This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa File: a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa (raw, json) Hash identifier: 84YUsVsxiLJTyNANIbfS7uTbXLP2+xo08JFoK3ertoE= Subject key identifier: E5:7B:11:7F:F1:3D:D5:CF:32:6E:14:BA:20:5A:BB:37:CF:22:BF:45 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584C285654E286EBAF88DDB34CC0 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 7743 IP address blocks: 209.211.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:54:e2:86:eb:af:88:dd:b3:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=c7907f1f-2432-44f2-848a-3c0586c46a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:d9:2e:6d:cf:21:7a:a8:02:e5:fd:ff:7f: 47:8d:59:c3:ea:bd:53:1d:7f:91:47:5b:8d:71:4b: 00:41:49:6e:01:b7:db:dd:2f:f7:61:1a:1c:c8:43: ac:8c:d3:ef:9f:5e:3b:00:d5:8e:df:de:87:0d:05: 50:2e:86:b4:ba:f5:82:77:31:59:9c:ea:7f:8b:82: 90:74:c4:27:a5:5c:85:02:37:c8:84:f1:65:73:7b: a5:7e:a2:d8:7d:17:aa:ab:6e:d1:3b:94:4b:2b:a3: 8a:d8:08:0b:ad:59:08:2c:32:02:06:89:1f:a4:fb: 41:d1:b4:74:bd:f0:a3:e3:ab:8f:d2:21:de:45:7d: d1:06:c7:75:5d:88:19:38:1e:c2:fa:a1:e4:cc:59: 8c:be:53:05:b6:8e:ef:6c:08:e8:bc:47:6d:fa:ea: 24:2b:d9:02:33:90:db:0f:2e:c3:fd:5b:21:9b:00: 75:17:a8:eb:99:81:99:7e:09:e4:95:50:62:e4:51: b2:21:43:7c:87:bc:e2:85:8a:4c:ec:bf:13:14:a1: ab:af:c2:26:23:1f:1e:7a:0c:23:88:5b:cd:6f:76: 34:89:08:8b:b7:4c:f5:8b:5f:a6:34:59:31:53:19: 37:bd:6b:1f:da:2a:6b:2f:5f:6a:2e:2d:7d:75:b3: 2e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7B:11:7F:F1:3D:D5:CF:32:6E:14:BA:20:5A:BB:37:CF:22:BF:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a2887002-8c8e-341e-a9fb-69b032ffd4d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f0:20:3c:a7:fe:0d:ac:35:b9:12:4a:02:48:56:b5:b4:35: 69:ce:9b:7c:ea:4d:9b:df:73:2b:c5:2b:92:77:5d:2f:01:02: 13:36:91:7e:c4:d9:94:bd:96:34:3c:86:5c:af:e6:8e:31:07: 1a:28:2c:57:b1:c1:06:38:7e:2f:c9:e0:37:5a:c7:6f:51:c9: cd:7c:b6:a4:9f:76:07:91:ba:46:9e:53:96:3f:11:64:26:c5: c6:75:80:b2:e8:4a:e5:4d:1f:c6:6c:b3:08:26:eb:6b:fd:cc: fe:ef:b5:e0:7a:ae:ff:53:7c:a1:06:67:22:e5:e0:4e:44:35: f6:a0:78:c4:9d:5d:28:d0:d1:23:b3:df:4d:c1:94:d0:ff:38: 29:6f:a8:d8:ae:fe:50:8f:ef:c1:26:69:54:c3:3e:1c:b9:36: f4:f1:a1:6c:06:77:18:ce:46:a9:8a:16:74:7e:bf:b2:63:81: 36:ce:d1:0b:57:b6:58:f8:1b:53:59:54:1a:d4:2e:4f:f1:49: 0d:28:d6:5b:ef:ea:a2:f0:e2:19:36:ea:59:9d:2b:c9:ff:3f: 03:f8:e1:02:dd:58:64:ab:40:51:65:75:55:95:4c:b6:43:93: 13:8b:7e:28:8b:da:21:c9:bd:29:25:73:32:95:74:66:d0:b2: 5d:f1:5b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwoVlTihuuviN2zTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk Yzc5MDdmMWYtMjQzMi00NGYyLTg0OGEtM2MwNTg2YzQ2YTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqzZLm3PIXqoAuX9/39HjVnD6r1THX+RR1uN cUsAQUluAbfb3S/3YRocyEOsjNPvn147ANWO396HDQVQLoa0uvWCdzFZnOp/i4KQ dMQnpVyFAjfIhPFlc3ulfqLYfReqq27RO5RLK6OK2AgLrVkILDICBokfpPtB0bR0 vfCj46uP0iHeRX3RBsd1XYgZOB7C+qHkzFmMvlMFto7vbAjovEdt+uokK9kCM5Db Dy7D/VshmwB1F6jrmYGZfgnklVBi5FGyIUN8h7zihYpM7L8TFKGrr8ImIx8eegwj iFvNb3Y0iQiLt0z1i1+mNFkxUxk3vWsf2iprL19qLi19dbMuxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOV7EX/xPdXPMm4UuiBauzfPIr9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYTI4ODcwMDItOGM4ZS0z NDFlLWE5ZmItNjliMDMyZmZkNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0dPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXwIDyn/g2sNbkSSgJIVrW0NWnOm3zqTZvfcyvFK5J3XS8BAhM2kX7E 2ZS9ljQ8hlyv5o4xBxooLFexwQY4fi/J4Ddax29Ryc18tqSfdgeRukaeU5Y/EWQm xcZ1gLLoSuVNH8Zsswgm62v9zP7vteB6rv9TfKEGZyLl4E5ENfageMSdXSjQ0SOz 303BlND/OClvqNiu/lCP78EmaVTDPhy5NvTxoWwGdxjORqmKFnR+v7JjgTbO0QtX tlj4G1NZVBrULk/xSQ0o1lvv6qLw4hk26lmdK8n/PwP44QLdWGSrQFFldVWVTLZD kxOLfiiL2iHJvSklczKVdGbQsl3xW/A= -----END CERTIFICATE-----Generated at Sat Dec 20 11:40:50 2025 by rpki-client