This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de43b843-7e32-30b0-9407-e8dca58980c1.roa File: de43b843-7e32-30b0-9407-e8dca58980c1.roa (raw, json) Hash identifier: 1WWks6Ox2oHvcyeL6Ejnrn/fj3Kmu1Umc7Mvz8L05HI= Subject key identifier: 1F:AB:25:4E:6E:DB:16:4B:F8:39:03:67:71:22:6B:4E:44:B3:4C:8F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C5666819240AB217D124CEC00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de43b843-7e32-30b0-9407-e8dca58980c1.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 152689 IP address blocks: 68.164.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:81:92:40:ab:21:7d:12:4c:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=c7028f0b-4f2f-4893-853e-fa2e728690bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b2:39:0c:c7:7c:e2:d9:61:7a:8a:d5:da:74: 3e:ef:f8:8c:f0:c8:9c:9b:9d:14:05:7a:7f:af:ff: c2:02:29:ab:d1:8f:32:e3:c2:ee:95:b0:54:9e:3d: a9:a9:d6:6e:d4:42:86:09:2e:7f:92:1c:14:ed:cf: fb:02:50:46:74:79:0b:79:87:10:ea:37:91:b4:79: a4:24:06:c7:a0:e5:24:f2:e2:56:26:1d:c7:85:b9: 70:f6:12:ed:63:e0:4e:1a:db:f9:d8:e0:2a:76:ea: 0e:eb:16:66:99:1e:0e:cb:35:2b:b2:10:7f:f3:6e: 3c:17:86:7e:91:9e:ef:c9:58:c9:27:38:cf:01:10: 3f:bf:77:6b:2f:c5:7b:9b:f2:cd:59:85:12:1f:6f: a5:dc:02:67:01:26:82:05:7d:7d:c3:3d:9c:27:e4: e1:4a:a7:cb:3f:9d:ef:cc:51:27:c4:72:f9:d0:d6: ad:7c:0b:5c:14:f0:61:35:40:4d:de:df:f1:e6:c7: cd:4a:4e:62:04:10:21:60:e7:45:1f:4e:f2:ef:d9: ff:7d:dc:03:10:c2:5c:e1:93:95:0f:ab:ab:cb:73: b9:e7:f0:57:5a:5b:b7:c5:7c:f6:50:d4:52:80:65: 57:92:d8:2d:df:3d:60:6e:6d:f7:59:37:f4:da:3f: 47:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AB:25:4E:6E:DB:16:4B:F8:39:03:67:71:22:6B:4E:44:B3:4C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de43b843-7e32-30b0-9407-e8dca58980c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:2f:41:19:41:ff:31:97:1c:f0:f4:65:3e:d0:84:b1:63:2f: f3:1f:ec:e3:1a:ab:b8:79:54:c9:56:ea:a8:94:04:92:dd:77: 99:20:d3:c0:63:78:71:da:94:76:9a:5e:85:bb:62:0f:9a:d5: 85:83:fd:fb:e6:b6:85:55:8f:dd:a9:9c:9e:54:0c:82:01:44: 9d:09:b5:14:56:24:59:c5:9d:85:a5:21:c5:61:9f:d6:3b:0a: 6f:f7:dc:22:7b:ba:76:94:9a:f6:d1:c9:59:52:10:18:db:1f: a1:7c:a4:f1:10:b2:ac:ce:2c:48:60:4c:49:de:1d:96:dd:8a: 0d:5c:70:4f:13:0d:38:49:0b:99:30:a1:c0:00:54:29:7f:21: c0:4d:2e:17:d7:2c:7e:2e:61:a6:12:47:40:4a:2a:c0:7d:0f: aa:5e:c4:72:d9:71:13:03:09:15:8c:6e:30:aa:30:25:46:cc: 1a:f9:2a:a2:f0:3d:c9:ee:92:17:08:88:ff:a6:b7:a7:2c:37: bb:68:41:2b:9e:e8:94:fe:3f:2f:86:0c:5b:42:19:b8:ee:2d: 62:53:08:8e:9e:47:64:5c:81:60:06:e7:11:0b:84:9d:aa:1d: 1c:d9:4b:15:70:96:de:e7:e6:9a:69:27:4b:84:f4:01:c7:9b: a9:f8:80:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZoGSQKshfRJM7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YzcwMjhmMGItNGYyZi00ODkzLTg1M2UtZmEyZTcyODY5MGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbI5DMd84tlheorV2nQ+7/iM8Micm50UBXp/ r//CAimr0Y8y48LulbBUnj2pqdZu1EKGCS5/khwU7c/7AlBGdHkLeYcQ6jeRtHmk JAbHoOUk8uJWJh3Hhblw9hLtY+BOGtv52OAqduoO6xZmmR4OyzUrshB/8248F4Z+ kZ7vyVjJJzjPARA/v3drL8V7m/LNWYUSH2+l3AJnASaCBX19wz2cJ+ThSqfLP53v zFEnxHL50NatfAtcFPBhNUBN3t/x5sfNSk5iBBAhYOdFH07y79n/fdwDEMJc4ZOV D6ury3O55/BXWlu3xXz2UNRSgGVXktgt3z1gbm33WTf02j9HHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+rJU5u2xZL+DkDZ3Eia05Es0yPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGU0M2I4NDMtN2UzMi0z MGIwLTk0MDctZThkY2E1ODk4MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRKSkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcvQRlB/zGXHPD0ZT7QhLFjL/Mf7OMaq7h5VMlW6qiUBJLdd5kg08Bj eHHalHaaXoW7Yg+a1YWD/fvmtoVVj92pnJ5UDIIBRJ0JtRRWJFnFnYWlIcVhn9Y7 Cm/33CJ7unaUmvbRyVlSEBjbH6F8pPEQsqzOLEhgTEneHZbdig1ccE8TDThJC5kw ocAAVCl/IcBNLhfXLH4uYaYSR0BKKsB9D6pexHLZcRMDCRWMbjCqMCVGzBr5KqLw PcnukhcIiP+mt6csN7toQSue6JT+Py+GDFtCGbjuLWJTCI6eR2RcgWAG5xELhJ2q HRzZSxVwlt7n5pppJ0uE9AHHm6n4gMI= -----END CERTIFICATE-----Generated at Sat Jan 10 04:24:36 2026 by rpki-client