This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4b6eb474-288c-33da-aed0-92825457eff1.roa
File: 4b6eb474-288c-33da-aed0-92825457eff1.roa (raw, json)
Hash identifier: 8yBeFD+VhQgbJH77L/Or33BO0DtyCoaufs7Ewc33btQ=
Subject key identifier: 92:69:73:C8:EA:FB:78:60:04:3D:2A:8A:86:33:F8:62:DF:57:F6:D8
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F4328584C285654A31741CA159507FDF0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4b6eb474-288c-33da-aed0-92825457eff1.roa
Signing time: Fri 12 Dec 2025 02:00:30 +0000
ROA not before: Fri 12 Dec 2025 02:00:30 +0000
ROA not after: Thu 12 Mar 2026 01:00:30 +0000
asID: 18590
IP address blocks: 209.211.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:28:56:54:a3:17:41:ca:15:95:07:fd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Dec 12 02:00:30 2025 GMT
Not After : Mar 12 01:00:30 2026 GMT
Subject: CN=948e5d2a-80f3-4275-954b-3e8c6ebac883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:73:04:1c:cd:76:01:00:b9:20:a7:94:fd:
55:e8:05:7f:8e:68:24:1e:97:59:a2:ee:9f:9b:64:
be:5a:e7:81:10:73:af:7a:59:ee:89:62:d5:6d:54:
98:36:44:71:b2:3e:a0:6f:aa:b4:b8:01:b1:43:a6:
b0:73:60:0e:cd:81:54:d2:65:25:c3:25:e2:34:17:
c6:54:9c:8d:e1:3b:7b:93:0c:ee:60:8a:c1:73:88:
97:67:0b:b7:18:f7:38:43:07:0c:15:e2:75:74:4f:
90:09:23:13:bc:73:e9:01:92:d1:c4:6d:4d:81:b0:
1f:a8:12:ab:98:ab:bd:f7:d3:e0:56:a7:15:18:a0:
61:ae:76:eb:4c:0f:36:9b:3f:bd:ec:61:cb:61:31:
7d:b2:57:ae:ed:31:f5:5f:77:58:41:97:85:6a:3c:
1d:fa:b6:ea:3b:d1:8b:7a:71:e7:7f:59:01:d3:9f:
e5:f0:3f:4b:45:de:0a:0e:78:29:9a:99:ab:9e:64:
3a:af:6d:34:40:35:98:8e:a1:f8:0a:e6:d7:36:4f:
44:2c:fd:1d:5c:1f:56:ad:52:ee:3b:6a:8e:33:33:
3a:1d:ee:77:58:be:f6:94:d8:d8:33:90:4b:bc:fd:
24:13:7c:63:23:ff:f1:9f:f4:8f:f8:84:ae:ad:1e:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:69:73:C8:EA:FB:78:60:04:3D:2A:8A:86:33:F8:62:DF:57:F6:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4b6eb474-288c-33da-aed0-92825457eff1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
209.211.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:36:e4:db:dc:ca:3f:79:bb:87:73:a4:d8:33:56:22:0f:ab:
46:33:50:e0:05:6f:2a:38:8e:16:4a:6e:ce:3e:e8:e4:89:74:
6f:77:76:e0:96:41:74:23:60:3b:38:db:ec:0f:0a:b5:80:f6:
49:c0:19:dc:62:8f:da:4c:f8:49:1a:10:b5:97:24:f7:ce:c4:
d0:c6:7c:b5:be:5f:9c:16:f8:b2:28:0a:71:fc:b4:b0:fd:26:
e2:f4:41:03:1d:45:8b:7a:c9:ad:7f:8d:67:18:97:6f:ef:e0:
4f:3c:50:9a:b3:de:e3:cb:12:f3:cd:da:5c:1c:67:73:55:92:
59:2d:4b:af:a9:a5:b3:d9:9f:48:3f:15:3d:5c:fa:a1:60:e1:
81:72:e2:c5:5b:68:a2:63:8b:03:df:22:4b:88:04:48:97:af:
9d:d6:3e:c9:75:b5:c4:b4:eb:d3:1d:9e:c9:36:d7:32:64:6b:
35:f4:2f:34:da:24:e4:0c:6c:43:ba:15:04:0e:82:05:e5:06:
f7:e7:f6:7a:82:eb:84:25:7e:eb:5c:71:07:b4:47:c8:53:48:
ca:53:b6:14:a5:3a:3d:8d:28:1c:11:25:90:3e:07:4c:2a:f9:
ea:f8:52:ce:68:e9:30:df:d2:59:e4:8a:15:2e:62:ad:80:8f:
03:e3:82:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwoVlSjF0HKFZUH/fAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk
OTQ4ZTVkMmEtODBmMy00Mjc1LTk1NGItM2U4YzZlYmFjODgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6pzBBzNdgEAuSCnlP1V6AV/jmgkHpdZou6f
m2S+WueBEHOvelnuiWLVbVSYNkRxsj6gb6q0uAGxQ6awc2AOzYFU0mUlwyXiNBfG
VJyN4Tt7kwzuYIrBc4iXZwu3GPc4QwcMFeJ1dE+QCSMTvHPpAZLRxG1NgbAfqBKr
mKu999PgVqcVGKBhrnbrTA82mz+97GHLYTF9sleu7TH1X3dYQZeFajwd+rbqO9GL
enHnf1kB05/l8D9LRd4KDngpmpmrnmQ6r200QDWYjqH4CubXNk9ELP0dXB9WrVLu
O2qOMzM6He53WL72lNjYM5BLvP0kE3xjI//xn/SP+ISurR6QrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJJpc8jq+3hgBD0qioYz+GLfV/bYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNGI2ZWI0NzQtMjg4Yy0z
M2RhLWFlZDAtOTI4MjU0NTdlZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHM25Nvcyj95u4dzpNgzViIPq0YzUOAFbyo4jhZKbs4+6OSJdG93duCW
QXQjYDs42+wPCrWA9knAGdxij9pM+EkaELWXJPfOxNDGfLW+X5wW+LIoCnH8tLD9
JuL0QQMdRYt6ya1/jWcYl2/v4E88UJqz3uPLEvPN2lwcZ3NVklktS6+ppbPZn0g/
FT1c+qFg4YFy4sVbaKJjiwPfIkuIBEiXr53WPsl1tcS069Mdnsk21zJkazX0LzTa
JOQMbEO6FQQOggXlBvfn9nqC64QlfutccQe0R8hTSMpTthSlOj2NKBwRJZA+B0wq
+er4Us5o6TDf0lnkihUuYq2AjwPjgqM=
-----END CERTIFICATE-----
Generated at Wed Dec 24 13:38:49 2025 by rpki-client