This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ce9edb05-00b6-33fb-b966-269dd30aa498.roa File: ce9edb05-00b6-33fb-b966-269dd30aa498.roa (raw, json) Hash identifier: yC+3Qd4osY4nHfSY6acQIwCJRCg4mUOtc/i7D7pnK6o= Subject key identifier: 93:96:CC:F6:BE:90:58:B3:5C:C7:3C:C9:E9:85:E2:F1:E5:0B:F3:D9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C54C7B0634EA34540A7F05A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ce9edb05-00b6-33fb-b966-269dd30aa498.roa Signing time: Sun 28 Dec 2025 00:04:53 +0000 ROA not before: Sun 28 Dec 2025 00:04:53 +0000 ROA not after: Fri 27 Mar 2026 23:04:53 +0000 asID: 834 IP address blocks: 209.101.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:54:c7:b0:63:4e:a3:45:40:a7:f0:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 28 00:04:53 2025 GMT Not After : Mar 27 23:04:53 2026 GMT Subject: CN=8f8b673a-3abd-4968-a451-efd45f151c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3f:c9:c3:4f:5c:43:43:ca:66:2c:d9:3b:7e: d1:dc:9a:f2:f3:33:03:1e:88:81:fc:3d:71:6c:fd: 80:f5:b4:11:d2:e5:f5:3f:60:1a:de:26:7d:04:49: 3e:80:bc:6a:7a:a8:57:a5:16:00:54:9e:86:d4:55: c3:2e:c6:7a:d9:79:3b:b1:54:17:9b:92:19:a2:f5: 03:06:d2:95:70:17:16:f1:ba:80:1f:e3:91:cd:d7: 6d:54:7a:46:5a:98:6e:f0:f5:96:35:0f:aa:18:f9: 38:d4:0d:86:d7:57:bc:3e:5e:3d:b2:7a:39:3d:94: f5:e8:53:27:22:bd:1e:01:c4:82:b0:d3:c2:d9:ab: ac:fe:61:27:ae:85:00:7d:d3:f5:de:e4:8b:a8:53: b1:43:ac:13:28:dc:c7:7e:41:fc:69:f7:d7:55:b0: 84:a8:b8:4e:33:f3:a6:98:8e:34:f6:98:04:06:c7: f2:a9:c7:80:02:b4:16:5c:6f:e9:9b:55:8b:d8:56: db:8a:9e:ba:20:88:e7:35:88:f3:60:71:97:ac:2b: 08:dc:c8:55:6f:e8:79:6c:75:0b:f1:69:10:89:00: d1:c2:fa:82:11:c7:59:c1:e2:e5:86:9c:4a:f9:6e: cf:f5:9e:e5:5c:d0:17:79:17:93:40:fd:c2:97:44: 69:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:96:CC:F6:BE:90:58:B3:5C:C7:3C:C9:E9:85:E2:F1:E5:0B:F3:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ce9edb05-00b6-33fb-b966-269dd30aa498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:fd:21:4e:cd:e2:2c:11:4e:b4:f8:3f:2a:90:1b:31:2e:9c: 5a:ab:d3:1c:56:73:92:1d:cc:16:7a:d2:f3:f4:ce:a5:9b:db: fa:6f:98:da:5b:bf:bb:2b:e9:5b:6b:85:03:0c:32:80:ba:d4: 09:9e:cb:2b:c6:b5:a3:00:34:48:13:5e:0f:5d:dc:98:46:93: 95:36:0e:3e:00:61:c7:59:9f:7d:04:4b:cd:98:7e:a5:bd:d7: 9b:ea:08:74:13:c7:a8:16:99:a3:6b:e1:ce:ed:5a:db:cf:93: d1:40:74:14:fc:87:a5:d5:4f:e0:08:4c:9d:b8:c5:21:3e:67: 29:69:25:46:f3:be:5b:70:45:fa:6d:3f:cc:15:47:3a:e9:ba: 3f:72:a6:2d:25:17:08:f3:0c:a2:1f:51:66:1c:78:4c:a7:c7: 95:01:a9:14:e2:19:d5:15:15:32:2b:1a:f0:ec:53:9f:b0:c4: c1:12:df:b7:ee:7a:4e:4f:5e:32:42:09:3f:9f:bd:70:76:c6: e8:a6:b4:42:0d:a6:51:76:22:c4:17:9d:e1:c5:1b:ff:99:cb: 2f:81:4a:59:ed:87:83:4b:88:a7:2a:5d:e0:4c:9c:56:e2:25: 55:7f:97:d4:49:f5:54:cd:e5:61:b2:c5:d0:8a:e6:b5:22:2b: da:24:9c:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExUx7BjTqNFQKfwWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIyODAwMDQ1M1oXDTI2MDMyNzIzMDQ1M1owLzEtMCsGA1UEAxMk OGY4YjY3M2EtM2FiZC00OTY4LWE0NTEtZWZkNDVmMTUxYzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj/Jw09cQ0PKZizZO37R3Jry8zMDHoiB/D1x bP2A9bQR0uX1P2Aa3iZ9BEk+gLxqeqhXpRYAVJ6G1FXDLsZ62Xk7sVQXm5IZovUD BtKVcBcW8bqAH+ORzddtVHpGWphu8PWWNQ+qGPk41A2G11e8Pl49sno5PZT16FMn Ir0eAcSCsNPC2aus/mEnroUAfdP13uSLqFOxQ6wTKNzHfkH8affXVbCEqLhOM/Om mI409pgEBsfyqceAArQWXG/pm1WL2Fbbip66IIjnNYjzYHGXrCsI3MhVb+h5bHUL 8WkQiQDRwvqCEcdZweLlhpxK+W7P9Z7lXNAXeReTQP3Cl0RpowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOWzPa+kFizXMc8yemF4vHlC/PZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2U5ZWRiMDUtMDBiNi0z M2ZiLWI5NjYtMjY5ZGQzMGFhNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKL9IU7N4iwRTrT4PyqQGzEunFqr0xxWc5IdzBZ60vP0zqWb2/pvmNpb v7sr6VtrhQMMMoC61AmeyyvGtaMANEgTXg9d3JhGk5U2Dj4AYcdZn30ES82YfqW9 15vqCHQTx6gWmaNr4c7tWtvPk9FAdBT8h6XVT+AITJ24xSE+ZylpJUbzvltwRfpt P8wVRzrpuj9ypi0lFwjzDKIfUWYceEynx5UBqRTiGdUVFTIrGvDsU5+wxMES37fu ek5PXjJCCT+fvXB2xuimtEINplF2IsQXneHFG/+Zyy+BSlnth4NLiKcqXeBMnFbi JVV/l9RJ9VTN5WGyxdCK5rUiK9oknGQ= -----END CERTIFICATE-----Generated at Tue Dec 30 21:11:05 2025 by rpki-client