This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa File: d23c1663-1dc9-338f-b7d7-799b68465589.roa (raw, json) Hash identifier: J8SyoRPoJSxOpQ56DD30ZUsYSuzFvA5ktFv0aG8O4KM= Subject key identifier: 03:2A:49:A8:FF:44:EA:05:0D:62:2E:A8:8B:03:6C:19:68:E0:1C:32 Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F4328584C1A60C4FE6ABDE1ACE2461240 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa Signing time: Sun 07 Dec 2025 02:00:30 +0000 ROA not before: Sun 07 Dec 2025 02:00:30 +0000 ROA not after: Sat 07 Mar 2026 02:00:30 +0000 asID: 77 IP address blocks: 204.9.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Feb 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1a:60:c4:fe:6a:bd:e1:ac:e2:46:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Dec 7 02:00:30 2025 GMT Not After : Mar 7 02:00:30 2026 GMT Subject: CN=8a96d630-3fb5-4ea3-8aa8-0baa657ec6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a7:c6:5a:e1:37:f0:66:fb:3b:43:83:4b:0c: e4:98:82:32:dc:90:a6:d2:29:09:8f:1a:a7:e0:74: b3:90:ec:d1:2c:3b:1d:63:da:96:c8:49:23:bb:1f: b4:61:8b:d6:52:97:c1:71:9b:08:6e:71:6b:14:2b: 46:4a:30:eb:99:32:c3:c3:f5:a6:3d:f0:0c:c2:7a: 46:38:49:6d:aa:1b:12:90:26:85:2a:f7:94:5a:cf: a4:82:13:39:27:b4:b0:56:63:86:da:71:09:4a:a3: 3c:ab:d2:26:e1:84:66:37:22:c2:3d:d1:43:14:bf: 92:fd:98:10:42:cb:fb:25:d1:93:9e:15:c0:81:0d: 7f:85:0e:5b:aa:65:26:5d:b9:f5:6c:1e:9f:90:50: 25:66:a9:b0:34:85:a3:64:6c:eb:4d:c2:fc:66:66: dc:90:25:dd:32:7a:70:b8:c4:50:7b:b1:64:f7:dc: 81:bd:1b:41:2f:a7:a9:d4:9c:64:f8:8d:f0:a3:06: f3:b0:08:0c:c1:ca:c5:6c:d1:d8:29:6b:11:88:65: 89:47:09:05:63:19:3c:52:bb:d7:52:a1:e0:3a:75: 8f:dc:8d:d3:33:06:74:75:a3:50:2d:33:fa:87:7d: 7b:3f:24:ff:5e:19:93:76:94:83:7c:ba:d9:91:48: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2A:49:A8:FF:44:EA:05:0D:62:2E:A8:8B:03:6C:19:68:E0:1C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv4: 204.9.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:e5:44:e8:fc:37:20:49:d1:04:0b:80:0b:ac:32:f6:c4:0f: 3c:17:23:57:91:ae:76:f3:fa:7f:b8:dc:91:c6:7e:c7:f8:7f: b6:dd:f6:9e:cb:5a:47:30:d9:e5:80:83:fc:c8:b8:05:9f:bf: 80:e9:10:3d:ac:d0:24:a6:a3:b5:10:d2:7d:20:97:74:92:58: d5:1b:e5:a9:a0:14:6f:b0:6b:8b:e1:b0:e3:dd:eb:81:97:d7: 75:61:27:b9:0c:35:6d:4a:42:4d:8e:a3:78:7e:d1:69:88:4f: 65:f1:eb:40:a1:22:2b:d5:98:e0:36:e1:ee:05:6f:95:3d:1c: 3a:1f:61:2d:5f:40:23:63:21:5d:b9:ee:54:e9:d8:62:fa:c8: df:0b:51:14:90:6d:5a:de:d4:7a:63:e3:cc:9f:17:f3:b7:e3: ca:7f:f2:b8:e6:d5:e6:e0:0b:88:e1:59:28:b7:93:95:1c:8b: 34:17:2b:5b:e7:97:36:f5:85:7d:96:5f:56:e9:2c:f5:ef:25: 99:b4:b5:e5:db:0e:1c:6f:fb:14:a6:3a:1e:1e:9b:8d:a5:e1: a3:3a:62:17:a7:ee:18:a2:6b:ef:c4:49:02:a7:68:c4:95:d6: c1:bc:97:5d:7e:2b:6f:ec:84:d4:7e:d0:63:c8:75:f9:e8:a6: ea:06:e5:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwaYMT+ar3hrOJGEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI1MTIwNzAyMDAzMFoXDTI2MDMwNzAyMDAzMFowLzEtMCsGA1UEAxMk OGE5NmQ2MzAtM2ZiNS00ZWEzLThhYTgtMGJhYTY1N2VjNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6fGWuE38Gb7O0ODSwzkmIIy3JCm0ikJjxqn 4HSzkOzRLDsdY9qWyEkjux+0YYvWUpfBcZsIbnFrFCtGSjDrmTLDw/WmPfAMwnpG OEltqhsSkCaFKveUWs+kghM5J7SwVmOG2nEJSqM8q9Im4YRmNyLCPdFDFL+S/ZgQ Qsv7JdGTnhXAgQ1/hQ5bqmUmXbn1bB6fkFAlZqmwNIWjZGzrTcL8ZmbckCXdMnpw uMRQe7Fk99yBvRtBL6ep1Jxk+I3wowbzsAgMwcrFbNHYKWsRiGWJRwkFYxk8UrvX UqHgOnWP3I3TMwZ0daNQLTP6h317PyT/XhmTdpSDfLrZkUjxywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMqSaj/ROoFDWIuqIsDbBlo4BwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvZDIzYzE2NjMtMWRjOS0z MzhmLWI3ZDctNzk5YjY4NDY1NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM3lROj8NyBJ0QQLgAusMvbEDzwXI1eRrnbz+n+43JHGfsf4f7bd9p7L Wkcw2eWAg/zIuAWfv4DpED2s0CSmo7UQ0n0gl3SSWNUb5amgFG+wa4vhsOPd64GX 13VhJ7kMNW1KQk2Oo3h+0WmIT2Xx60ChIivVmOA24e4Fb5U9HDofYS1fQCNjIV25 7lTp2GL6yN8LURSQbVre1Hpj48yfF/O348p/8rjm1ebgC4jhWSi3k5UcizQXK1vn lzb1hX2WX1bpLPXvJZm0teXbDhxv+xSmOh4em42l4aM6Yhen7hiia+/ESQKnaMSV 1sG8l11+K2/shNR+0GPIdfnopuoG5VY= -----END CERTIFICATE-----Generated at Thu Feb 5 07:22:56 2026 by rpki-client