This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e21673b2-929d-3d71-bd93-0a164b3091ef.roa File: e21673b2-929d-3d71-bd93-0a164b3091ef.roa (raw, json) Hash identifier: 3Xv1eY2a9fUJ7Ekwymw+JEtw87ecyeicd6ZawhIiw0A= Subject key identifier: 99:56:25:1C:BB:E2:44:FB:7F:EE:B4:7B:EA:BE:97:79:C8:A8:3F:9C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BF78C20C6E8BF13B0C3E71100 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e21673b2-929d-3d71-bd93-0a164b3091ef.roa Signing time: Mon 24 Nov 2025 14:34:42 +0000 ROA not before: Mon 24 Nov 2025 14:34:42 +0000 ROA not after: Sun 22 Feb 2026 14:34:42 +0000 asID: 137830 IP address blocks: 64.204.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:8c:20:c6:e8:bf:13:b0:c3:e7:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 24 14:34:42 2025 GMT Not After : Feb 22 14:34:42 2026 GMT Subject: CN=f8ddf693-11ef-4e71-a199-3a255313e487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a3:35:ea:12:4b:4f:dc:e7:c1:34:ee:4d:59: 4c:ac:b0:81:bb:da:2b:ce:00:35:40:5b:74:7a:85: 8a:7f:6b:92:5a:1e:be:c4:34:05:d4:89:0f:f8:1d: 9e:34:fc:fc:40:6d:cc:f9:63:d9:a1:78:19:3a:f2: 5e:37:f3:cc:07:38:57:41:77:dd:5d:5b:77:dd:68: c0:7e:a9:ca:00:dd:3b:d5:5d:e8:0f:6c:5e:d4:7d: 0b:c1:25:a3:59:fd:e6:4d:ca:e7:61:f2:65:00:8b: bd:8e:31:26:38:0d:a5:d5:e1:6e:6a:4d:b5:1f:28: bc:57:ef:e7:bd:58:e4:18:d4:7c:b2:bf:6f:24:79: 35:3d:88:ed:4a:ff:c5:d4:eb:d5:86:b7:98:fb:9d: 09:3c:da:9b:9d:6c:bb:1e:a7:d7:9f:3d:63:47:de: 76:f3:d4:04:47:56:24:7d:9f:ba:8f:0d:1f:cf:67: 93:f1:ea:df:36:c1:ac:7f:75:05:7b:e9:73:f5:8f: 7e:67:fb:2a:0f:9f:61:9f:2d:7b:be:5a:67:3c:1b: 75:aa:c8:b7:95:a1:a5:19:0f:3d:56:c1:79:82:1e: e0:3c:67:6b:09:79:83:c8:db:d5:71:3f:59:74:e5: 54:3a:22:16:27:a4:7d:ef:3b:2c:6a:ef:e9:04:e7: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:56:25:1C:BB:E2:44:FB:7F:EE:B4:7B:EA:BE:97:79:C8:A8:3F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e21673b2-929d-3d71-bd93-0a164b3091ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:29:0d:4a:4a:3f:db:73:68:56:63:0c:80:fe:e3:7d:fa:f8: b2:2f:e3:6c:a0:44:cc:fd:bb:d5:63:e5:74:ef:e6:36:9e:4c: 82:9b:67:bc:3e:7c:0d:b2:7e:5d:68:e8:ad:90:8e:c4:50:55: a4:47:04:de:d8:67:19:9f:bf:f6:43:8d:1f:f3:90:55:08:b1: ea:5d:66:e4:c7:5e:25:55:a3:03:e9:7c:b4:2e:16:e6:5b:d2: af:dc:b5:a3:70:77:47:a8:e0:98:10:b7:67:03:da:cf:e7:bf: 27:0f:c2:7a:1e:a4:22:b3:17:50:18:a9:68:e5:c7:23:b2:87: 0a:af:65:89:16:47:3e:0b:a9:73:d7:a5:a1:bd:28:b9:fa:b1: e9:ce:0a:40:8d:f6:99:2d:d5:07:f7:34:e0:69:df:0b:39:a2: 04:96:26:cf:c9:fb:c3:69:7f:65:ca:99:f3:9d:ba:f2:52:b1: d1:82:01:fd:fc:7c:81:87:5b:2e:5e:3a:ce:01:37:50:7d:82: c1:48:90:aa:59:d4:b8:80:ed:9b:91:a2:7c:c0:e1:61:3b:65: e0:4b:8c:a8:85:f7:d6:96:76:96:98:ea:66:e4:b3:a4:36:85: fd:ca:d6:ec:43:d2:d9:6a:d9:4a:f0:cd:47:d7:d2:9c:b5:e7: 5a:c4:b1:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv3jCDG6L8TsMPnEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyNDE0MzQ0MloXDTI2MDIyMjE0MzQ0MlowLzEtMCsGA1UEAxMk ZjhkZGY2OTMtMTFlZi00ZTcxLWExOTktM2EyNTUzMTNlNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aM16hJLT9znwTTuTVlMrLCBu9orzgA1QFt0 eoWKf2uSWh6+xDQF1IkP+B2eNPz8QG3M+WPZoXgZOvJeN/PMBzhXQXfdXVt33WjA fqnKAN071V3oD2xe1H0LwSWjWf3mTcrnYfJlAIu9jjEmOA2l1eFuak21Hyi8V+/n vVjkGNR8sr9vJHk1PYjtSv/F1OvVhreY+50JPNqbnWy7HqfXnz1jR95289QER1Yk fZ+6jw0fz2eT8erfNsGsf3UFe+lz9Y9+Z/sqD59hny17vlpnPBt1qsi3laGlGQ89 VsF5gh7gPGdrCXmDyNvVcT9ZdOVUOiIWJ6R97zssau/pBOdphwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlWJRy74kT7f+60e+q+l3nIqD+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTIxNjczYjItOTI5ZC0z ZDcxLWJkOTMtMGExNjRiMzA5MWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIpDUpKP9tzaFZjDID+4336+LIv42ygRMz9u9Vj5XTv5jaeTIKbZ7w+ fA2yfl1o6K2QjsRQVaRHBN7YZxmfv/ZDjR/zkFUIsepdZuTHXiVVowPpfLQuFuZb 0q/ctaNwd0eo4JgQt2cD2s/nvycPwnoepCKzF1AYqWjlxyOyhwqvZYkWRz4LqXPX paG9KLn6senOCkCN9pkt1Qf3NOBp3ws5ogSWJs/J+8Npf2XKmfOduvJSsdGCAf38 fIGHWy5eOs4BN1B9gsFIkKpZ1LiA7ZuRonzA4WE7ZeBLjKiF99aWdpaY6mbks6Q2 hf3K1uxD0tlq2UrwzUfX0py151rEsfY= -----END CERTIFICATE-----Generated at Tue Nov 25 14:50:35 2025 by rpki-client