This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/348aff32-f9e9-3ace-9e33-be27ca2fa129.roa File: 348aff32-f9e9-3ace-9e33-be27ca2fa129.roa (raw, json) Hash identifier: Em+/oFO3vzRiOkso5aVChvfllmjzJwZak3IcmqfQyjc= Subject key identifier: 28:4C:2D:15:16:3D:92:BA:B4:D5:E4:2E:4C:4F:82:76:C6:4E:D4:43 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C50D123311E2324B921D4AA40 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/348aff32-f9e9-3ace-9e33-be27ca2fa129.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 7922 IP address blocks: 209.101.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:23:31:1e:23:24:b9:21:d4:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=05d73d97-e61f-4aaa-8f22-bfd62e9d4c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4c:da:38:58:dc:2b:ad:e2:83:f8:e4:a4:b1: cf:fa:87:ae:8b:19:3f:ed:a6:ad:b2:c8:1a:c2:b8: 7a:c3:f7:97:1b:24:66:03:64:72:40:a5:50:7a:b4: 91:f5:f1:13:d3:9e:aa:c0:a4:85:02:80:41:74:44: 73:64:1a:13:4d:c8:f4:97:c2:59:ca:a4:f8:15:c6: 33:91:08:eb:45:b9:98:7f:86:e8:7d:b7:5b:89:aa: 54:ce:f0:2f:17:84:5d:51:4d:ec:ee:fe:65:94:9e: 7c:80:46:ae:36:1f:61:40:7b:e6:65:56:99:aa:f6: 28:bd:a9:a6:aa:8a:a1:b0:d7:62:37:7f:af:2b:ad: 90:58:5b:73:da:70:91:ac:76:ab:7c:9e:96:71:da: 50:cc:02:67:c0:13:e1:b9:1d:4f:fb:c3:1c:c9:63: 94:3f:8e:80:ae:7e:e7:83:f8:42:b9:56:9a:fd:61: a7:47:3e:78:25:02:c8:30:61:d5:57:c3:64:3e:ad: 70:22:4f:95:f8:43:6a:58:d8:62:01:24:00:bf:9e: 18:b9:ae:4d:08:45:4f:e6:6a:99:df:de:36:9a:d9: 97:66:ea:7e:85:70:6c:a8:e0:7e:7e:bf:81:52:ac: a4:f0:11:db:0a:32:fa:75:40:e8:8c:78:8d:ad:88: 75:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4C:2D:15:16:3D:92:BA:B4:D5:E4:2E:4C:4F:82:76:C6:4E:D4:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/348aff32-f9e9-3ace-9e33-be27ca2fa129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:61:72:0c:43:60:4f:2b:50:d3:37:d5:49:a0:af:27:bd:3a: ff:d8:2c:3a:ad:d2:fc:32:a9:3a:f4:c7:4a:e0:c6:27:c1:dc: 26:98:81:70:b3:c2:6f:8b:2f:05:d3:fb:1e:02:09:91:c5:63: b1:6b:8a:12:a5:9a:d5:3d:cd:c1:ea:d5:cf:b2:13:4f:0e:f8: 9c:9a:2e:60:25:59:6c:ad:9d:d6:db:84:1f:7c:34:51:e3:c4: d6:69:01:f3:45:37:83:60:8d:46:4a:44:f5:ba:ae:21:d4:9b: aa:18:62:f8:7a:f9:a9:a4:da:8d:30:ac:ac:0a:80:a8:8a:c1: 36:3d:6d:2b:18:cb:6b:80:bf:a0:d8:9e:32:69:58:87:8d:95: fb:ea:6d:9b:0d:dd:2f:3b:21:73:f8:58:9e:3a:fc:15:9e:fc: ae:76:5a:7a:79:99:b8:7d:f7:ce:c2:af:fb:ad:57:a9:61:f5: 21:29:cf:86:0e:e2:15:60:81:97:0f:9a:a2:37:95:62:6e:de: 5f:8a:cc:cf:8d:b4:12:d0:d0:b9:cc:f0:52:ee:86:34:dd:e0: 34:1a:0a:af:94:21:c2:c3:c6:23:06:e4:02:c3:a7:27:18:98: 4c:0c:83:85:a6:ca:0a:d8:08:b0:f9:77:fc:ba:3e:e7:09:7a: a4:a7:0f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0SMxHiMkuSHUqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MDVkNzNkOTctZTYxZi00YWFhLThmMjItYmZkNjJlOWQ0YzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEzaOFjcK63ig/jkpLHP+oeuixk/7aatssga wrh6w/eXGyRmA2RyQKVQerSR9fET056qwKSFAoBBdERzZBoTTcj0l8JZyqT4FcYz kQjrRbmYf4bofbdbiapUzvAvF4RdUU3s7v5llJ58gEauNh9hQHvmZVaZqvYovamm qoqhsNdiN3+vK62QWFtz2nCRrHarfJ6WcdpQzAJnwBPhuR1P+8McyWOUP46Arn7n g/hCuVaa/WGnRz54JQLIMGHVV8NkPq1wIk+V+ENqWNhiASQAv54Yua5NCEVP5mqZ 3942mtmXZup+hXBsqOB+fr+BUqyk8BHbCjL6dUDojHiNrYh1KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChMLRUWPZK6tNXkLkxPgnbGTtRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzQ4YWZmMzItZjllOS0z YWNlLTllMzMtYmUyN2NhMmZhMTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WX5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVhcgxDYE8rUNM31Umgrye9Ov/YLDqt0vwyqTr0x0rgxifB3CaYgXCz wm+LLwXT+x4CCZHFY7FrihKlmtU9zcHq1c+yE08O+JyaLmAlWWytndbbhB98NFHj xNZpAfNFN4NgjUZKRPW6riHUm6oYYvh6+amk2o0wrKwKgKiKwTY9bSsYy2uAv6DY njJpWIeNlfvqbZsN3S87IXP4WJ46/BWe/K52Wnp5mbh9987Cr/utV6lh9SEpz4YO 4hVggZcPmqI3lWJu3l+KzM+NtBLQ0LnM8FLuhjTd4DQaCq+UIcLDxiMG5ALDpycY mEwMg4WmygrYCLD5d/y6PucJeqSnD+Y= -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:28 2026 by rpki-client