This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b0d64248-0620-3fb2-b31b-e4ff4326842d.roa File: b0d64248-0620-3fb2-b31b-e4ff4326842d.roa (raw, json) Hash identifier: ZjHz8DfbcmFdQV7PG6DOHVQ/xnktuxSKveChqVWdMy8= Subject key identifier: 86:DC:03:7A:19:6D:E9:85:C0:E6:03:03:4E:D2:5B:F8:D8:CC:D1:B6 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584BF34B265175117049E2F93680 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b0d64248-0620-3fb2-b31b-e4ff4326842d.roa Signing time: Sun 23 Nov 2025 02:00:31 +0000 ROA not before: Sun 23 Nov 2025 02:00:31 +0000 ROA not after: Sat 21 Feb 2026 02:00:31 +0000 asID: 21947 IP address blocks: 66.109.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f3:4b:26:51:75:11:70:49:e2:f9:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Nov 23 02:00:31 2025 GMT Not After : Feb 21 02:00:31 2026 GMT Subject: CN=0fa53731-bb8b-4a7a-af14-2119f7088739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4f:b3:0e:10:b4:55:17:36:b4:3c:57:8d:66: 3f:7a:51:bb:93:17:6e:33:41:a0:c6:ea:f5:a9:bd: 6f:88:4b:24:33:b3:b9:fe:6a:69:2a:09:99:1a:69: 42:4a:b0:dc:72:3f:59:03:93:0c:f6:93:70:c9:a6: 09:5e:7f:9b:f7:c5:12:fd:6e:f3:f2:45:db:4a:16: d5:ca:f6:8e:9c:80:c3:ef:e7:82:c4:3c:6b:5b:4b: cf:c4:32:93:ef:ed:7a:73:80:32:cf:8c:d8:08:31: c4:af:6c:d1:29:a1:81:b5:c6:f0:34:a1:e2:43:85: c5:b7:97:69:d4:49:3b:e2:1b:34:2b:b2:30:5c:f6: 09:94:ae:0d:82:71:e9:37:f2:29:3c:40:b2:8d:1d: d2:e2:43:fe:da:38:fb:28:02:4e:49:49:e0:cb:3c: ec:4b:55:e4:76:89:f0:8b:1c:29:d6:8e:4b:4e:03: 6f:9b:41:c9:92:38:dc:e4:9e:8f:32:a4:73:e9:f8: 20:e9:04:c4:6b:a1:92:cc:fa:15:5a:ec:83:cd:23: 59:3a:24:46:59:27:42:14:07:2b:33:9e:99:7c:a1: dd:55:cb:c2:a3:52:58:10:d1:59:e7:70:26:a3:06: a7:2f:04:6b:76:81:40:32:ac:8c:56:1d:23:bc:34: 65:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DC:03:7A:19:6D:E9:85:C0:E6:03:03:4E:D2:5B:F8:D8:CC:D1:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b0d64248-0620-3fb2-b31b-e4ff4326842d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 66.109.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:46:ff:42:e5:01:9a:86:72:0b:ca:8c:02:91:bf:e3:4a:34: 35:e6:4b:0e:af:4c:61:13:c6:3d:1d:b8:d4:97:83:42:ce:09: 0f:61:f9:b5:d8:8c:39:9e:9c:53:52:e1:a0:19:93:8d:38:19: 49:13:80:9d:bc:8f:24:0f:5e:80:0a:25:ba:e2:58:68:b7:b4: 31:7d:58:0d:89:fc:57:9b:c4:0b:89:9d:43:ae:8c:82:81:e3: 80:3a:43:5a:58:23:7c:33:45:df:05:0c:b0:3c:0a:38:bc:7b: 40:f3:74:e5:54:08:d3:a1:82:e8:0f:13:44:53:f3:94:8c:5b: 1a:48:46:15:44:39:c8:79:2c:8c:70:5f:3b:bf:ce:5c:00:2b: 22:ff:2c:f9:71:f7:d5:98:5f:10:80:7b:0f:e7:44:43:57:eb: 3b:e3:9a:ec:10:43:41:91:73:68:85:54:b3:37:f6:8e:36:0c: 86:60:c2:09:32:f8:fe:9a:be:19:86:c4:f4:c5:6c:19:ff:98: 58:b7:de:81:e9:c2:18:e3:6e:01:e4:25:1c:78:c5:e3:83:bd: 7f:ea:ce:46:a3:8f:9f:39:45:84:8a:87:23:af:48:4f:59:a5: d3:a7:08:0b:3f:81:cb:aa:cc:ca:46:6b:e7:d2:e4:73:ee:da: 37:36:e8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvzSyZRdRFwSeL5NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MTEyMzAyMDAzMVoXDTI2MDIyMTAyMDAzMVowLzEtMCsGA1UEAxMk MGZhNTM3MzEtYmI4Yi00YTdhLWFmMTQtMjExOWY3MDg4NzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0+zDhC0VRc2tDxXjWY/elG7kxduM0Ggxur1 qb1viEskM7O5/mppKgmZGmlCSrDccj9ZA5MM9pNwyaYJXn+b98US/W7z8kXbShbV yvaOnIDD7+eCxDxrW0vPxDKT7+16c4Ayz4zYCDHEr2zRKaGBtcbwNKHiQ4XFt5dp 1Ek74hs0K7IwXPYJlK4NgnHpN/IpPECyjR3S4kP+2jj7KAJOSUngyzzsS1Xkdonw ixwp1o5LTgNvm0HJkjjc5J6PMqRz6fgg6QTEa6GSzPoVWuyDzSNZOiRGWSdCFAcr M56ZfKHdVcvCo1JYENFZ53AmowanLwRrdoFAMqyMVh0jvDRliQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbcA3oZbemFwOYDA07SW/jYzNG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYjBkNjQyNDgtMDYyMC0z ZmIyLWIzMWItZTRmZjQzMjY4NDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQm2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZG/0LlAZqGcgvKjAKRv+NKNDXmSw6vTGETxj0duNSXg0LOCQ9h+bXY jDmenFNS4aAZk404GUkTgJ28jyQPXoAKJbriWGi3tDF9WA2J/FebxAuJnUOujIKB 44A6Q1pYI3wzRd8FDLA8Cji8e0DzdOVUCNOhgugPE0RT85SMWxpIRhVEOch5LIxw Xzu/zlwAKyL/LPlx99WYXxCAew/nRENX6zvjmuwQQ0GRc2iFVLM39o42DIZgwgky +P6avhmGxPTFbBn/mFi33oHpwhjjbgHkJRx4xeODvX/qzkajj585RYSKhyOvSE9Z pdOnCAs/gcuqzMpGa+fS5HPu2jc26Is= -----END CERTIFICATE-----Generated at Tue Nov 25 09:58:45 2025 by rpki-client