This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/0421951d-b4a7-3a9f-9a3c-2378e875e6e9.roa File: 0421951d-b4a7-3a9f-9a3c-2378e875e6e9.roa (raw, json) Hash identifier: Y5+9ghXQ8Xli4k2TnM+q1AftGu2ySgVTeTPnYGrPoqM= Subject key identifier: 7C:9B:EA:CE:F2:38:EA:19:06:75:BA:6F:87:59:B8:35:A7:E9:04:58 Certificate issuer: /CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Certificate serial: 010D0C9F4328584C3A7BAB819645B3C8EE907168 Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/0421951d-b4a7-3a9f-9a3c-2378e875e6e9.roa Signing time: Thu 18 Dec 2025 14:00:39 +0000 ROA not before: Thu 18 Dec 2025 14:00:39 +0000 ROA not after: Wed 18 Mar 2026 13:00:39 +0000 asID: 174 IP address blocks: 209.166.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3a:7b:ab:81:96:45:b3:c8:ee:90:71:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Validity Not Before: Dec 18 14:00:39 2025 GMT Not After : Mar 18 13:00:39 2026 GMT Subject: CN=74b8a399-27ea-4063-9f23-ec707ed73c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8d:bb:34:5e:45:bb:6c:96:f5:c8:fd:c9:e3: cd:c5:98:a4:c5:f2:ad:c0:47:ea:27:71:df:c9:bc: fd:2a:4b:1d:91:5e:3e:5c:a8:c1:5a:4a:f9:72:9e: 5b:ab:d3:2e:82:51:74:73:e2:7d:8d:7b:f4:3d:33: 20:a5:b7:fc:0d:68:6b:25:d1:06:ed:95:3c:df:dc: 12:7d:e2:54:7d:41:76:0b:d4:e8:c2:d9:ce:3a:0c: f3:6c:8b:d2:c8:32:9b:e4:a5:e7:82:9e:51:46:ea: 09:3d:ef:bd:36:e6:45:ab:33:24:83:66:cb:3d:cb: d5:e4:b8:21:bd:e2:bf:6f:17:76:d1:ab:1b:6c:90: 75:fe:8d:28:a4:46:56:cf:4d:95:e2:7c:e9:6a:01: 12:91:cd:33:ad:46:f7:88:74:01:c4:49:a0:49:89: 78:fc:62:b3:c1:8e:30:d7:9b:04:7d:13:13:89:00: ac:ee:3d:fc:2a:44:40:b7:80:b5:23:16:07:45:ef: 52:7e:1f:00:0e:d5:00:19:b3:70:85:3b:58:df:6f: da:cf:b8:d0:60:b1:f0:c3:a2:39:ec:07:33:75:d8: 21:e5:49:6d:56:52:ef:d1:bd:e2:a5:11:8c:2c:d3: 98:d2:cb:e8:a1:4d:63:f2:28:a6:a7:86:f1:4c:a4: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9B:EA:CE:F2:38:EA:19:06:75:BA:6F:87:59:B8:35:A7:E9:04:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/0421951d-b4a7-3a9f-9a3c-2378e875e6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl X509v3 Authority Key Identifier: keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer sbgp-ipAddrBlock: critical IPv4: 209.166.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:51:81:31:48:15:93:bb:5e:05:77:76:19:2a:96:62:01:0e: 89:13:eb:23:25:9a:a7:e7:03:c0:c7:36:e5:81:63:2a:88:b2: dd:dd:c6:69:27:e5:f3:58:25:b8:1c:3f:48:5a:e4:7d:4f:e1: df:e5:70:bf:19:3e:53:ce:42:53:88:63:1a:8b:94:c7:3d:72: 5c:35:15:c2:20:02:19:d1:2c:f8:df:bc:5d:a0:51:c3:4e:db: 8f:05:c3:e9:20:01:6e:7e:d1:ac:f7:ac:71:da:29:2c:70:33: 12:94:1a:16:57:4e:7f:f6:f3:c9:6f:6b:59:f5:a5:84:cf:1c: 02:bf:b2:38:a0:d8:df:bd:2a:2c:5e:6d:5b:09:d3:f2:12:39: 05:d6:fd:83:46:51:95:07:4e:c7:61:6f:0d:a9:c2:ba:f7:09: 1c:d3:44:52:ad:5f:2f:40:0c:35:37:42:46:a3:2e:a5:c4:bc: 8a:b2:38:0e:c3:6b:4f:5a:fc:54:01:37:a8:00:56:82:89:b1: 48:c8:e4:ec:3f:58:47:5b:b6:ab:33:d1:48:34:25:7e:76:cf: f9:9b:5d:14:cd:d7:9c:41:d6:92:64:f3:0e:c0:be:a3:da:b6: d4:a3:14:f3:a1:c1:93:70:93:09:7a:aa:2e:e0:8b:97:77:c6: c5:0d:6c:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw6e6uBlkWzyO6QcWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGExYmRhMzAtNTA0NS00ZGVkLWJmNDctN2ZkMDNhNTk0 MDkyMB4XDTI1MTIxODE0MDAzOVoXDTI2MDMxODEzMDAzOVowLzEtMCsGA1UEAxMk NzRiOGEzOTktMjdlYS00MDYzLTlmMjMtZWM3MDdlZDczYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY27NF5Fu2yW9cj9yePNxZikxfKtwEfqJ3Hf ybz9KksdkV4+XKjBWkr5cp5bq9MuglF0c+J9jXv0PTMgpbf8DWhrJdEG7ZU839wS feJUfUF2C9TowtnOOgzzbIvSyDKb5KXngp5RRuoJPe+9NuZFqzMkg2bLPcvV5Lgh veK/bxd20asbbJB1/o0opEZWz02V4nzpagESkc0zrUb3iHQBxEmgSYl4/GKzwY4w 15sEfRMTiQCs7j38KkRAt4C1IxYHRe9Sfh8ADtUAGbNwhTtY32/az7jQYLHww6I5 7Aczddgh5UltVlLv0b3ipRGMLNOY0svooU1j8iimp4bxTKRzVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyb6s7yOOoZBnW6b4dZuDWn6QRYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YTFi ZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQwM2E1OTQwOTIvMDQyMTk1MWQtYjRhNy0z YTlmLTlhM2MtMjM3OGU4NzVlNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGExYmRhMzAtNTA0NS00ZGVkLWJm NDctN2ZkMDNhNTk0MDkyLzRhMWJkYTMwLTUwNDUtNGRlZC1iZjQ3LTdmZDAzYTU5 NDA5Mi5jcmwwHwYDVR0jBBgwFoAUg9WJsYZCUYnHW+3xTeETLIiJodYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YTFiZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQw M2E1OTQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0abAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpRgTFIFZO7XgV3dhkqlmIBDokT6yMlmqfnA8DHNuWBYyqIst3dxmkn 5fNYJbgcP0ha5H1P4d/lcL8ZPlPOQlOIYxqLlMc9clw1FcIgAhnRLPjfvF2gUcNO 248Fw+kgAW5+0az3rHHaKSxwMxKUGhZXTn/288lva1n1pYTPHAK/sjig2N+9Kixe bVsJ0/ISOQXW/YNGUZUHTsdhbw2pwrr3CRzTRFKtXy9ADDU3QkajLqXEvIqyOA7D a09a/FQBN6gAVoKJsUjI5Ow/WEdbtqsz0Ug0JX52z/mbXRTN15xB1pJk8w7AvqPa ttSjFPOhwZNwkwl6qi7gi5d3xsUNbJU= -----END CERTIFICATE-----Generated at Thu Jan 1 07:10:14 2026 by rpki-client