This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae74b978-43c7-382a-9bd7-a1a7004833ac.roa File: ae74b978-43c7-382a-9bd7-a1a7004833ac.roa (raw, json) Hash identifier: 0aQWQElPpktD9w+CEz4f/Q3vSWGeaTWlgyXhZ1EW4RI= Subject key identifier: DD:38:6A:4E:32:95:74:6D:0B:38:54:26:AA:DD:10:0C:97:02:81:86 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584C242650006202EF2C7C528580 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae74b978-43c7-382a-9bd7-a1a7004833ac.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 213229 IP address blocks: 166.0.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:50:00:62:02:ef:2c:7c:52:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=994dd3e6-5d6c-4156-b34a-dad33111d218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2f:b4:19:9e:b5:7f:65:dd:db:ce:df:8d:79: 86:00:ab:a9:84:7c:eb:43:a9:74:b8:d3:4c:27:25: c4:bf:a7:e8:fc:6e:fc:93:8f:43:ad:ca:47:c6:06: 42:dc:71:56:81:2b:ae:75:99:ff:79:33:19:54:ee: 8f:f7:61:d7:50:1f:a1:0c:7d:cf:b5:83:1d:88:28: f6:a7:a1:ca:c5:d3:87:d8:42:0e:53:f8:3c:d7:ae: a0:bb:4f:10:03:01:47:ee:8c:85:2d:48:f5:83:0a: 4e:48:17:79:6b:03:20:82:2d:7e:de:d9:9a:d9:4f: bb:7e:88:59:e5:05:34:15:84:31:39:d3:59:f8:7b: 8b:8b:0a:3f:8b:b9:ab:16:27:d3:2d:aa:69:11:11: 24:27:eb:e3:da:ca:a7:54:e2:a8:47:40:a0:a2:ca: 3f:91:15:99:88:d6:6b:e8:0a:7f:32:19:20:ef:46: 7a:10:fe:db:c7:a9:2a:83:68:46:c2:b9:88:45:91: 8a:ac:f3:81:5b:be:da:c1:8f:b8:d4:0d:61:9d:1f: c9:30:84:81:7e:27:cc:32:e4:ef:ce:45:0c:1b:5a: db:5c:b4:2e:bd:ef:a6:ca:2f:bb:d4:cd:9b:97:cd: 80:44:51:d6:b5:d2:d5:db:30:2c:a7:12:87:34:d9: 62:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:38:6A:4E:32:95:74:6D:0B:38:54:26:AA:DD:10:0C:97:02:81:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ae74b978-43c7-382a-9bd7-a1a7004833ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.0.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:30:39:68:77:83:fc:d5:e0:6b:c0:d2:8f:e6:c8:77:76:6c: 49:ed:ef:1e:17:90:96:d1:0f:76:bf:84:90:1c:65:ef:26:3f: da:40:a9:83:fb:21:23:6b:3a:1b:7b:98:da:e6:c9:ce:ba:d7: b3:aa:07:c3:0d:5d:e0:cd:f7:e7:ec:1a:ba:f5:3d:1f:db:bb: 59:14:02:71:13:1c:82:e1:1e:eb:70:a4:58:23:c9:2f:ca:70: a8:04:30:3f:00:7c:b4:e3:cd:ff:61:f9:29:3b:03:cc:92:27: 9c:30:fa:1c:3f:2f:67:eb:82:0d:29:03:c8:fa:08:6f:52:5a: 2a:d9:7a:b5:c0:4d:17:8d:4d:c8:3d:e9:1e:bc:88:cf:33:68: db:57:04:7e:9f:bb:1a:6c:bb:de:24:04:56:0a:f5:f0:30:b6: df:3a:03:79:1d:43:88:72:60:87:17:a0:7c:52:90:41:3e:fb: 93:7f:fa:1e:97:d4:fd:c6:93:a9:3c:f6:79:32:9d:e9:4d:4c: 66:ca:13:b1:ef:52:89:4b:bd:9b:72:b6:ad:ab:68:aa:7f:d6: 13:28:e9:f8:c3:80:48:d5:f2:44:bd:05:57:7a:18:89:7c:5e: 8a:2f:e3:60:db:99:10:40:c0:41:27:4f:17:d9:88:43:a9:7b: 03:c1:02:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJlAAYgLvLHxShYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk OTk0ZGQzZTYtNWQ2Yy00MTU2LWIzNGEtZGFkMzMxMTFkMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi+0GZ61f2Xd287fjXmGAKuphHzrQ6l0uNNM JyXEv6fo/G78k49DrcpHxgZC3HFWgSuudZn/eTMZVO6P92HXUB+hDH3PtYMdiCj2 p6HKxdOH2EIOU/g8166gu08QAwFH7oyFLUj1gwpOSBd5awMggi1+3tma2U+7fohZ 5QU0FYQxOdNZ+HuLiwo/i7mrFifTLappEREkJ+vj2sqnVOKoR0Cgoso/kRWZiNZr 6Ap/Mhkg70Z6EP7bx6kqg2hGwrmIRZGKrPOBW77awY+41A1hnR/JMISBfifMMuTv zkUMG1rbXLQuve+myi+71M2bl82ARFHWtdLV2zAspxKHNNliHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN04ak4ylXRtCzhUJqrdEAyXAoGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYWU3NGI5NzgtNDNjNy0z ODJhLTliZDctYTFhNzAwNDgzM2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADowOWh3g/zV4GvA0o/myHd2bEnt7x4XkJbRD3a/hJAcZe8mP9pAqYP7 ISNrOht7mNrmyc6617OqB8MNXeDN9+fsGrr1PR/bu1kUAnETHILhHutwpFgjyS/K cKgEMD8AfLTjzf9h+Sk7A8ySJ5ww+hw/L2frgg0pA8j6CG9SWirZerXATReNTcg9 6R68iM8zaNtXBH6fuxpsu94kBFYK9fAwtt86A3kdQ4hyYIcXoHxSkEE++5N/+h6X 1P3Gk6k89nkynelNTGbKE7HvUolLvZtytq2raKp/1hMo6fjDgEjV8kS9BVd6GIl8 Xoov42DbmRBAwEEnTxfZiEOpewPBAkg= -----END CERTIFICATE-----Generated at Sat Dec 20 14:39:47 2025 by rpki-client