This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09d1326b-13ee-3145-b3f0-d475aa7b5b04.roa File: 09d1326b-13ee-3145-b3f0-d475aa7b5b04.roa (raw, json) Hash identifier: o4uk+EaDrLG9qaCrgg1GW1fzSRL8fOGIsdj1AxeDuZ4= Subject key identifier: 2B:32:CB:FC:31:A5:9A:69:49:A9:7C:FE:52:FC:13:F2:05:56:AA:34 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BF3E6B2D24288281E43AF3980 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09d1326b-13ee-3145-b3f0-d475aa7b5b04.roa Signing time: Sun 23 Nov 2025 07:13:57 +0000 ROA not before: Sun 23 Nov 2025 07:13:57 +0000 ROA not after: Sat 21 Feb 2026 07:13:57 +0000 asID: 834 IP address blocks: 64.204.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f3:e6:b2:d2:42:88:28:1e:43:af:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 23 07:13:57 2025 GMT Not After : Feb 21 07:13:57 2026 GMT Subject: CN=ff6195a5-8a72-4f01-bf7b-1803a8be2d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6f:30:cf:15:00:31:32:ce:49:9b:eb:5d:bc: 83:a4:ac:59:bd:b0:52:9d:05:a5:b9:e1:02:7f:52: 53:55:64:3c:dc:98:00:e1:62:c5:bb:0e:53:b2:c3: b1:a7:75:aa:23:d0:dc:bf:93:a2:5e:ae:3f:94:7a: 96:62:9f:e1:92:de:42:0d:19:63:df:91:24:dd:1c: cd:c5:2c:7e:f9:be:f1:53:b2:f7:1e:8c:35:70:7c: 14:04:b3:f3:41:e7:3c:6a:db:62:86:6f:3f:36:9b: a9:7c:a6:2b:f1:9c:a2:b5:ff:12:da:c2:44:70:05: 5c:34:d0:5c:11:2c:51:08:6e:bd:71:98:c9:7c:5d: 8f:1b:70:bd:7a:7a:f6:90:2b:cd:15:f7:12:9b:4e: 20:40:88:e7:0a:7d:3e:89:6d:65:63:d3:5e:23:a0: 61:ae:2f:81:7f:0b:e5:3f:9e:4c:aa:5a:0d:29:bd: 50:bf:2c:0a:15:34:96:93:ca:72:96:44:6e:9d:98: b6:e5:b0:16:29:a2:31:65:bf:74:0d:e2:04:79:4c: 2d:3e:e8:e0:f7:bc:9c:8b:56:98:15:cf:a9:dc:d5: 24:4a:2e:ea:08:ea:84:6e:a3:d5:06:36:b8:b7:3d: d2:a6:2d:67:5b:ec:c8:a0:0c:e4:c5:24:66:29:72: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:32:CB:FC:31:A5:9A:69:49:A9:7C:FE:52:FC:13:F2:05:56:AA:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/09d1326b-13ee-3145-b3f0-d475aa7b5b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:33:7d:80:1c:72:6b:fd:f4:96:54:c3:f4:cb:36:d3:92:71: 7b:c0:5e:34:68:fc:e6:90:bb:b5:f8:e2:57:19:20:24:5f:3f: 17:e5:7d:9e:27:11:da:b8:68:91:21:e7:98:d1:41:68:00:82: c4:d2:26:53:08:87:35:ba:8a:bd:35:82:b2:42:95:39:8f:9b: dd:ee:73:5c:01:3d:cf:1e:3c:1a:16:3f:b8:a5:d3:03:67:2f: e3:90:52:25:69:c9:c4:69:0c:e3:c2:da:0d:c3:c3:74:76:24: 0d:5e:b4:1c:e4:82:85:8d:c1:f0:7a:2b:dd:c9:61:17:d9:b5: 0b:ef:79:90:3b:32:c4:1f:37:26:63:54:a8:9b:06:20:a2:bf: 2d:86:39:1b:9a:be:3a:03:11:76:0b:a3:17:0d:ee:c0:4b:a6: 37:59:3d:24:ad:1c:80:99:6f:33:b8:56:a0:1c:b6:06:ad:d5: 86:85:61:b0:bf:3d:22:90:b4:bb:1f:5a:79:e5:74:75:3e:03: fa:df:e6:f5:4e:aa:c3:d9:1b:9b:f7:d3:e2:f3:c4:f5:62:5e: b5:39:86:2b:a1:bb:20:ac:12:80:ec:53:86:f6:1a:1b:f3:64: fa:38:7c:97:24:f3:1d:9e:bc:cb:fd:6e:ac:14:5b:ac:cc:7e: ec:3c:2c:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvz5rLSQogoHkOvOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyMzA3MTM1N1oXDTI2MDIyMTA3MTM1N1owLzEtMCsGA1UEAxMk ZmY2MTk1YTUtOGE3Mi00ZjAxLWJmN2ItMTgwM2E4YmUyZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA628wzxUAMTLOSZvrXbyDpKxZvbBSnQWlueEC f1JTVWQ83JgA4WLFuw5TssOxp3WqI9Dcv5OiXq4/lHqWYp/hkt5CDRlj35Ek3RzN xSx++b7xU7L3How1cHwUBLPzQec8attihm8/NpupfKYr8Zyitf8S2sJEcAVcNNBc ESxRCG69cZjJfF2PG3C9enr2kCvNFfcSm04gQIjnCn0+iW1lY9NeI6Bhri+Bfwvl P55MqloNKb1QvywKFTSWk8pylkRunZi25bAWKaIxZb90DeIEeUwtPujg97yci1aY Fc+p3NUkSi7qCOqEbqPVBja4tz3Spi1nW+zIoAzkxSRmKXLxbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsyy/wxpZppSal8/lL8E/IFVqo0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDlkMTMyNmItMTNlZS0z MTQ1LWIzZjAtZDQ3NWFhN2I1YjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIzfYAccmv99JZUw/TLNtOScXvAXjRo/OaQu7X44lcZICRfPxflfZ4n Edq4aJEh55jRQWgAgsTSJlMIhzW6ir01grJClTmPm93uc1wBPc8ePBoWP7il0wNn L+OQUiVpycRpDOPC2g3Dw3R2JA1etBzkgoWNwfB6K93JYRfZtQvveZA7MsQfNyZj VKibBiCivy2GORuavjoDEXYLoxcN7sBLpjdZPSStHICZbzO4VqActgat1YaFYbC/ PSKQtLsfWnnldHU+A/rf5vVOqsPZG5v30+LzxPViXrU5hiuhuyCsEoDsU4b2Ghvz ZPo4fJck8x2evMv9bqwUW6zMfuw8LMY= -----END CERTIFICATE-----Generated at Tue Nov 25 14:49:14 2025 by rpki-client