This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ea0f6b42-7972-342a-85e0-184217b64fef.roa File: ea0f6b42-7972-342a-85e0-184217b64fef.roa (raw, json) Hash identifier: 6MgtUONoI3C5iz1hMBmaexOY9lI1JnodAjEOr1uJtFw= Subject key identifier: 5C:60:A8:14:53:B6:7D:E9:B0:71:BC:54:54:09:7C:2B:34:88:0B:DC Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BF5D96E7BEC51459F834FFE80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ea0f6b42-7972-342a-85e0-184217b64fef.roa Signing time: Sun 23 Nov 2025 23:58:51 +0000 ROA not before: Sun 23 Nov 2025 23:58:51 +0000 ROA not after: Sat 21 Feb 2026 23:58:51 +0000 asID: 64267 IP address blocks: 68.164.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f5:d9:6e:7b:ec:51:45:9f:83:4f:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 23 23:58:51 2025 GMT Not After : Feb 21 23:58:51 2026 GMT Subject: CN=09be9edb-f87b-4715-96a3-994d7b0082d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7b:9f:7f:f4:d8:1f:97:95:fa:6f:ae:16:d1: 77:15:b9:dc:70:13:78:01:cd:60:a0:66:fd:37:4a: 6e:0c:c7:a6:38:2c:96:7e:f3:49:88:16:31:f4:e5: da:43:de:26:76:b0:1e:2f:d0:9d:d6:4b:31:f7:84: 72:af:a7:54:d9:c6:48:38:16:93:03:a8:9a:b1:8f: ca:7c:32:56:28:97:da:89:76:83:59:c3:ab:0f:c8: aa:68:5a:be:28:b7:cc:3e:06:d8:88:de:c5:25:96: b2:5c:7a:bd:0f:54:c7:4e:e0:92:db:2f:0b:6c:5c: df:b3:fe:d6:a9:9e:90:3e:8d:01:4a:44:4f:e0:ea: b5:99:4f:65:42:aa:58:81:21:5a:00:2c:f2:6f:99: d3:cc:4e:f1:dc:79:d8:c2:c4:bb:71:96:0c:7c:52: 8e:70:7f:7a:52:48:e0:32:5e:75:a4:3a:80:85:38: 4f:4b:8a:63:ba:8e:07:ef:3b:63:37:f2:46:f1:60: 44:56:4f:67:33:6b:bf:38:42:83:03:a4:ac:8d:ad: b9:ce:e0:39:c4:5c:5f:a9:a5:fe:88:64:e0:a2:f4: cd:21:d7:e9:53:b1:22:0d:77:f3:75:1e:d8:5e:c6: 07:92:9d:64:33:e9:b4:8a:bb:23:c0:33:95:cd:19: 96:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:60:A8:14:53:B6:7D:E9:B0:71:BC:54:54:09:7C:2B:34:88:0B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ea0f6b42-7972-342a-85e0-184217b64fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.164.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f0:63:17:53:81:e7:16:e5:fa:67:b4:7c:23:1e:63:6a:4b: de:d0:b9:a0:60:8d:c0:36:05:53:03:9b:67:72:a4:77:70:f4: b7:63:fb:da:09:e1:2c:dd:9c:a0:5c:92:1e:1f:97:c5:96:b0: 0c:44:77:1f:fe:21:ae:ec:99:fb:c0:90:13:d0:cb:57:1e:8e: 8e:a7:0f:78:41:e3:96:e9:25:38:19:26:f8:93:5b:6e:ad:48: ae:37:fc:62:33:8a:bb:d9:95:27:a2:40:b0:c2:5c:7d:11:58: 6b:27:10:68:19:d8:2f:29:9b:ec:14:6b:20:8a:cd:12:f1:d0: c2:f8:97:9f:a3:e6:8c:01:9e:68:ae:07:f8:b9:3d:91:64:5d: b6:b5:7c:8d:b4:ef:c8:43:15:0b:77:94:69:88:85:0f:8c:da: b8:95:dc:46:33:31:11:2f:45:60:51:77:f9:10:d3:16:cd:0a: 99:d7:2e:7f:cb:ce:5d:c4:93:64:da:07:73:84:14:78:cc:d6: 2e:a1:47:09:9b:df:30:de:29:d3:46:99:da:49:ac:0b:e0:3c: 68:15:ec:e9:14:5d:50:af:31:8e:11:a4:b2:20:fb:9f:8f:d2: b6:0b:a6:2b:75:a4:87:7a:4b:d6:9f:35:d5:85:38:3a:e5:74: 30:e3:2c:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv12W577FFFn4NP/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyMzIzNTg1MVoXDTI2MDIyMTIzNTg1MVowLzEtMCsGA1UEAxMk MDliZTllZGItZjg3Yi00NzE1LTk2YTMtOTk0ZDdiMDA4MmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Huff/TYH5eV+m+uFtF3FbnccBN4Ac1goGb9 N0puDMemOCyWfvNJiBYx9OXaQ94mdrAeL9Cd1ksx94Ryr6dU2cZIOBaTA6iasY/K fDJWKJfaiXaDWcOrD8iqaFq+KLfMPgbYiN7FJZayXHq9D1THTuCS2y8LbFzfs/7W qZ6QPo0BSkRP4Oq1mU9lQqpYgSFaACzyb5nTzE7x3HnYwsS7cZYMfFKOcH96Ukjg Ml51pDqAhThPS4pjuo4H7ztjN/JG8WBEVk9nM2u/OEKDA6Ssja25zuA5xFxfqaX+ iGTgovTNIdfpU7EiDXfzdR7YXsYHkp1kM+m0irsjwDOVzRmW2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxgqBRTtn3psHG8VFQJfCs0iAvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWEwZjZiNDItNzk3Mi0z NDJhLTg1ZTAtMTg0MjE3YjY0ZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRKRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3wYxdTgecW5fpntHwjHmNqS97QuaBgjcA2BVMDm2dypHdw9Ldj+9oJ 4SzdnKBckh4fl8WWsAxEdx/+Ia7smfvAkBPQy1cejo6nD3hB45bpJTgZJviTW26t SK43/GIzirvZlSeiQLDCXH0RWGsnEGgZ2C8pm+wUayCKzRLx0ML4l5+j5owBnmiu B/i5PZFkXba1fI2078hDFQt3lGmIhQ+M2riV3EYzMREvRWBRd/kQ0xbNCpnXLn/L zl3Ek2TaB3OEFHjM1i6hRwmb3zDeKdNGmdpJrAvgPGgV7OkUXVCvMY4RpLIg+5+P 0rYLpit1pId6S9afNdWFODrldDDjLPk= -----END CERTIFICATE-----Generated at Tue Nov 25 14:50:32 2025 by rpki-client