This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd83f7c7-e02f-3a43-95f8-701145221be8.roa File: dd83f7c7-e02f-3a43-95f8-701145221be8.roa (raw, json) Hash identifier: ROZqc4K1HWSVg9ANB7H+MM/4ZPTvRDNDsZwIdnLwLWY= Subject key identifier: 8D:6B:A2:37:EC:EB:7D:E2:3C:AB:6F:AA:14:CE:56:D3:DC:A1:16:6E Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C50C8BB0E92E1BFAE143DEF80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd83f7c7-e02f-3a43-95f8-701145221be8.roa Signing time: Fri 26 Dec 2025 13:43:45 +0000 ROA not before: Fri 26 Dec 2025 13:43:45 +0000 ROA not after: Thu 26 Mar 2026 12:43:45 +0000 asID: 834 IP address blocks: 209.101.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:c8:bb:0e:92:e1:bf:ae:14:3d:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 26 13:43:45 2025 GMT Not After : Mar 26 12:43:45 2026 GMT Subject: CN=67a2cd7e-6973-4aa5-970c-35f0cf21e530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:23:69:52:c3:19:cc:19:45:97:75:ea:eb:9c: 9a:11:8a:46:10:ef:3b:99:9c:7d:f4:28:83:df:be: 33:05:cc:aa:55:59:4d:03:e2:1f:ae:c9:a3:a8:b8: 52:be:21:97:21:86:98:45:97:7e:e0:af:9f:07:d0: 5c:11:8f:be:86:e7:2b:20:78:ab:4e:f9:de:15:8e: 1b:ef:02:f0:4f:ed:7d:e1:d5:93:c4:61:b2:42:47: 42:23:f1:98:db:0d:4a:3c:11:01:42:6e:cc:8b:2a: 49:9a:72:bc:48:a4:bb:82:4c:e4:e7:9b:9b:87:dd: 52:69:d6:90:45:6c:f2:30:cf:96:c8:30:f2:70:66: a0:6d:f4:14:b6:c6:d5:97:31:55:e3:62:8d:d5:be: be:15:dc:ca:80:42:c9:6e:ab:e3:e8:32:54:ea:ef: 17:67:9c:1f:a5:d0:4e:92:67:ea:f5:47:69:c7:73: a6:60:e2:3d:df:b6:db:7a:ed:86:cd:e0:f6:dc:78: 99:bb:67:80:56:98:bb:d6:1d:44:7c:55:d2:ac:43: ed:9c:b9:0a:87:d3:1d:fc:46:b1:2e:54:5d:14:94: 3d:72:a6:96:61:c7:ee:f0:0b:9c:e1:66:dd:53:11: e8:ad:36:46:40:43:e9:60:bc:f7:2a:8a:d4:78:9a: b8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6B:A2:37:EC:EB:7D:E2:3C:AB:6F:AA:14:CE:56:D3:DC:A1:16:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dd83f7c7-e02f-3a43-95f8-701145221be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c8:ff:a3:a1:ce:61:a7:81:ed:be:3f:08:27:80:42:f9:4d: d0:22:8d:bf:8c:b4:50:1d:74:14:e9:63:6a:98:9d:c2:8e:75: 76:32:de:11:9e:64:d6:7a:f9:96:64:f2:00:15:82:0a:b5:ff: 51:45:a3:c8:51:a6:63:e5:0c:25:e5:1a:d9:75:de:bc:4d:7a: fd:2a:f5:15:07:42:c5:39:da:a4:46:c9:06:77:22:28:99:78: e1:ad:ae:c2:7d:cb:02:a4:e0:f0:a5:c5:5b:44:d9:1b:47:e3: 8d:80:dc:35:c4:f8:2d:97:e6:81:67:18:91:b5:11:2e:37:1f: cd:bc:66:33:f4:85:5e:9a:ec:d7:a7:f3:01:e1:3d:19:55:c6: dc:ff:2f:df:a9:9d:28:27:51:bf:f7:37:49:cb:1a:24:64:f8: 43:3b:03:a3:77:34:f9:8a:15:26:0e:ea:28:2c:2e:e9:16:d4: 0d:7a:2c:eb:01:42:15:b1:77:40:a6:46:b4:a3:5e:3d:f4:37: bc:f3:c5:d6:cb:2b:d1:a7:dd:a3:5e:02:23:84:c0:ab:18:09: 65:56:b1:fa:29:4a:00:63:72:e0:06:56:09:f2:5c:01:2b:98: 9b:af:79:bf:6b:8d:f5:b0:7e:41:ab:fe:4b:82:e7:02:e8:28: db:08:6e:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQyLsOkuG/rhQ974AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIyNjEzNDM0NVoXDTI2MDMyNjEyNDM0NVowLzEtMCsGA1UEAxMk NjdhMmNkN2UtNjk3My00YWE1LTk3MGMtMzVmMGNmMjFlNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCNpUsMZzBlFl3Xq65yaEYpGEO87mZx99CiD 374zBcyqVVlNA+IfrsmjqLhSviGXIYaYRZd+4K+fB9BcEY++hucrIHirTvneFY4b 7wLwT+194dWTxGGyQkdCI/GY2w1KPBEBQm7MiypJmnK8SKS7gkzk55ubh91SadaQ RWzyMM+WyDDycGagbfQUtsbVlzFV42KN1b6+FdzKgELJbqvj6DJU6u8XZ5wfpdBO kmfq9Udpx3OmYOI937bbeu2GzeD23HiZu2eAVpi71h1EfFXSrEPtnLkKh9Md/Eax LlRdFJQ9cqaWYcfu8Auc4WbdUxHorTZGQEPpYLz3KorUeJq4KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1rojfs633iPKtvqhTOVtPcoRZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGQ4M2Y3YzctZTAyZi0z YTQzLTk1ZjgtNzAxMTQ1MjIxYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDI/6OhzmGnge2+PwgngEL5TdAijb+MtFAddBTpY2qYncKOdXYy3hGe ZNZ6+ZZk8gAVggq1/1FFo8hRpmPlDCXlGtl13rxNev0q9RUHQsU52qRGyQZ3IiiZ eOGtrsJ9ywKk4PClxVtE2RtH442A3DXE+C2X5oFnGJG1ES43H828ZjP0hV6a7Nen 8wHhPRlVxtz/L9+pnSgnUb/3N0nLGiRk+EM7A6N3NPmKFSYO6igsLukW1A16LOsB QhWxd0CmRrSjXj30N7zzxdbLK9Gn3aNeAiOEwKsYCWVWsfopSgBjcuAGVgnyXAEr mJuveb9rjfWwfkGr/kuC5wLoKNsIbmg= -----END CERTIFICATE-----Generated at Tue Dec 30 21:09:26 2025 by rpki-client