This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09682562-d95b-3b45-9c54-52d357f3a7e2.roa File: 09682562-d95b-3b45-9c54-52d357f3a7e2.roa (raw, json) Hash identifier: Jx8EOr6rEjyqGUOpk67NGWDjshVCJa5x30i6tLVJBb0= Subject key identifier: 3B:54:9F:01:16:20:6D:DE:C8:BA:5A:A6:65:10:23:B1:C5:A6:47:0E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BF9D00C6B5FA0C5F9A80A4340 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09682562-d95b-3b45-9c54-52d357f3a7e2.roa Signing time: Tue 25 Nov 2025 10:03:10 +0000 ROA not before: Tue 25 Nov 2025 10:03:10 +0000 ROA not after: Mon 23 Feb 2026 10:03:10 +0000 asID: 32693 IP address blocks: 68.164.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f9:d0:0c:6b:5f:a0:c5:f9:a8:0a:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 25 10:03:10 2025 GMT Not After : Feb 23 10:03:10 2026 GMT Subject: CN=c8bf1fad-ea30-41a8-950f-db1c487c5e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:10:bc:ed:7c:ea:1d:58:ba:ad:99:94:97:03: a2:a9:94:9b:eb:8f:44:49:a6:97:68:9c:41:e7:3e: 51:58:b7:69:1c:0d:a6:44:3c:33:ef:cb:ce:73:9d: aa:ea:30:cf:83:2f:08:4c:eb:c8:6c:f2:ca:14:f8: b6:6f:79:2e:47:80:25:e0:45:4f:76:99:24:ed:03: d8:6a:3c:e0:26:86:10:bc:72:cf:fc:f9:b2:f1:78: fe:a8:7f:7d:a8:b4:47:83:72:de:ae:02:6f:bc:f2: d0:dd:98:b8:b5:e0:bc:c5:74:20:3a:f5:df:cb:3f: 84:d3:1c:be:fa:9a:92:35:93:02:b3:59:10:83:8f: 4f:44:5c:74:df:b8:f8:de:51:31:5b:a1:df:10:3c: 95:d5:08:9a:9c:a2:df:54:d7:06:1d:1f:9e:f9:a8: 7c:ec:bb:cd:d5:81:11:14:dd:07:21:89:e8:e4:c6: ac:40:41:c3:5d:8b:f0:ef:f6:dc:46:d9:19:79:fa: b0:26:75:60:e9:eb:0b:88:5f:a7:b2:cf:44:77:3c: 88:af:80:a7:1d:9b:87:18:d2:1b:45:35:90:7f:70: 56:af:f3:8b:a9:9f:b7:43:9c:f3:bd:a2:5c:63:d7: 71:4a:32:b1:1a:31:93:7a:32:b5:f2:ea:83:f4:10: 7c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:54:9F:01:16:20:6D:DE:C8:BA:5A:A6:65:10:23:B1:C5:A6:47:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09682562-d95b-3b45-9c54-52d357f3a7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:5b:19:f9:cd:3d:78:87:46:10:42:d8:41:59:eb:73:9f:af: 9f:6c:38:8a:a0:76:8c:23:06:d2:37:4b:e3:41:4b:33:7b:9e: f3:f1:7b:18:e2:17:f5:20:95:f6:27:6e:a1:f6:99:a3:31:f4: f8:21:c5:32:e7:b0:8c:24:72:0f:e4:bf:47:7d:f3:44:e9:60: 90:f8:75:97:ee:09:b9:8e:5d:23:cd:7c:c2:80:a4:e6:22:6c: 03:ad:92:3e:49:c7:ab:96:ad:23:26:da:6a:73:f2:25:d3:50: 23:9d:97:cb:49:d4:41:fb:7e:b5:4f:62:47:ff:5c:1f:c3:53: 85:64:9a:f8:06:70:b5:ce:4b:f0:92:7f:da:26:a1:5a:c7:95: eb:89:53:62:f9:ca:53:c1:e9:ab:37:7f:7d:c9:92:3f:c0:e7: 8e:91:5f:fd:f7:d0:59:86:34:5f:89:5c:02:3a:5f:f9:34:8b: 56:25:41:80:d6:af:dc:8c:7d:04:8b:4c:c2:31:e8:ef:74:57: ef:2f:a0:78:5c:eb:dc:e2:82:1f:9a:02:29:b5:21:0d:f6:66: b7:8c:de:d2:98:b9:6f:31:11:e4:53:0b:c2:70:ab:86:68:a6: 62:2f:fd:34:43:b9:47:91:96:ac:2d:63:85:91:38:c1:6e:c7: 98:cd:fd:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv50AxrX6DF+agKQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyNTEwMDMxMFoXDTI2MDIyMzEwMDMxMFowLzEtMCsGA1UEAxMk YzhiZjFmYWQtZWEzMC00MWE4LTk1MGYtZGIxYzQ4N2M1ZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhC87XzqHVi6rZmUlwOiqZSb649ESaaXaJxB 5z5RWLdpHA2mRDwz78vOc52q6jDPgy8ITOvIbPLKFPi2b3kuR4Al4EVPdpkk7QPY ajzgJoYQvHLP/Pmy8Xj+qH99qLRHg3LergJvvPLQ3Zi4teC8xXQgOvXfyz+E0xy+ +pqSNZMCs1kQg49PRFx037j43lExW6HfEDyV1QianKLfVNcGHR+e+ah87LvN1YER FN0HIYno5MasQEHDXYvw7/bcRtkZefqwJnVg6esLiF+nss9EdzyIr4CnHZuHGNIb RTWQf3BWr/OLqZ+3Q5zzvaJcY9dxSjKxGjGTejK18uqD9BB8IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtUnwEWIG3eyLpapmUQI7HFpkcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDk2ODI1NjItZDk1Yi0z YjQ1LTljNTQtNTJkMzU3ZjNhN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJbGfnNPXiHRhBC2EFZ63Ofr59sOIqgdowjBtI3S+NBSzN7nvPxexji F/UglfYnbqH2maMx9PghxTLnsIwkcg/kv0d980TpYJD4dZfuCbmOXSPNfMKApOYi bAOtkj5Jx6uWrSMm2mpz8iXTUCOdl8tJ1EH7frVPYkf/XB/DU4VkmvgGcLXOS/CS f9omoVrHleuJU2L5ylPB6as3f33Jkj/A546RX/330FmGNF+JXAI6X/k0i1YlQYDW r9yMfQSLTMIx6O90V+8voHhc69zigh+aAim1IQ32ZreM3tKYuW8xEeRTC8Jwq4Zo pmIv/TRDuUeRlqwtY4WROMFux5jN/TA= -----END CERTIFICATE-----Generated at Tue Nov 25 14:49:04 2025 by rpki-client