This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/e9fb18d6-82f9-3a24-997a-454f67ae8ec5.roa File: e9fb18d6-82f9-3a24-997a-454f67ae8ec5.roa (raw, json) Hash identifier: WoxGhb8+SO2ewWxrfdi6rAAjNczHpCQxH6GXzoBhmkg= Subject key identifier: 22:FD:65:39:23:85:C6:3A:7A:0B:89:B3:3F:F5:C9:D0:03:09:1B:00 Certificate issuer: /CN=61ba8425-192b-4617-96ff-4227c427dd41 Certificate serial: 010D0C9F4328584C1FF6321B7575B115F0851D40 Authority key identifier: E4:8E:36:DA:AD:8A:FD:33:5E:75:A7:4E:68:DF:02:C9:18:E7:78:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/e9fb18d6-82f9-3a24-997a-454f67ae8ec5.roa Signing time: Tue 09 Dec 2025 02:00:31 +0000 ROA not before: Tue 09 Dec 2025 02:00:31 +0000 ROA not after: Mon 09 Mar 2026 01:00:31 +0000 asID: 401909 IP address blocks: 74.207.192.0/21 maxlen: 24 216.183.64.0/21 maxlen: 24 2604:1c20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/61ba8425-192b-4617-96ff-4227c427dd41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/61ba8425-192b-4617-96ff-4227c427dd41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1f:f6:32:1b:75:75:b1:15:f0:85:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ba8425-192b-4617-96ff-4227c427dd41 Validity Not Before: Dec 9 02:00:31 2025 GMT Not After : Mar 9 01:00:31 2026 GMT Subject: CN=40343d4e-1576-4d46-997b-ca6399148b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:af:bc:93:25:fd:b0:a1:b9:7f:d1:c0:ee:99: 66:3f:0f:9a:0e:d4:fe:a7:b0:b2:44:cc:8e:d9:bc: f2:5b:fe:ec:ef:af:03:5e:f3:14:91:2d:70:fb:7d: e6:85:04:2b:c7:ae:8d:ca:16:3d:16:47:f3:96:6b: a6:09:2c:01:80:f7:d6:d9:e7:8a:74:7b:4d:b3:2d: d3:d9:f1:ea:3d:a2:77:d5:2f:45:d9:c9:c5:29:27: a1:d9:d6:91:65:71:cc:77:26:59:c4:fd:ff:8e:7a: 7a:33:23:f1:24:06:d6:a9:00:7c:41:cd:59:24:2c: aa:4e:be:c6:91:71:3d:d4:e3:d9:5c:9c:60:ae:a6: c4:52:3a:70:50:52:a7:57:c4:f7:2e:87:60:5c:bc: d3:16:c4:a1:26:d9:c1:56:fd:b6:c0:c2:1d:7e:ec: 64:4b:da:f7:60:85:8d:a2:a4:94:2a:b8:f2:0b:98: 5a:8c:ac:d1:77:97:ff:2f:23:8f:ed:de:07:5c:65: b0:b6:d5:99:4d:9a:ed:c1:46:4c:d6:ed:ec:6a:68: 52:32:3d:e0:46:2a:6e:0a:51:29:a3:d2:d0:8e:0f: 42:03:5a:e9:5f:5f:41:0f:34:36:a6:c2:8f:9b:53: 24:a4:c9:c1:71:f1:a4:5d:2a:3a:a8:fd:e8:ef:4f: a1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FD:65:39:23:85:C6:3A:7A:0B:89:B3:3F:F5:C9:D0:03:09:1B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/e9fb18d6-82f9-3a24-997a-454f67ae8ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41/61ba8425-192b-4617-96ff-4227c427dd41.crl X509v3 Authority Key Identifier: keyid:E4:8E:36:DA:AD:8A:FD:33:5E:75:A7:4E:68:DF:02:C9:18:E7:78:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61ba8425-192b-4617-96ff-4227c427dd41.cer sbgp-ipAddrBlock: critical IPv4: 74.207.192.0/21 216.183.64.0/21 IPv6: 2604:1c20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d3:ac:7e:fe:ef:cd:6f:57:8b:86:72:aa:62:03:9a:97:90: 39:f0:c9:03:34:55:79:65:04:1b:d5:01:15:a1:d6:43:de:52: c5:a9:6e:a0:c1:03:80:b6:ea:c1:c3:20:4d:be:0a:12:52:3d: a9:2b:e3:94:da:39:77:2c:76:40:ae:5a:21:10:b8:0e:9e:49: 01:68:3f:71:72:2d:86:1d:61:53:51:f3:98:0c:05:03:c2:5f: 86:cc:16:9a:80:2c:1b:87:a7:f4:98:08:f7:07:3e:e2:47:85: 5d:22:b8:12:53:97:75:44:68:ae:60:9b:85:46:20:44:4f:b4: 90:35:74:e2:ae:9c:26:81:7e:e4:6b:dd:fb:35:35:26:ee:41: 43:15:fb:50:96:96:93:8d:e7:f7:be:41:2e:89:12:bd:83:c9: b7:11:f7:39:3c:ee:2a:fe:6a:dc:74:e1:94:a4:a0:16:36:99: 62:05:b2:5d:57:8d:49:6f:2a:20:fe:09:63:84:50:c3:b8:5c: 09:85:93:09:4b:42:13:07:29:ea:e2:5c:07:bc:40:1e:40:37: 0b:68:07:1d:83:54:34:6f:6e:bf:36:02:b0:e8:69:22:93:79: 25:d4:b8:cd:65:4a:1c:d6:68:28:92:c5:9a:88:b8:27:88:9d: 82:57:8c:73 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEwf9jIbdXWxFfCFHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFiYTg0MjUtMTkyYi00NjE3LTk2ZmYtNDIyN2M0Mjdk ZDQxMB4XDTI1MTIwOTAyMDAzMVoXDTI2MDMwOTAxMDAzMVowLzEtMCsGA1UEAxMk NDAzNDNkNGUtMTU3Ni00ZDQ2LTk5N2ItY2E2Mzk5MTQ4YjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6+8kyX9sKG5f9HA7plmPw+aDtT+p7CyRMyO 2bzyW/7s768DXvMUkS1w+33mhQQrx66NyhY9FkfzlmumCSwBgPfW2eeKdHtNsy3T 2fHqPaJ31S9F2cnFKSeh2daRZXHMdyZZxP3/jnp6MyPxJAbWqQB8Qc1ZJCyqTr7G kXE91OPZXJxgrqbEUjpwUFKnV8T3LodgXLzTFsShJtnBVv22wMIdfuxkS9r3YIWN oqSUKrjyC5hajKzRd5f/LyOP7d4HXGWwttWZTZrtwUZM1u3samhSMj3gRipuClEp o9LQjg9CA1rpX19BDzQ2psKPm1MkpMnBcfGkXSo6qP3o70+hTQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFCL9ZTkjhcY6eguJsz/1ydADCRsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MWJh ODQyNS0xOTJiLTQ2MTctOTZmZi00MjI3YzQyN2RkNDEvZTlmYjE4ZDYtODJmOS0z YTI0LTk5N2EtNDU0ZjY3YWU4ZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjFiYTg0MjUtMTkyYi00NjE3LTk2 ZmYtNDIyN2M0MjdkZDQxLzYxYmE4NDI1LTE5MmItNDYxNy05NmZmLTQyMjdjNDI3 ZGQ0MS5jcmwwHwYDVR0jBBgwFoAU5I422q2K/TNedadOaN8CyRjneIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MWJhODQyNS0xOTJiLTQ2MTctOTZmZi00MjI3 YzQyN2RkNDEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDSs/AAwQD 2LdAMA0EAgACMAcDBQAmBBwgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFvTrH7+781vV4uGcqpiA5qXkDnw yQM0VXllBBvVARWh1kPeUsWpbqDBA4C26sHDIE2+ChJSPakr45TaOXcsdkCuWiEQ uA6eSQFoP3FyLYYdYVNR85gMBQPCX4bMFpqALBuHp/SYCPcHPuJHhV0iuBJTl3VE aK5gm4VGIERPtJA1dOKunCaBfuRr3fs1NSbuQUMV+1CWlpON5/e+QS6JEr2DybcR 9zk87ir+atx04ZSkoBY2mWIFsl1XjUlvKiD+CWOEUMO4XAmFkwlLQhMHKeriXAe8 QB5ANwtoBx2DVDRvbr82ArDoaSKTeSXUuM1lShzWaCiSxZqIuCeInYJXjHM= -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:24 2025 by rpki-client