This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1dd1f61d-d343-34ba-a4b8-47b5108fb2d0.roa File: 1dd1f61d-d343-34ba-a4b8-47b5108fb2d0.roa (raw, json) Hash identifier: hhWb5eNjHgjsdDL8Uk1Hh9uc/G6scvGi6uAV146lbWM= Subject key identifier: E2:4D:1C:42:87:4A:38:0E:6B:6C:19:F5:75:81:91:42:F8:FD:9D:06 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C23B2FE633DA0A963AD68F580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1dd1f61d-d343-34ba-a4b8-47b5108fb2d0.roa Signing time: Wed 10 Dec 2025 10:08:35 +0000 ROA not before: Wed 10 Dec 2025 10:08:35 +0000 ROA not after: Tue 10 Mar 2026 09:08:35 +0000 asID: 834 IP address blocks: 209.101.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:23:b2:fe:63:3d:a0:a9:63:ad:68:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 10 10:08:35 2025 GMT Not After : Mar 10 09:08:35 2026 GMT Subject: CN=01dc1102-36ea-4824-a298-486e1c060246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6f:21:db:79:4e:2e:1d:f0:8b:87:94:63:66: a9:fa:4b:bb:05:a3:fa:3f:cb:79:08:8c:79:3c:ff: 4a:81:54:02:d9:d3:bb:09:4d:bf:86:b0:a8:c3:c8: aa:b7:8e:28:f6:b6:23:5b:37:22:9a:28:76:4a:b2: 86:c9:30:9b:18:d6:88:df:bf:44:6e:6e:80:6a:69: d1:04:1e:1f:60:b4:b9:59:2b:bb:2d:ea:16:38:8c: c7:2d:e7:e1:d7:b3:f7:ef:c1:d3:e3:fb:90:b3:ec: e2:8b:a7:bd:49:8c:cf:58:7d:f2:b9:04:51:9a:df: 32:26:c8:35:51:22:95:1d:64:d2:7c:e8:2a:e4:b3: 21:13:c4:78:f4:46:35:fc:82:74:a1:e9:e1:97:d0: 04:ce:08:49:5c:56:b1:79:0d:f1:a5:4e:0a:3f:10: 16:9f:3c:0e:80:f9:69:20:a5:47:16:c7:85:8e:37: a9:40:59:3c:95:2d:b4:1e:44:f6:e0:13:09:55:50: 64:c1:43:24:44:76:10:5f:83:5a:e7:7b:07:9f:0e: 2e:4e:c9:55:67:a0:9a:be:a1:ed:02:f6:ad:3e:22: 20:a6:ff:d5:38:c8:a0:f5:52:00:78:95:f6:b3:11: 46:af:b4:a5:59:69:6b:dd:1c:57:d4:59:56:2a:3a: 40:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4D:1C:42:87:4A:38:0E:6B:6C:19:F5:75:81:91:42:F8:FD:9D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1dd1f61d-d343-34ba-a4b8-47b5108fb2d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:60:66:41:bb:fe:4a:93:5d:ae:33:60:a5:a4:24:d3:c3:c6: 0a:b3:4b:f4:02:48:6c:7b:05:b0:2f:54:66:6f:1c:bb:74:b0: 3c:e6:bd:3d:e6:f1:c7:4d:07:bb:3d:63:29:58:b6:8c:5c:13: 71:b3:9f:db:9b:a2:39:d1:78:19:6a:0a:1c:66:09:08:e6:52: 57:fb:60:ca:ca:68:8c:58:46:92:69:87:55:bd:39:3d:52:69: 49:95:ef:e1:a4:68:c1:d3:c4:a2:9d:98:9b:d2:78:ba:31:dd: 36:2b:42:af:ac:7c:43:04:94:14:7e:36:9a:48:1e:c8:cb:5c: 6f:35:0a:2d:64:3f:74:fd:11:03:e9:85:12:92:65:db:9c:fd: c9:cf:b0:dd:d0:17:6a:98:2d:49:a3:52:be:02:0d:93:1f:a9: 7c:6a:21:0d:d1:11:8a:a0:10:51:ce:d8:50:1f:02:7a:23:05: 3d:33:e6:91:63:e7:83:8b:be:13:9a:78:33:f2:99:2c:1f:16: b6:d4:10:0c:f1:ce:04:74:e1:0f:58:05:b2:dd:9f:c1:44:dc: 29:b0:63:04:7b:9e:74:91:d9:ca:41:f4:e9:fe:f4:fc:c9:65: ef:df:4c:70:6e:90:17:15:bd:a2:e0:d6:d3:aa:0e:31:9e:a3: 5f:e0:f4:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwjsv5jPaCpY61o9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIxMDEwMDgzNVoXDTI2MDMxMDA5MDgzNVowLzEtMCsGA1UEAxMk MDFkYzExMDItMzZlYS00ODI0LWEyOTgtNDg2ZTFjMDYwMjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm8h23lOLh3wi4eUY2ap+ku7BaP6P8t5CIx5 PP9KgVQC2dO7CU2/hrCow8iqt44o9rYjWzcimih2SrKGyTCbGNaI379Ebm6AamnR BB4fYLS5WSu7LeoWOIzHLefh17P378HT4/uQs+zii6e9SYzPWH3yuQRRmt8yJsg1 USKVHWTSfOgq5LMhE8R49EY1/IJ0oenhl9AEzghJXFaxeQ3xpU4KPxAWnzwOgPlp IKVHFseFjjepQFk8lS20HkT24BMJVVBkwUMkRHYQX4Na53sHnw4uTslVZ6CavqHt AvatPiIgpv/VOMig9VIAeJX2sxFGr7SlWWlr3RxX1FlWKjpAmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJNHEKHSjgOa2wZ9XWBkUL4/Z0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWRkMWY2MWQtZDM0My0z NGJhLWE0YjgtNDdiNTEwOGZiMmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChgZkG7/kqTXa4zYKWkJNPDxgqzS/QCSGx7BbAvVGZvHLt0sDzmvT3m 8cdNB7s9YylYtoxcE3Gzn9ubojnReBlqChxmCQjmUlf7YMrKaIxYRpJph1W9OT1S aUmV7+GkaMHTxKKdmJvSeLox3TYrQq+sfEMElBR+NppIHsjLXG81Ci1kP3T9EQPp hRKSZduc/cnPsN3QF2qYLUmjUr4CDZMfqXxqIQ3REYqgEFHO2FAfAnojBT0z5pFj 54OLvhOaeDPymSwfFrbUEAzxzgR04Q9YBbLdn8FE3CmwYwR7nnSR2cpB9On+9PzJ Ze/fTHBukBcVvaLg1tOqDjGeo1/g9Es= -----END CERTIFICATE-----Generated at Mon Dec 15 23:28:08 2025 by rpki-client