This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/425be519-bcb5-3315-9ca4-4de7ede68b86.roa File: 425be519-bcb5-3315-9ca4-4de7ede68b86.roa (raw, json) Hash identifier: LkQFehpuj1okqvEjdybnHaluP2eVDk1YLoRHLEaOiwo= Subject key identifier: 0D:A1:8E:64:E8:D2:7F:BE:0C:4A:6E:F0:BD:64:09:F5:44:7F:69:A3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BD2C01C29ADB555FC97B95020 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/425be519-bcb5-3315-9ca4-4de7ede68b86.roa Signing time: Tue 11 Nov 2025 10:14:32 +0000 ROA not before: Tue 11 Nov 2025 10:14:32 +0000 ROA not after: Mon 09 Feb 2026 10:14:32 +0000 asID: 63199 IP address blocks: 209.101.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d2:c0:1c:29:ad:b5:55:fc:97:b9:50:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 11 10:14:32 2025 GMT Not After : Feb 9 10:14:32 2026 GMT Subject: CN=69ac71d8-c3a1-4fad-a30c-ff80f915ae0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c5:62:5c:61:b0:e6:c3:5a:a8:9b:ac:78:db: 8c:de:03:bb:c1:57:cb:f1:35:be:59:44:4d:cf:f7: af:47:da:19:36:37:ee:8e:9d:a9:53:15:71:d1:03: d0:03:93:ee:09:78:06:e9:94:74:a4:ed:e0:f7:5f: 49:09:84:42:d7:02:61:9d:cb:3f:96:22:11:4c:4b: ea:81:94:f2:0a:b8:8e:c2:ea:d7:c5:e9:da:81:d8: ac:f7:4a:57:96:4e:e7:f5:78:7b:ac:3b:ad:3c:53: b2:6f:db:49:7c:a1:58:95:8d:9b:ba:72:81:1d:ea: 26:df:25:da:5e:93:1e:02:09:f7:ad:4f:3d:75:35: 0b:17:5b:a9:11:ef:4b:73:25:77:db:82:92:fb:55: bf:5c:be:61:da:c8:d6:77:e3:91:12:d2:30:f3:db: a3:e9:f4:95:5c:1f:fa:73:89:e2:81:4d:ea:1b:19: 48:8a:e5:5e:23:5b:5a:02:19:0f:e8:0a:0c:b3:eb: 4b:36:5a:86:d1:2f:a3:f5:3a:78:ed:a3:e0:bf:60: b2:f5:64:76:41:74:18:ec:92:6d:99:fb:57:b7:14: 29:00:85:68:24:1d:7e:42:0d:2f:9f:96:b7:e2:d2: 91:8f:2b:0c:45:b0:76:f9:37:e0:32:cc:db:ef:80: 0e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A1:8E:64:E8:D2:7F:BE:0C:4A:6E:F0:BD:64:09:F5:44:7F:69:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/425be519-bcb5-3315-9ca4-4de7ede68b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8e:a6:f7:e3:d7:92:cf:b6:85:a6:38:98:12:39:96:11:9a: 44:19:db:e9:22:da:6a:03:44:4a:61:2e:5f:2a:a6:b9:82:92: fe:05:bd:1f:a4:c8:70:2b:fe:e9:f0:18:ff:bc:a0:cc:3d:11: 97:ee:71:dd:0d:79:c6:30:ac:c9:2b:1d:b5:f6:85:a9:3b:c8: 4c:03:c6:ab:22:d4:2f:d2:86:47:e8:56:e7:66:fe:ad:fa:4f: b4:de:5b:15:39:ee:35:8f:f1:88:84:ca:e9:7c:89:40:92:4c: bb:f7:f5:01:da:15:5f:d7:25:9d:5d:93:27:61:ce:92:08:ee: ff:22:de:c4:09:c8:25:3b:7b:27:d9:05:51:b4:3d:41:ec:6a: 4e:3b:a8:2f:5e:56:e9:b1:a3:05:77:cb:58:b7:8c:b1:0a:58: 92:56:dc:b4:b6:65:40:c9:40:16:67:92:6f:5c:c8:b5:3b:68: b5:b2:a2:67:10:f4:f6:d0:2a:6c:0c:87:3d:ed:97:05:00:39: 2e:9a:14:13:9d:88:69:a8:7c:fd:ba:7c:7e:e5:a2:51:77:1e: 6a:67:78:3f:df:69:bb:c2:96:b0:ad:a4:e4:8b:d9:0d:11:db: 32:aa:f7:0b:3e:b1:e9:25:ea:c7:d6:2f:58:98:5f:c1:30:f5: 57:92:48:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvSwBwprbVV/Je5UCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTExMTEwMTQzMloXDTI2MDIwOTEwMTQzMlowLzEtMCsGA1UEAxMk NjlhYzcxZDgtYzNhMS00ZmFkLWEzMGMtZmY4MGY5MTVhZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8ViXGGw5sNaqJuseNuM3gO7wVfL8TW+WURN z/evR9oZNjfujp2pUxVx0QPQA5PuCXgG6ZR0pO3g919JCYRC1wJhncs/liIRTEvq gZTyCriOwurXxenagdis90pXlk7n9Xh7rDutPFOyb9tJfKFYlY2bunKBHeom3yXa XpMeAgn3rU89dTULF1upEe9LcyV324KS+1W/XL5h2sjWd+OREtIw89uj6fSVXB/6 c4nigU3qGxlIiuVeI1taAhkP6AoMs+tLNlqG0S+j9Tp47aPgv2Cy9WR2QXQY7JJt mftXtxQpAIVoJB1+Qg0vn5a34tKRjysMRbB2+TfgMszb74AOowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2hjmTo0n++DEpu8L1kCfVEf2mjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDI1YmU1MTktYmNiNS0z MzE1LTljYTQtNGRlN2VkZTY4Yjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOOpvfj15LPtoWmOJgSOZYRmkQZ2+ki2moDREphLl8qprmCkv4FvR+k yHAr/unwGP+8oMw9EZfucd0NecYwrMkrHbX2hak7yEwDxqsi1C/ShkfoVudm/q36 T7TeWxU57jWP8YiEyul8iUCSTLv39QHaFV/XJZ1dkydhzpII7v8i3sQJyCU7eyfZ BVG0PUHsak47qC9eVumxowV3y1i3jLEKWJJW3LS2ZUDJQBZnkm9cyLU7aLWyomcQ 9PbQKmwMhz3tlwUAOS6aFBOdiGmofP26fH7lolF3HmpneD/fabvClrCtpOSL2Q0R 2zKq9ws+sekl6sfWL1iYX8Ew9VeSSEo= -----END CERTIFICATE-----Generated at Tue Nov 25 14:50:39 2025 by rpki-client