This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3739e65b-d084-309d-9e29-642cfc07f219.roa File: 3739e65b-d084-309d-9e29-642cfc07f219.roa (raw, json) Hash identifier: /JbQLxintHYYp5DzkZowfbTD0TJy4vfcVQSMaN88/Wg= Subject key identifier: 3A:C2:7A:E7:B7:44:55:E3:51:EF:CB:92:46:C6:3B:BA:4A:1A:54:BD Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C5C3D56CBCCA5B4C219C40880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3739e65b-d084-309d-9e29-642cfc07f219.roa Signing time: Tue 30 Dec 2025 16:12:36 +0000 ROA not before: Tue 30 Dec 2025 16:12:36 +0000 ROA not after: Mon 30 Mar 2026 15:12:36 +0000 asID: 11059 IP address blocks: 209.101.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5c:3d:56:cb:cc:a5:b4:c2:19:c4:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 30 16:12:36 2025 GMT Not After : Mar 30 15:12:36 2026 GMT Subject: CN=b2a7cce6-174b-45c5-9ebd-5ee194893297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:fa:d5:a6:ba:71:e9:d7:42:38:b8:8e:94: d7:46:25:1d:27:f5:68:ff:62:e2:5f:fa:6d:fb:9e: 62:17:5c:ab:7f:9a:7c:7a:ea:e4:0a:c9:54:da:f8: 8b:b1:33:53:57:17:b6:47:2f:a5:a9:b7:6e:b6:0d: 5d:c5:c8:a7:2a:bb:ee:2f:e0:03:f8:da:b7:a8:70: b1:6b:ac:f1:6a:f1:94:40:18:0d:26:aa:8e:9f:ea: d8:66:3d:67:e8:5e:d7:0f:49:51:ce:29:26:e5:8c: 89:73:93:01:2b:c3:2d:d6:a8:f1:78:32:85:bd:bc: a2:37:dd:f4:bf:3c:56:d1:3b:d9:43:37:70:52:69: 62:8d:ab:f6:f4:b0:42:c9:1e:78:e0:41:27:47:20: 9b:98:f9:7e:e0:f0:f9:59:f1:d0:67:0c:df:e2:77: 8c:30:5e:82:2f:74:62:03:73:9e:c9:72:7a:b7:10: 4f:de:26:81:5b:31:27:b5:b0:20:e4:ce:58:d2:a2: 2e:7a:38:75:ac:f1:01:8e:29:6e:af:d7:d3:40:4b: 22:58:dd:9f:5d:67:13:d0:3d:cb:35:f0:60:27:a9: 9a:e4:29:6e:76:94:d3:25:2c:3d:78:3f:e5:34:73: 66:36:08:f8:23:90:d1:dc:b4:35:b7:00:0c:b1:36: ae:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C2:7A:E7:B7:44:55:E3:51:EF:CB:92:46:C6:3B:BA:4A:1A:54:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3739e65b-d084-309d-9e29-642cfc07f219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:58:bb:e3:3d:a0:09:ba:29:21:e4:d4:2c:da:73:49:17:1b: 31:7a:f7:43:a4:68:7e:0a:ce:ae:e5:23:66:88:29:7f:df:d9: 3d:32:8d:59:62:de:e7:b9:0e:cf:0e:58:b7:f5:91:1f:1d:94: 22:bd:51:d0:7a:d8:f2:59:7d:50:ee:81:5d:a6:02:fe:84:90: 9d:ad:d2:1f:b0:d3:35:ab:81:ec:ff:3f:43:36:5c:6c:ad:df: 93:af:d1:14:c6:ba:9b:dd:c0:f2:ee:2f:54:d2:b9:9e:f8:b4: 5e:e1:e4:c1:28:1d:3f:2c:4a:fd:30:85:fc:a7:1d:21:d7:49: 8d:06:d5:85:88:e4:c0:ea:e4:2c:b0:31:cf:92:5f:1f:f2:68: 3f:87:ec:24:95:c8:7a:69:57:1c:4a:cc:82:34:6b:3d:ef:16: 3a:0a:70:f9:2f:66:23:d7:ea:86:0c:9f:7d:2d:d3:81:cd:0e: a5:3f:7e:a1:83:66:c4:25:83:86:07:c5:b9:30:48:7c:0a:02: 44:35:fe:d3:1c:56:24:96:14:d3:e5:20:9e:36:0a:92:66:d4: 6e:cd:ae:7a:e2:3c:d2:a3:17:81:a7:f0:12:30:a3:ef:4b:cc: 0f:d8:b9:17:c5:4b:41:30:c9:be:90:38:ab:11:02:4b:34:d3: a2:5a:0b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExcPVbLzKW0whnECIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIzMDE2MTIzNloXDTI2MDMzMDE1MTIzNlowLzEtMCsGA1UEAxMk YjJhN2NjZTYtMTc0Yi00NWM1LTllYmQtNWVlMTk0ODkzMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSH61aa6cenXQji4jpTXRiUdJ/Vo/2LiX/pt +55iF1yrf5p8eurkCslU2viLsTNTVxe2Ry+lqbdutg1dxcinKrvuL+AD+Nq3qHCx a6zxavGUQBgNJqqOn+rYZj1n6F7XD0lRzikm5YyJc5MBK8Mt1qjxeDKFvbyiN930 vzxW0TvZQzdwUmlijav29LBCyR544EEnRyCbmPl+4PD5WfHQZwzf4neMMF6CL3Ri A3OeyXJ6txBP3iaBWzEntbAg5M5Y0qIuejh1rPEBjilur9fTQEsiWN2fXWcT0D3L NfBgJ6ma5CludpTTJSw9eD/lNHNmNgj4I5DR3LQ1twAMsTauIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrCeue3RFXjUe/LkkbGO7pKGlS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzczOWU2NWItZDA4NC0z MDlkLTllMjktNjQyY2ZjMDdmMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFYu+M9oAm6KSHk1Czac0kXGzF690OkaH4Kzq7lI2aIKX/f2T0yjVli 3ue5Ds8OWLf1kR8dlCK9UdB62PJZfVDugV2mAv6EkJ2t0h+w0zWrgez/P0M2XGyt 35Ov0RTGupvdwPLuL1TSuZ74tF7h5MEoHT8sSv0whfynHSHXSY0G1YWI5MDq5Cyw Mc+SXx/yaD+H7CSVyHppVxxKzII0az3vFjoKcPkvZiPX6oYMn30t04HNDqU/fqGD ZsQlg4YHxbkwSHwKAkQ1/tMcViSWFNPlIJ42CpJm1G7NrnriPNKjF4Gn8BIwo+9L zA/YuRfFS0Ewyb6QOKsRAks006JaC6k= -----END CERTIFICATE-----Generated at Sat Jan 10 04:20:43 2026 by rpki-client