This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa File: d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa (raw, json) Hash identifier: wUPgRA4uJxR/saP2Ut5sIhlkWWx0wKhCHS2ydElzYLE= Subject key identifier: A6:D8:A8:FB:A7:8F:4D:EC:40:A7:35:B6:B1:46:7F:5D:27:FA:F2:32 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584C5F71250591C0522BC4C95CC0 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa Signing time: Wed 31 Dec 2025 19:44:24 +0000 ROA not before: Wed 31 Dec 2025 19:44:24 +0000 ROA not after: Tue 31 Mar 2026 18:44:24 +0000 asID: 62943 IP address blocks: 209.152.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5f:71:25:05:91:c0:52:2b:c4:c9:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Dec 31 19:44:24 2025 GMT Not After : Mar 31 18:44:24 2026 GMT Subject: CN=0efd3221-c492-4a7e-b37b-f09f05b8a3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:80:ab:5d:c5:61:3d:f5:2b:55:90:9d:c6:01: 90:9a:4f:cd:4a:d7:39:f6:77:fb:0a:8d:df:32:a1: 3b:99:b2:de:50:e4:04:38:d9:ed:ea:9d:2f:04:9f: f9:1c:17:2a:4d:01:96:ca:af:20:de:0c:a9:63:00: af:c2:ab:26:bb:ee:bf:7c:4b:6e:da:6d:01:2c:0b: 4e:94:57:d7:8d:e4:32:e0:b9:b7:44:eb:a8:4c:a7: 29:b7:06:7c:07:ac:4b:e8:c5:91:21:91:2b:70:4f: df:f4:89:ee:2c:70:ae:47:bb:1b:f1:a9:93:40:a8: be:53:31:4f:59:8a:f6:27:31:71:d1:1e:cb:84:83: d9:ea:08:66:83:85:3e:be:3a:07:25:33:30:8c:e8: 45:4e:9e:c3:9e:5d:04:5c:7e:f7:95:10:15:78:9a: 45:b6:0b:45:92:fc:af:90:3f:e0:e9:89:a4:22:7a: 47:2e:2b:c2:90:d7:92:46:da:3a:b7:f7:b2:74:ff: f7:ac:3b:26:bc:d9:28:5a:50:72:59:d4:69:42:d3: 72:bf:64:ed:06:2d:81:f9:a3:c1:05:ce:aa:fb:18: 5f:69:53:92:4f:05:9a:65:75:83:4b:04:6f:f3:e2: 9c:2d:83:de:e4:40:ec:6c:b2:97:fa:b8:cc:7f:e8: 96:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D8:A8:FB:A7:8F:4D:EC:40:A7:35:B6:B1:46:7F:5D:27:FA:F2:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/d8f74ea4-d6c7-3ce1-bd41-4bd6ceb881d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 209.152.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:01:0c:69:57:8f:a7:e8:57:ab:73:ec:cb:6f:4f:b3:4c:29: 8d:26:5f:e5:93:24:a3:5a:de:fe:af:51:28:5f:02:7a:41:3a: 6f:ad:8a:3e:14:f3:db:1b:d8:e6:d9:48:c7:dd:0b:de:fd:c7: 8e:3a:6b:c6:5b:05:98:11:c5:72:fa:09:43:0d:ad:ac:88:44: 18:0b:3a:b9:7e:46:de:d9:27:5a:69:1e:41:8a:3e:ba:fa:8c: 1e:91:fe:aa:d4:2c:69:78:48:44:1b:14:7c:5f:3a:d6:0a:81: a1:0a:da:20:8f:ed:c4:4c:88:fa:9f:e6:2c:f0:ce:b3:2e:79: b0:2e:6c:49:9f:d9:74:b5:31:82:ee:e6:12:51:74:c1:19:c5: b2:2d:68:a2:55:42:30:1b:15:95:4e:e1:4e:e7:9a:9b:d4:ad: 72:9d:1f:76:7a:60:ee:d9:ce:c5:34:27:58:31:f9:0c:22:e3: 64:14:a3:dc:87:3a:76:eb:75:cf:2d:16:83:20:89:20:ab:cc: f2:3f:f5:e8:a2:c5:69:f8:37:42:3a:fa:0d:ae:3b:9b:c6:cd: 7a:01:72:0a:bf:cd:39:a7:2d:28:72:83:c5:f8:05:ba:c0:42: de:86:40:3e:4e:63:5d:e6:cd:22:81:d2:ec:27:c7:07:f1:df: cb:7a:58:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExfcSUFkcBSK8TJXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI1MTIzMTE5NDQyNFoXDTI2MDMzMTE4NDQyNFowLzEtMCsGA1UEAxMk MGVmZDMyMjEtYzQ5Mi00YTdlLWIzN2ItZjA5ZjA1YjhhM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oCrXcVhPfUrVZCdxgGQmk/NStc59nf7Co3f MqE7mbLeUOQEONnt6p0vBJ/5HBcqTQGWyq8g3gypYwCvwqsmu+6/fEtu2m0BLAtO lFfXjeQy4Lm3ROuoTKcptwZ8B6xL6MWRIZErcE/f9InuLHCuR7sb8amTQKi+UzFP WYr2JzFx0R7LhIPZ6ghmg4U+vjoHJTMwjOhFTp7Dnl0EXH73lRAVeJpFtgtFkvyv kD/g6YmkInpHLivCkNeSRto6t/eydP/3rDsmvNkoWlByWdRpQtNyv2TtBi2B+aPB Bc6q+xhfaVOSTwWaZXWDSwRv8+KcLYPe5EDsbLKX+rjMf+iWlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbYqPunj03sQKc1trFGf10n+vIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvZDhmNzRlYTQtZDZjNy0z Y2UxLWJkNDEtNGJkNmNlYjg4MWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8BDGlXj6foV6tz7MtvT7NMKY0mX+WTJKNa3v6vUShfAnpBOm+tij4U 89sb2ObZSMfdC979x446a8ZbBZgRxXL6CUMNrayIRBgLOrl+Rt7ZJ1ppHkGKPrr6 jB6R/qrULGl4SEQbFHxfOtYKgaEK2iCP7cRMiPqf5izwzrMuebAubEmf2XS1MYLu 5hJRdMEZxbItaKJVQjAbFZVO4U7nmpvUrXKdH3Z6YO7ZzsU0J1gx+Qwi42QUo9yH Onbrdc8tFoMgiSCrzPI/9eiixWn4N0I6+g2uO5vGzXoBcgq/zTmnLShyg8X4BbrA Qt6GQD5OY13mzSKB0uwnxwfx38t6WDc= -----END CERTIFICATE-----Generated at Sun Jan 11 03:56:57 2026 by rpki-client