This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/8c021314-84f0-3f55-a21d-d6278fb7b41a.roa File: 8c021314-84f0-3f55-a21d-d6278fb7b41a.roa (raw, json) Hash identifier: uq9Z7yS+arEXLDAzm13dM911LSZwc1jXwRiXFC/2VFs= Subject key identifier: C4:FC:42:3B:24:6D:87:00:F1:8E:08:CA:47:B4:DF:4F:8D:71:A5:FF Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584BF34B26671D5BA2D61D209F80 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/8c021314-84f0-3f55-a21d-d6278fb7b41a.roa Signing time: Sun 23 Nov 2025 02:00:31 +0000 ROA not before: Sun 23 Nov 2025 02:00:31 +0000 ROA not after: Sat 21 Feb 2026 02:00:31 +0000 asID: 21947 IP address blocks: 209.137.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f3:4b:26:67:1d:5b:a2:d6:1d:20:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Nov 23 02:00:31 2025 GMT Not After : Feb 21 02:00:31 2026 GMT Subject: CN=10af6182-31d5-4129-ba17-efe2024d8c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:19:67:3a:94:d8:09:cd:ca:0f:67:4d:8e:36: fa:0b:85:e6:04:68:18:18:e5:4c:c1:0c:18:36:46: c9:35:a1:5d:b4:5c:18:4b:18:1a:df:b3:aa:7c:42: a1:9e:25:8e:e1:e8:c9:ba:38:70:01:97:d2:86:4e: f3:22:98:aa:19:4f:89:bd:7d:83:a2:0b:82:2c:55: e6:ce:1a:ea:e6:97:c5:c6:92:02:30:88:2a:ef:8e: 4c:43:6c:25:be:f0:58:a4:9a:36:5d:88:15:84:90: 1a:7f:1d:aa:70:9b:62:d1:61:6c:00:28:64:fd:25: 88:b5:4c:6a:02:5d:c0:47:04:d8:7b:2e:b3:56:c5: a6:07:4c:4c:0d:a7:8f:d7:e0:60:17:52:e3:17:ec: f3:e7:50:50:5b:85:04:b0:1d:1c:77:76:2d:9e:60: dc:11:16:b1:8e:c9:82:ec:1b:93:5f:36:4b:f2:ba: 94:70:91:5b:c2:6a:bf:0d:11:c5:f9:18:0a:36:31: 26:c6:35:33:f2:99:26:57:3c:8e:0e:3c:6a:da:5d: 85:b6:40:66:f8:cc:f6:b2:b0:a3:42:a9:4e:ac:4b: 4e:20:16:c1:6c:49:c7:30:b1:1d:b4:2b:08:0c:5e: 65:67:07:5c:70:dc:14:a4:35:52:04:c8:71:51:80: 85:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FC:42:3B:24:6D:87:00:F1:8E:08:CA:47:B4:DF:4F:8D:71:A5:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/8c021314-84f0-3f55-a21d-d6278fb7b41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 209.137.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8d:0f:6c:8e:12:e5:d9:ba:94:4e:dc:01:e9:12:76:9b:9c: 65:22:6f:63:31:0f:02:f1:20:33:f1:72:aa:65:c4:e6:f5:a6: 79:e6:b1:93:d9:68:27:b9:9b:c2:71:79:d7:e5:1d:af:fe:08: 9e:47:f9:1b:ea:33:70:60:78:b5:17:2f:da:ca:13:5b:8a:08: d9:d4:01:d2:ad:f9:02:82:2e:31:57:22:72:6a:7d:e6:e9:32: 48:03:c2:08:ec:aa:76:e6:64:d2:f3:ed:3a:ed:30:65:04:be: bc:c5:71:7c:5f:7b:93:d4:03:48:a5:c2:3b:cd:1a:e7:db:e4: 09:41:bd:37:c1:4e:c8:ea:86:be:b4:2a:8d:5c:22:ce:a0:b1: c0:cc:e1:99:6e:5d:48:30:f0:d3:21:e7:3a:84:ff:90:7d:b8: f3:d5:23:90:d4:ff:60:59:a6:43:aa:c1:04:a9:70:c4:8a:99: e0:38:ba:40:e5:f9:ea:6f:2b:b1:ac:fc:26:1e:7a:a3:32:d9: 1f:1d:ef:25:d7:df:60:e3:8b:7a:9a:2f:9b:75:d5:17:ec:2f: 74:52:60:be:e4:91:c2:86:75:0a:03:53:cd:5e:39:92:ec:cb: 6b:4f:9a:33:a9:78:f8:da:c7:e5:df:25:ee:db:0e:8d:4b:8b: a4:d4:03:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvzSyZnHVui1h0gn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MTEyMzAyMDAzMVoXDTI2MDIyMTAyMDAzMVowLzEtMCsGA1UEAxMk MTBhZjYxODItMzFkNS00MTI5LWJhMTctZWZlMjAyNGQ4YzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BlnOpTYCc3KD2dNjjb6C4XmBGgYGOVMwQwY NkbJNaFdtFwYSxga37OqfEKhniWO4ejJujhwAZfShk7zIpiqGU+JvX2DoguCLFXm zhrq5pfFxpICMIgq745MQ2wlvvBYpJo2XYgVhJAafx2qcJti0WFsAChk/SWItUxq Al3ARwTYey6zVsWmB0xMDaeP1+BgF1LjF+zz51BQW4UEsB0cd3YtnmDcERaxjsmC 7BuTXzZL8rqUcJFbwmq/DRHF+RgKNjEmxjUz8pkmVzyODjxq2l2FtkBm+Mz2srCj QqlOrEtOIBbBbEnHMLEdtCsIDF5lZwdccNwUpDVSBMhxUYCFpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMT8QjskbYcA8Y4Iyke030+NcaX/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvOGMwMjEzMTQtODRmMC0z ZjU1LWEyMWQtZDYyNzhmYjdiNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmND2yOEuXZupRO3AHpEnabnGUib2MxDwLxIDPxcqplxOb1pnnmsZPZ aCe5m8JxedflHa/+CJ5H+RvqM3BgeLUXL9rKE1uKCNnUAdKt+QKCLjFXInJqfebp MkgDwgjsqnbmZNLz7TrtMGUEvrzFcXxfe5PUA0ilwjvNGufb5AlBvTfBTsjqhr60 Ko1cIs6gscDM4ZluXUgw8NMh5zqE/5B9uPPVI5DU/2BZpkOqwQSpcMSKmeA4ukDl +epvK7Gs/CYeeqMy2R8d7yXX32Dji3qaL5t11RfsL3RSYL7kkcKGdQoDU81eOZLs y2tPmjOpePjax+XfJe7bDo1Li6TUA1Q= -----END CERTIFICATE-----Generated at Tue Nov 25 09:58:45 2025 by rpki-client