This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa File: af04d1ea-2b61-30e8-9a48-0300a4f75436.roa (raw, json) Hash identifier: KK5ms3xHiVyf1bopyEic3s/kzDCV9HzWF27A3PoHl5Y= Subject key identifier: 81:00:1E:C8:AF:09:D6:85:63:D4:96:A4:3B:32:CB:2A:04:A5:C1:DC Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584C2856548211BA239D90929700 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 10753 IP address blocks: 209.211.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:54:82:11:ba:23:9d:90:92:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=5ef2f489-f814-44af-8274-6991e191c87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:33:1d:71:3e:7a:91:93:31:70:fe:73:03: c3:ee:6e:85:d4:25:c1:08:03:bd:69:a1:50:2b:93: 8a:ad:c8:b1:02:82:16:dd:c3:71:54:08:e0:3d:11: 42:1c:78:29:25:a9:2a:7c:48:e3:11:2b:b2:4c:8b: 38:3b:39:7f:5e:91:97:51:7a:5d:3d:45:db:a7:5a: f9:8c:df:93:38:fb:89:5e:18:69:bc:72:22:5c:5a: ba:ff:66:7f:21:77:58:ce:9a:ae:e0:e3:3a:00:05: 4a:8a:c4:a8:ff:ef:ff:3e:f4:01:fe:f0:8d:48:bc: f3:ce:3d:ec:de:ca:c5:f5:90:26:12:cf:2e:ce:fe: 59:79:b5:55:e0:f2:07:03:4c:35:7a:f8:cf:93:22: fc:3f:75:8d:0f:d2:4c:69:12:77:e7:fa:cc:40:84: 29:eb:7c:b1:57:31:ac:50:35:c6:c2:f5:51:26:68: 6b:c1:32:61:5d:14:39:ae:45:e0:7d:61:68:dd:ae: 61:db:d2:c2:4a:c9:b0:d3:59:94:6a:d8:08:04:28: c9:46:08:eb:f9:df:72:d4:71:3a:1c:13:3d:28:ec: 36:97:62:35:d9:7e:c3:d6:e6:34:55:88:c8:2a:b6: 1c:3d:44:1e:11:36:8a:b9:30:fc:d7:2d:39:8c:96: 9a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:00:1E:C8:AF:09:D6:85:63:D4:96:A4:3B:32:CB:2A:04:A5:C1:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:40:f8:34:ad:7e:80:12:7d:0a:4a:9b:9d:c1:ce:d0:55:29: 7e:1c:98:02:28:52:01:29:d5:28:32:28:c9:aa:de:21:66:81: 5d:b9:e8:32:af:fd:f9:87:82:cb:f1:20:cc:58:0f:46:b5:7a: cc:80:d5:b6:8a:70:41:46:79:f1:d1:35:60:98:1f:8b:26:a2: f1:01:4a:95:90:58:6b:b8:22:63:8a:c2:e2:36:e1:4d:79:62: 88:84:73:67:6a:a5:f2:08:49:39:71:b2:13:cc:5f:41:fb:46: fd:4a:ae:7f:7f:44:93:eb:ec:69:d1:ec:ac:94:be:6d:9b:48: 29:1b:c9:04:79:1b:53:04:f9:4c:ed:8a:da:a0:88:ca:b9:a6: c0:ed:78:a4:21:46:d5:d8:32:b9:85:03:28:86:bf:06:c3:d3: d4:d1:72:33:ba:f7:e1:fb:51:0b:cd:5d:30:b4:d5:50:65:0a: 4f:42:e0:46:fe:b5:bf:da:f7:ed:54:3e:c5:57:ac:37:4d:33: b0:65:bf:34:e6:ed:34:d7:04:53:c2:96:4f:66:89:42:49:e4: f3:a9:46:34:70:2e:95:1e:b6:50:64:1a:58:b6:4c:97:38:51: 67:c3:fd:31:8b:4e:b7:83:c9:c7:b0:d0:87:88:9e:7a:94:e7: 13:77:d1:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwoVlSCEbojnZCSlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk NWVmMmY0ODktZjgxNC00NGFmLTgyNzQtNjk5MWUxOTFjODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtszHXE+epGTMXD+cwPD7m6F1CXBCAO9aaFQ K5OKrcixAoIW3cNxVAjgPRFCHHgpJakqfEjjESuyTIs4Ozl/XpGXUXpdPUXbp1r5 jN+TOPuJXhhpvHIiXFq6/2Z/IXdYzpqu4OM6AAVKisSo/+//PvQB/vCNSLzzzj3s 3srF9ZAmEs8uzv5ZebVV4PIHA0w1evjPkyL8P3WND9JMaRJ35/rMQIQp63yxVzGs UDXGwvVRJmhrwTJhXRQ5rkXgfWFo3a5h29LCSsmw01mUatgIBCjJRgjr+d9y1HE6 HBM9KOw2l2I12X7D1uY0VYjIKrYcPUQeETaKuTD81y05jJaa0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEAHsivCdaFY9SWpDsyyyoEpcHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYWYwNGQxZWEtMmI2MS0z MGU4LTlhNDgtMDMwMGE0Zjc1NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJA+DStfoASfQpKm53BztBVKX4cmAIoUgEp1SgyKMmq3iFmgV256DKv /fmHgsvxIMxYD0a1esyA1baKcEFGefHRNWCYH4smovEBSpWQWGu4ImOKwuI24U15 YoiEc2dqpfIISTlxshPMX0H7Rv1Krn9/RJPr7GnR7KyUvm2bSCkbyQR5G1ME+Uzt itqgiMq5psDteKQhRtXYMrmFAyiGvwbD09TRcjO69+H7UQvNXTC01VBlCk9C4Eb+ tb/a9+1UPsVXrDdNM7BlvzTm7TTXBFPClk9miUJJ5POpRjRwLpUetlBkGli2TJc4 UWfD/TGLTreDycew0IeInnqU5xN30Qw= -----END CERTIFICATE-----Generated at Sat Dec 20 01:31:53 2025 by rpki-client