This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa File: df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa (raw, json) Hash identifier: pX99dVXTRCpeaL8C5ZngOsUCEvHf2Zj+lJaOkCPRw1I= Subject key identifier: 21:48:71:C9:33:49:6A:E6:73:5A:12:E7:24:0C:EA:1D:7B:AB:BB:A3 Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F4328584C2F50EF72D9AE773BC5096600 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa Signing time: Sun 14 Dec 2025 14:00:39 +0000 ROA not before: Sun 14 Dec 2025 14:00:39 +0000 ROA not after: Sat 14 Mar 2026 13:00:39 +0000 asID: 16509 IP address blocks: 216.185.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2f:50:ef:72:d9:ae:77:3b:c5:09:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Dec 14 14:00:39 2025 GMT Not After : Mar 14 13:00:39 2026 GMT Subject: CN=a8b2339b-2486-47db-964f-e79081cac2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5f:59:97:67:d5:69:d0:97:74:6c:7b:5a:de: 5a:69:8a:92:02:08:31:ca:97:61:5d:ec:ad:94:73: 93:28:e2:d6:8a:72:2b:36:46:5d:8f:6f:86:ab:19: 05:fa:c6:9f:a9:9c:39:c9:44:0f:2b:1b:be:ba:22: 1d:a4:5c:47:03:ba:de:80:a8:a8:b4:0e:eb:93:78: 0f:f4:38:de:bd:94:5f:b0:92:1b:b7:dd:ee:11:41: 77:c2:7e:ac:d8:7c:43:30:6d:62:9e:2f:17:86:bb: 5e:ca:66:a4:57:cd:ae:74:05:a5:88:82:b3:57:58: fd:40:00:a1:61:d0:0f:87:1f:b9:bd:fd:70:3a:50: ac:47:1a:6f:08:90:35:3e:f7:54:5a:83:47:99:f9: 61:f3:0b:be:bf:f6:bf:61:8f:79:08:e1:d4:f1:51: 66:cc:80:85:03:8c:43:58:9a:d8:6a:b4:a2:90:a6: a8:15:65:5b:cc:47:5a:bf:c6:8a:d1:4b:3f:c9:6b: 91:62:76:6d:6a:f1:91:78:d7:47:25:f4:5d:7e:64: fe:d6:ad:ab:58:d7:95:fc:34:a7:ea:35:00:b5:d8: 13:64:dc:63:e7:18:1e:62:fe:25:27:47:09:2b:7a: 92:78:1a:e9:66:03:eb:51:9d:7c:44:39:58:c4:fd: 57:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:48:71:C9:33:49:6A:E6:73:5A:12:E7:24:0C:EA:1D:7B:AB:BB:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/df9b55a7-fb1a-3cd0-b9e3-dd178cb24eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv4: 216.185.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:4d:68:db:98:a9:ba:cd:47:61:a5:24:97:b8:2d:e0:33:15: 21:a8:aa:63:d2:43:3e:15:ea:c7:37:eb:6e:ea:84:82:a3:81: 12:4d:10:1b:20:1d:54:54:17:ab:22:2d:61:d8:4a:84:d4:8a: 01:67:41:9d:2b:f7:16:30:11:36:37:64:45:35:2b:6c:6b:b7: 41:73:d5:be:ad:28:ce:cd:3f:be:9b:dc:56:80:02:25:9a:17: 9d:95:f2:f4:cf:89:b2:11:20:16:03:23:7a:a4:34:4b:d5:53: d9:82:b9:50:df:ce:6d:37:d8:e6:88:23:e9:43:67:67:50:e5: 25:d3:7b:cf:63:3a:f1:85:58:b7:1b:b8:0a:48:24:65:57:35: fd:1c:31:a4:7b:37:a6:d5:1b:95:1e:0f:17:27:ff:a8:8b:98: 8f:e0:2f:ec:d1:81:6a:1e:8f:93:05:c5:5e:9a:1e:f3:45:15: 3a:59:b1:32:68:9e:f5:a7:f1:b7:6f:ea:bd:9c:dc:76:0e:cf: 13:15:7a:43:67:11:5a:b9:49:c0:29:23:e6:1f:5f:90:1a:8d: 24:97:77:d8:e8:9a:04:44:0b:3f:5c:16:10:69:57:15:3b:0f: 73:5c:93:0f:28:9f:b6:0b:bd:aa:fe:ab:12:d9:c1:00:61:ee: ab:de:93:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwvUO9y2a53O8UJZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MTIxNDE0MDAzOVoXDTI2MDMxNDEzMDAzOVowLzEtMCsGA1UEAxMk YThiMjMzOWItMjQ4Ni00N2RiLTk2NGYtZTc5MDgxY2FjMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF9Zl2fVadCXdGx7Wt5aaYqSAggxypdhXeyt lHOTKOLWinIrNkZdj2+GqxkF+safqZw5yUQPKxu+uiIdpFxHA7regKiotA7rk3gP 9DjevZRfsJIbt93uEUF3wn6s2HxDMG1ini8XhrteymakV82udAWliIKzV1j9QACh YdAPhx+5vf1wOlCsRxpvCJA1PvdUWoNHmflh8wu+v/a/YY95COHU8VFmzICFA4xD WJrYarSikKaoFWVbzEdav8aK0Us/yWuRYnZtavGReNdHJfRdfmT+1q2rWNeV/DSn 6jUAtdgTZNxj5xgeYv4lJ0cJK3qSeBrpZgPrUZ18RDlYxP1XDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFIcckzSWrmc1oS5yQM6h17q7ujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvZGY5YjU1YTctZmIxYS0z Y2QwLWI5ZTMtZGQxNzhjYjI0ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5NaNuYqbrNR2GlJJe4LeAzFSGoqmPSQz4V6sc3627qhIKjgRJNEBsg HVRUF6siLWHYSoTUigFnQZ0r9xYwETY3ZEU1K2xrt0Fz1b6tKM7NP76b3FaAAiWa F52V8vTPibIRIBYDI3qkNEvVU9mCuVDfzm032OaII+lDZ2dQ5SXTe89jOvGFWLcb uApIJGVXNf0cMaR7N6bVG5UeDxcn/6iLmI/gL+zRgWoej5MFxV6aHvNFFTpZsTJo nvWn8bdv6r2c3HYOzxMVekNnEVq5ScApI+YfX5AajSSXd9jomgRECz9cFhBpVxU7 D3Nckw8on7YLvar+qxLZwQBh7qvek2o= -----END CERTIFICATE-----Generated at Sat Dec 20 16:02:17 2025 by rpki-client