMvZGI2MjIxYjAtMmEzNS0z N2RjLWIwMmQtNzQyOWNkM2QzZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGYwYjFmYjYtYzgyMi00NDYzLTkz MjEtYjg4YjlhODEzMDJjLzhmMGIxZmI2LWM4MjItNDQ2My05MzIxLWI4OGI5YTgx MzAyYy5jcmwwHwYDVR0jBBgwFoAUAfZCngtbgKTc5GQVg8aMQWnHMw8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjBiMWZiNi1jODIyLTQ0NjMtOTMyMS1iODhi OWE4MTMwMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6d7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZgzeDbSkXMaCrJBEj9hB/hutUHsgvQTrinuqQPgYqgulOMKw+8Ve1K jgZ9LSNCrpgH+0N1Ef2DhbNwDqJJQ5WF6MHBnimppbByspXjcsKY19GLeMBYXbG7 HHuQtf56cDmRvIxNA7WV/r2VkpgVtuGVya6jk0hcvJSLKYPOQWSgk1HNBxGyXg0j NfItpVbMueM0h/utx0HbvdIxk9v5dMt70qO5vaKK97xn2WL0Fj2E2/4n5os9RFzD Dkzu4PUscjiPysSucWhDhHefY/ct7ASjUdQCuuw7iAg1zFOQfndND/Sipv8pWzAT NfkXQlzxHMxl2e07HWCleAKYKxFIw+0= -----END CERTIFICATE-----Generated at Sat Nov 22 21:21:01 2025 by rpki-client