This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d839064a-caaf-3526-8919-06009f7be8de.roa File: d839064a-caaf-3526-8919-06009f7be8de.roa (raw, json) Hash identifier: UXX8ILVsFnAQB5U3tmdxCndBbeoINYLjaMaLHQnP4TE= Subject key identifier: 90:59:C8:FC:F1:B1:FF:47:FE:45:28:C1:61:A2:9E:16:79:72:A4:D3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C42DC20CBA4FB82330531CAC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d839064a-caaf-3526-8919-06009f7be8de.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 212238 IP address blocks: 209.101.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:20:cb:a4:fb:82:33:05:31:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=a4c38af5-3ebe-4b92-a43c-4ac157a50aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:23:40:f2:13:93:f6:da:70:3e:fb:da:c6:ac: ed:dc:a3:4e:1e:e4:e9:9a:18:9b:f2:61:c7:6b:c8: 2e:e6:2a:6d:ca:23:95:6a:2b:a7:da:0a:b1:3a:12: 88:15:90:96:fa:2e:dd:42:cf:cf:6b:20:d8:27:ed: 4b:5f:d2:7e:31:65:43:06:bc:30:14:2a:99:87:b5: e4:d4:1a:76:b2:0b:75:68:93:95:8d:f6:9c:33:c8: 87:b2:48:0b:fb:f9:48:ee:84:41:a2:de:1c:41:10: fc:ed:99:68:2f:97:a6:93:34:25:5e:92:07:5a:c9: 83:b7:b7:3a:97:a6:82:52:74:47:8b:9b:47:84:cd: 5f:59:9f:8c:05:81:b5:ac:b2:6c:dc:1f:d3:52:e0: 8b:92:3b:10:7c:a4:0b:19:30:b3:26:87:1e:8a:ec: 89:c5:5e:d5:34:82:96:84:1a:ee:67:f0:8f:40:41: e9:18:1a:7e:b7:97:23:da:15:79:8c:3c:3c:a6:0a: 0d:78:7d:1e:46:8e:2e:b6:c8:ff:5e:07:56:dc:07: 84:51:e6:0c:ad:68:9e:31:96:e2:82:46:06:e3:71: 90:c7:41:05:29:90:b9:7d:bf:bb:ca:fc:2b:57:32: 4d:46:89:83:79:ac:c5:5e:cf:30:29:75:59:99:cc: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:59:C8:FC:F1:B1:FF:47:FE:45:28:C1:61:A2:9E:16:79:72:A4:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d839064a-caaf-3526-8919-06009f7be8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9f:65:5f:8b:22:3c:75:0b:c3:1d:24:8b:9c:80:79:48:4c: e7:5b:4d:05:47:f4:f0:91:f4:fb:b7:73:d9:00:3f:6f:b8:dd: d6:53:4f:e9:4e:fa:fc:76:c6:58:1e:52:6d:f4:89:5a:e7:5b: 97:10:14:76:1d:14:46:4a:61:51:87:69:91:c4:67:70:e5:f7: a2:1d:34:5c:14:b5:cc:ea:3f:37:83:5a:82:82:20:a0:d5:23: a4:9e:77:52:a9:26:a4:e7:60:a5:c7:cf:87:62:66:a3:8d:fb: 29:fa:b3:68:8c:79:49:08:13:7e:58:a6:44:f0:5c:32:a0:ad: 6d:7d:c3:ef:ca:35:56:f6:b1:43:0b:6f:b0:c5:94:e4:ca:c8: 3a:6b:2c:54:ab:3e:ba:46:02:5d:65:84:9e:fb:02:36:d0:e1: 28:9f:cd:0c:8e:74:27:88:b0:46:3e:4f:f8:4e:7f:24:1c:9b: a2:56:6f:06:0e:b4:97:53:f7:46:b8:bf:b8:fe:06:79:cb:e2: a8:80:2e:05:24:b4:d2:bd:38:c0:9a:7b:72:de:12:91:d7:b9: f3:d6:f5:e2:bd:50:35:cf:b8:c7:95:a4:50:60:fd:5d:ee:88: 2f:e4:86:a5:41:bf:d8:2f:4b:e9:be:94:f0:18:a3:80:e6:6b: ae:68:bd:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3CDLpPuCMwUxysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YTRjMzhhZjUtM2ViZS00YjkyLWE0M2MtNGFjMTU3YTUwYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyNA8hOT9tpwPvvaxqzt3KNOHuTpmhib8mHH a8gu5iptyiOVaiun2gqxOhKIFZCW+i7dQs/PayDYJ+1LX9J+MWVDBrwwFCqZh7Xk 1Bp2sgt1aJOVjfacM8iHskgL+/lI7oRBot4cQRD87ZloL5emkzQlXpIHWsmDt7c6 l6aCUnRHi5tHhM1fWZ+MBYG1rLJs3B/TUuCLkjsQfKQLGTCzJoceiuyJxV7VNIKW hBruZ/CPQEHpGBp+t5cj2hV5jDw8pgoNeH0eRo4utsj/XgdW3AeEUeYMrWieMZbi gkYG43GQx0EFKZC5fb+7yvwrVzJNRomDeazFXs8wKXVZmcykMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBZyPzxsf9H/kUowWGinhZ5cqTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZDgzOTA2NGEtY2FhZi0z NTI2LTg5MTktMDYwMDlmN2JlOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0WUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOfZV+LIjx1C8MdJIucgHlITOdbTQVH9PCR9Pu3c9kAP2+43dZTT+lO +vx2xlgeUm30iVrnW5cQFHYdFEZKYVGHaZHEZ3Dl96IdNFwUtczqPzeDWoKCIKDV I6Sed1KpJqTnYKXHz4diZqON+yn6s2iMeUkIE35YpkTwXDKgrW19w+/KNVb2sUML b7DFlOTKyDprLFSrPrpGAl1lhJ77AjbQ4SifzQyOdCeIsEY+T/hOfyQcm6JWbwYO tJdT90a4v7j+BnnL4qiALgUktNK9OMCae3LeEpHXufPW9eK9UDXPuMeVpFBg/V3u iC/khqVBv9gvS+m+lPAYo4Dma65ovck= -----END CERTIFICATE-----Generated at Sat Jan 10 04:26:21 2026 by rpki-client