This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a9ddb150-ada5-3964-9677-057d232bda34.roa File: a9ddb150-ada5-3964-9677-057d232bda34.roa (raw, json) Hash identifier: BVoEZjf6Ry47ru+cYToSokxoIZT6aTVMU6ppCUYg9rI= Subject key identifier: 0F:D4:BB:1E:76:3D:9D:1B:FD:C6:38:7A:FA:9F:8D:84:C5:C7:6E:E5 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C47F1E4AA4CCB23FEBEC50800 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a9ddb150-ada5-3964-9677-057d232bda34.roa Signing time: Tue 23 Dec 2025 09:44:25 +0000 ROA not before: Tue 23 Dec 2025 09:44:25 +0000 ROA not after: Mon 23 Mar 2026 08:44:25 +0000 asID: 39521 IP address blocks: 68.164.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:f1:e4:aa:4c:cb:23:fe:be:c5:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 23 09:44:25 2025 GMT Not After : Mar 23 08:44:25 2026 GMT Subject: CN=7f4cc9c0-3d07-4c77-9a9f-5c465ab2c189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a2:68:aa:fd:91:b0:8f:90:56:bc:f0:9e:84: f9:fd:c5:d8:67:4c:ef:c6:5a:0d:81:24:09:12:59: 7c:5a:04:9a:35:b5:b2:3f:85:74:f3:32:79:23:0c: 74:91:ec:91:16:3c:ee:7a:64:0e:56:9f:c0:76:37: a7:87:f9:24:cb:e4:6e:05:65:9e:59:8f:27:9e:76: 52:f2:2c:6c:e9:81:c2:1e:72:3d:fe:40:b2:96:3d: 0d:b6:2c:50:c7:fd:9e:f3:11:82:f4:a3:df:c4:65: 6c:eb:bc:2f:29:62:a3:60:c6:08:d8:09:f4:e0:83: f6:ab:a7:48:02:c9:35:67:ad:c9:f1:5a:21:c5:c0: a0:24:ee:dd:c9:6c:6e:c3:54:02:8c:c9:fc:2e:72: 08:a6:28:74:b9:e1:6b:a4:bf:4b:27:a1:b1:2a:30: 94:56:8c:31:ed:60:a4:31:7b:f0:cf:a4:2c:08:a9: 45:82:a1:4b:65:36:5f:8f:a1:89:21:5a:30:01:41: 56:a1:6e:fd:0a:65:21:c4:c1:4b:be:26:60:a6:dc: 33:c4:17:bf:42:e0:ef:f2:24:fe:51:6b:48:eb:65: f3:33:14:17:6f:03:7a:ed:5b:b6:ea:a2:b3:4b:54: 49:ae:22:d5:b7:da:d3:e6:44:58:88:02:93:ae:45: a8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D4:BB:1E:76:3D:9D:1B:FD:C6:38:7A:FA:9F:8D:84:C5:C7:6E:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a9ddb150-ada5-3964-9677-057d232bda34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d1:34:ec:ac:7f:1e:38:03:74:7a:a9:f0:f7:a8:44:ec:5a: 47:c7:95:d5:c6:a5:75:87:4f:83:e8:79:8b:3e:da:33:2a:cd: b4:4c:40:10:14:d0:8b:85:16:f7:4b:cb:fd:18:5d:b7:42:b2: 6f:7f:a6:af:12:e3:3d:80:af:a3:2f:9a:d0:49:e3:99:d8:e9: 29:b9:5c:25:3b:ef:28:5e:54:93:1c:a5:b5:18:c5:40:97:db: b3:97:62:28:82:01:05:d7:ea:ba:39:4e:b3:83:40:d6:05:2c: c5:f8:13:4e:45:17:30:ac:b3:ff:dc:20:24:43:3a:1f:e9:fd: 83:ec:d5:c4:f8:39:0f:f1:2e:48:71:af:d3:e5:43:5f:9a:7c: 4c:ad:85:e9:1f:f1:d7:ec:1e:97:06:3f:24:d9:e3:3f:6d:4c: da:80:5e:b2:cb:c2:a1:4d:77:77:7e:bd:5e:38:c3:55:f3:53: 6b:bd:dd:11:b8:c9:99:60:c3:e4:4d:40:df:3d:25:57:17:2a: 98:e6:fc:bd:c4:a1:a5:72:ab:10:ab:0f:56:a3:b2:d4:d0:43: d6:6b:79:02:0f:61:b9:9c:91:b0:21:43:c4:39:78:b0:74:47: ec:d3:59:28:df:aa:9a:bc:d8:34:b0:44:4e:c6:f4:d8:01:f0: bc:4a:14:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExH8eSqTMsj/r7FCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIyMzA5NDQyNVoXDTI2MDMyMzA4NDQyNVowLzEtMCsGA1UEAxMk N2Y0Y2M5YzAtM2QwNy00Yzc3LTlhOWYtNWM0NjVhYjJjMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKJoqv2RsI+QVrzwnoT5/cXYZ0zvxloNgSQJ Ell8WgSaNbWyP4V08zJ5Iwx0keyRFjzuemQOVp/Adjenh/kky+RuBWWeWY8nnnZS 8ixs6YHCHnI9/kCylj0NtixQx/2e8xGC9KPfxGVs67wvKWKjYMYI2An04IP2q6dI Ask1Z63J8VohxcCgJO7dyWxuw1QCjMn8LnIIpih0ueFrpL9LJ6GxKjCUVowx7WCk MXvwz6QsCKlFgqFLZTZfj6GJIVowAUFWoW79CmUhxMFLviZgptwzxBe/QuDv8iT+ UWtI62XzMxQXbwN67Vu26qKzS1RJriLVt9rT5kRYiAKTrkWoOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/Uux52PZ0b/cY4evqfjYTFx27lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTlkZGIxNTAtYWRhNS0z OTY0LTk2NzctMDU3ZDIzMmJkYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjRNOysfx44A3R6qfD3qETsWkfHldXGpXWHT4PoeYs+2jMqzbRMQBAU 0IuFFvdLy/0YXbdCsm9/pq8S4z2Ar6MvmtBJ45nY6Sm5XCU77yheVJMcpbUYxUCX 27OXYiiCAQXX6ro5TrODQNYFLMX4E05FFzCss//cICRDOh/p/YPs1cT4OQ/xLkhx r9PlQ1+afEythekf8dfsHpcGPyTZ4z9tTNqAXrLLwqFNd3d+vV44w1XzU2u93RG4 yZlgw+RNQN89JVcXKpjm/L3EoaVyqxCrD1ajstTQQ9ZreQIPYbmckbAhQ8Q5eLB0 R+zTWSjfqpq82DSwRE7G9NgB8LxKFJE= -----END CERTIFICATE-----Generated at Sat Jan 10 20:51:00 2026 by rpki-client