This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8177216f-5daf-3069-be4a-f1a411115e4c.roa File: 8177216f-5daf-3069-be4a-f1a411115e4c.roa (raw, json) Hash identifier: DEGCfVL9HNaowMQYaDBGeCpsObt7gWl6nGpOb8CR25g= Subject key identifier: A5:29:E5:5F:D2:0C:C1:CD:6A:AC:FE:8D:DB:DC:E0:FA:52:3C:68:EF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C57F1E39E1BE006028AD19CE0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8177216f-5daf-3069-be4a-f1a411115e4c.roa Signing time: Mon 29 Dec 2025 03:17:20 +0000 ROA not before: Mon 29 Dec 2025 03:17:20 +0000 ROA not after: Sun 29 Mar 2026 02:17:20 +0000 asID: 25198 IP address blocks: 209.101.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:57:f1:e3:9e:1b:e0:06:02:8a:d1:9c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 29 03:17:20 2025 GMT Not After : Mar 29 02:17:20 2026 GMT Subject: CN=f2ab3aca-c882-4b61-a074-3021e33c2019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:f6:ca:55:90:84:28:6e:95:e4:73:50:50: 15:77:e8:7f:b7:03:10:76:6b:2c:15:c3:1e:8f:0d: dd:fc:e2:82:2f:14:9f:3d:ee:b5:16:96:3b:b5:ee: 32:6a:f2:1f:f8:11:c4:05:2b:ca:06:0b:59:87:55: 24:64:21:85:17:43:38:4d:ee:01:c8:7b:6f:b2:b7: 45:32:70:35:63:b8:9c:19:95:ca:04:d9:da:69:ae: 33:56:59:c0:61:45:1f:04:41:4b:70:09:c0:eb:fc: 3a:f6:9e:fc:88:bd:ea:fa:7d:8f:74:4d:e7:ad:e1: 1b:c9:53:1a:33:7d:12:01:66:9a:74:c4:38:6d:2f: ad:10:e9:9a:56:f7:f4:38:15:1d:b6:83:16:8e:b1: 3f:25:1b:e6:5a:3e:02:52:dc:fc:85:4d:5d:43:11: b0:88:63:42:47:89:c1:50:50:34:f0:5e:d7:90:51: 51:b6:0a:c1:21:83:9c:6e:77:37:30:a7:e3:c4:e3: 0a:3f:d9:bf:8e:cc:38:e3:5f:30:a2:8c:f6:0d:c0: 55:89:21:68:7e:98:4e:e9:f0:bc:91:32:b3:dc:47: 93:64:77:5c:45:a7:92:57:24:e5:10:59:cf:10:b6: 1f:4f:bf:86:31:c4:ae:be:80:a0:ac:1b:44:d6:2a: 96:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:29:E5:5F:D2:0C:C1:CD:6A:AC:FE:8D:DB:DC:E0:FA:52:3C:68:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8177216f-5daf-3069-be4a-f1a411115e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:cb:08:d3:ad:06:60:b5:72:aa:11:f4:15:20:0b:60:86:38: 3c:81:bc:82:1b:06:18:c1:89:00:4c:1e:5e:59:f7:a2:e4:6a: a1:db:23:3c:03:e7:15:87:c7:0b:d7:ae:0c:90:b0:bc:88:7e: de:c2:d0:d9:f4:5d:d4:b0:5b:5f:79:18:ae:1e:9c:ff:d3:62: cb:86:b9:71:67:95:67:74:e6:72:d7:72:e5:c6:98:62:6b:b1: 98:00:97:0f:a7:9f:9b:dd:14:3a:bf:00:f7:10:7f:5a:f1:55: 1d:e4:a1:e6:2b:1c:3f:3c:f4:80:f4:41:45:12:e6:1a:9a:63: 86:a3:df:91:cc:00:a5:ae:20:cf:fe:05:df:fc:6f:ba:80:16: 66:f8:24:0c:e1:70:11:8d:97:b4:f5:57:8d:43:3d:6f:f1:98: 10:19:76:4a:84:46:ee:20:ba:97:0c:e8:e2:97:1a:b6:ec:45: 4d:fb:3f:ad:ec:a1:bd:c4:f9:74:92:bb:f0:ca:8d:33:5b:2f: 2e:23:73:0b:74:de:43:a9:a1:77:25:7e:ea:17:93:28:02:2f: 6c:65:07:2b:14:44:2f:0d:7f:6b:f2:96:3f:51:de:e2:99:bf: 37:18:5a:0a:66:54:ab:fb:50:8d:bf:62:9e:a8:12:70:03:43: a9:11:a4:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExX8eOeG+AGAorRnOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIyOTAzMTcyMFoXDTI2MDMyOTAyMTcyMFowLzEtMCsGA1UEAxMk ZjJhYjNhY2EtYzg4Mi00YjYxLWEwNzQtMzAyMWUzM2MyMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRr2ylWQhChuleRzUFAVd+h/twMQdmssFcMe jw3d/OKCLxSfPe61FpY7te4yavIf+BHEBSvKBgtZh1UkZCGFF0M4Te4ByHtvsrdF MnA1Y7icGZXKBNnaaa4zVlnAYUUfBEFLcAnA6/w69p78iL3q+n2PdE3nreEbyVMa M30SAWaadMQ4bS+tEOmaVvf0OBUdtoMWjrE/JRvmWj4CUtz8hU1dQxGwiGNCR4nB UFA08F7XkFFRtgrBIYOcbnc3MKfjxOMKP9m/jsw4418wooz2DcBViSFofphO6fC8 kTKz3EeTZHdcRaeSVyTlEFnPELYfT7+GMcSuvoCgrBtE1iqW7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUp5V/SDMHNaqz+jdvc4PpSPGjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODE3NzIxNmYtNWRhZi0z MDY5LWJlNGEtZjFhNDExMTE1ZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDLCNOtBmC1cqoR9BUgC2CGODyBvIIbBhjBiQBMHl5Z96LkaqHbIzwD 5xWHxwvXrgyQsLyIft7C0Nn0XdSwW195GK4enP/TYsuGuXFnlWd05nLXcuXGmGJr sZgAlw+nn5vdFDq/APcQf1rxVR3koeYrHD889ID0QUUS5hqaY4aj35HMAKWuIM/+ Bd/8b7qAFmb4JAzhcBGNl7T1V41DPW/xmBAZdkqERu4gupcM6OKXGrbsRU37P63s ob3E+XSSu/DKjTNbLy4jcwt03kOpoXclfuoXkygCL2xlBysURC8Nf2vylj9R3uKZ vzcYWgpmVKv7UI2/Yp6oEnADQ6kRpPs= -----END CERTIFICATE-----Generated at Sat Jan 10 20:50:55 2026 by rpki-client