This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38629d7e-78f3-3838-8a8c-8dee5a19307d.roa File: 38629d7e-78f3-3838-8a8c-8dee5a19307d.roa (raw, json) Hash identifier: 875n95u+RaDmWZLQAiRz18NV69idcCuFBliZ2qHqm2A= Subject key identifier: D9:E7:4A:82:86:CC:7D:79:5B:23:88:60:61:71:B9:40:0A:EA:5A:7C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BFA1C87A905539D664DA30400 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38629d7e-78f3-3838-8a8c-8dee5a19307d.roa Signing time: Tue 25 Nov 2025 12:37:16 +0000 ROA not before: Tue 25 Nov 2025 12:37:16 +0000 ROA not after: Mon 23 Feb 2026 12:37:16 +0000 asID: 54252 IP address blocks: 209.101.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:1c:87:a9:05:53:9d:66:4d:a3:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 25 12:37:16 2025 GMT Not After : Feb 23 12:37:16 2026 GMT Subject: CN=44467d15-538f-4894-9afb-7e4bbeccd124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dc:eb:3c:b2:03:19:38:89:12:70:cb:d6:4c: f4:e8:71:90:4e:aa:6b:15:02:35:15:37:5e:e4:f8: 8d:4b:65:6e:25:bc:4f:37:0f:28:cf:18:7c:b2:05: ff:01:c2:e7:9d:0e:5b:1c:c5:e0:70:1c:17:dc:10: c9:41:5f:f8:43:56:89:56:ea:3b:36:44:28:08:74: 32:1f:84:c7:1c:b2:0d:07:7c:23:b3:dc:bc:14:88: 01:b0:7f:25:e2:0c:e8:46:de:cf:59:af:32:f6:1e: 2b:a7:e7:a5:f3:2e:32:2c:19:4e:84:63:ea:67:ec: 00:88:f4:93:c5:6f:14:8f:bf:20:65:97:74:ad:75: b2:b0:53:ec:26:22:09:78:fb:7b:3b:a6:c6:84:88: bf:6a:48:be:e7:66:cd:d7:05:5a:d8:db:75:ce:c8: 9c:73:56:93:ae:6c:9d:27:a2:79:35:47:7f:6a:cd: 14:dd:73:b7:d2:cd:78:1b:b2:a8:0c:27:bb:f4:50: b0:f1:6a:ab:9d:14:56:4a:9c:05:34:40:ed:6d:35: d9:5b:cc:78:5a:31:d7:45:b0:ea:4f:64:5d:9d:f2: 90:1a:b2:70:a8:aa:c8:2e:0e:49:aa:95:30:a5:74: d8:b3:af:a5:18:de:6d:e7:a0:9b:d2:2d:ae:9e:de: 83:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E7:4A:82:86:CC:7D:79:5B:23:88:60:61:71:B9:40:0A:EA:5A:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/38629d7e-78f3-3838-8a8c-8dee5a19307d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:2f:e7:2b:96:3d:fb:b9:6f:26:6a:f9:73:17:19:91:cf:bc: 78:17:3c:21:5c:af:2e:11:2e:9b:47:dc:b7:7b:09:ad:f4:92: 6a:91:2f:c9:16:5f:c7:aa:61:e3:a1:57:41:e6:20:c6:13:05: 57:84:ba:9e:c1:d2:ec:fa:ce:f3:b3:f4:47:f7:70:05:99:f5: 0e:c0:50:d5:34:67:4b:5d:cb:6f:19:fa:2c:c6:0f:79:cc:43: 40:6c:17:ad:e2:05:75:13:a2:da:1e:bd:9e:2a:65:3c:3c:6c: f8:75:92:9c:be:ba:0e:ed:3f:72:3c:c0:69:a1:c9:ef:6f:d0: 75:cc:f9:36:44:9e:1e:eb:40:93:b9:14:09:cb:ff:de:41:cc: 93:b9:42:b5:f4:67:a6:68:f6:b6:50:78:f0:89:66:a7:c0:dc: 1d:ff:0f:a9:be:e0:f9:a7:4b:20:7f:94:fa:4e:be:60:90:36: ce:f4:f0:3b:3f:60:50:0e:28:1d:bc:9b:22:f9:23:f0:e2:b8: 84:00:0d:44:2d:c5:86:9c:ee:2a:72:44:b0:4b:e7:d2:de:aa: 5b:d8:b0:64:f6:25:43:6d:1c:66:9f:91:0f:75:9b:0f:e8:85: 27:70:a0:87:0d:15:90:65:cb:ad:a2:b7:ef:b9:e6:bd:4a:6b: cc:5e:67:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv6HIepBVOdZk2jBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyNTEyMzcxNloXDTI2MDIyMzEyMzcxNlowLzEtMCsGA1UEAxMk NDQ0NjdkMTUtNTM4Zi00ODk0LTlhZmItN2U0YmJlY2NkMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tzrPLIDGTiJEnDL1kz06HGQTqprFQI1FTde 5PiNS2VuJbxPNw8ozxh8sgX/AcLnnQ5bHMXgcBwX3BDJQV/4Q1aJVuo7NkQoCHQy H4THHLINB3wjs9y8FIgBsH8l4gzoRt7PWa8y9h4rp+el8y4yLBlOhGPqZ+wAiPST xW8Uj78gZZd0rXWysFPsJiIJePt7O6bGhIi/aki+52bN1wVa2Nt1zsicc1aTrmyd J6J5NUd/as0U3XO30s14G7KoDCe79FCw8WqrnRRWSpwFNEDtbTXZW8x4WjHXRbDq T2RdnfKQGrJwqKrILg5JqpUwpXTYs6+lGN5t56Cb0i2unt6D/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnnSoKGzH15WyOIYGFxuUAK6lp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMzg2MjlkN2UtNzhmMy0z ODM4LThhOGMtOGRlZTVhMTkzMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYv5yuWPfu5byZq+XMXGZHPvHgXPCFcry4RLptH3Ld7Ca30kmqRL8kW X8eqYeOhV0HmIMYTBVeEup7B0uz6zvOz9Ef3cAWZ9Q7AUNU0Z0tdy28Z+izGD3nM Q0BsF63iBXUTotoevZ4qZTw8bPh1kpy+ug7tP3I8wGmhye9v0HXM+TZEnh7rQJO5 FAnL/95BzJO5QrX0Z6Zo9rZQePCJZqfA3B3/D6m+4PmnSyB/lPpOvmCQNs708Ds/ YFAOKB28myL5I/DiuIQADUQtxYac7ipyRLBL59LeqlvYsGT2JUNtHGafkQ91mw/o hSdwoIcNFZBly62it++55r1Ka8xeZ5w= -----END CERTIFICATE-----Generated at Thu Nov 27 23:43:03 2025 by rpki-client