This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa File: 10347e71-7fe6-3944-aafa-f5029b5f87c1.roa (raw, json) Hash identifier: iCAWSYVaRjW6pL7q6F3Eg+OZ7SrEFJaJfWiNpEgcUSk= Subject key identifier: 71:D4:02:CB:B4:D6:08:E7:DC:EA:B7:C7:BE:39:7C:BF:FC:A0:7D:87 Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584C3BE10EC4BDB91C2FE662C980 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 398465 IP address blocks: 209.250.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:0e:c4:bd:b9:1c:2f:e6:62:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=14d1e09d-ec5f-468e-be7a-379018bf1eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a4:be:38:d7:6b:88:a9:6e:c6:fa:35:3a:07: 52:a7:99:d4:28:96:65:c5:57:db:e4:38:e1:9d:69: de:fb:d2:8f:77:23:6f:69:23:c5:ec:84:48:00:43: 12:84:c0:9d:4b:a2:29:3b:f9:0a:a0:89:fe:ed:19: d7:58:e1:44:9c:39:97:c2:1b:31:4f:9f:72:84:0e: 21:ad:6e:51:9e:05:ce:20:6b:38:b5:10:54:6d:dc: 7d:39:65:14:4d:b4:a0:76:0d:23:05:c1:93:e4:70: 94:f8:27:e3:7a:67:8c:7f:dd:97:06:e3:7e:cf:4e: b6:13:a7:e8:3c:c9:99:78:39:66:c4:e2:e9:82:93: ce:d9:dd:d2:75:ad:74:96:f7:22:7b:15:77:4d:06: a8:b8:59:63:21:51:10:71:24:c4:d0:aa:a8:e5:a9: fb:5b:da:7f:be:bc:4b:21:6a:d1:47:2e:0d:ed:28: 84:61:d2:e9:ff:50:d9:2d:e1:48:75:d9:22:ca:07: a6:f3:b6:c4:a7:39:52:d7:db:af:1b:2e:25:4c:5f: fb:c3:5f:26:4e:7a:97:6e:fb:9d:06:37:a4:73:b0: f2:c6:c2:35:2e:f8:76:04:76:a8:9c:8a:c3:95:ef: 3b:ad:87:cd:c7:11:33:c6:d2:c6:81:33:2d:6e:dc: 80:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D4:02:CB:B4:D6:08:E7:DC:EA:B7:C7:BE:39:7C:BF:FC:A0:7D:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:75:40:24:51:79:51:aa:0c:45:8f:8a:43:68:b1:e4:ea:40: 5a:78:f7:4a:85:7f:5d:02:ab:70:dc:87:77:08:cc:b5:b5:eb: aa:e1:ff:f5:76:89:fd:51:98:52:40:d5:1a:ff:5c:83:d7:5c: fe:dc:34:2c:a6:95:48:84:de:24:12:4d:86:57:8b:ab:5d:88: 6f:87:9b:95:ac:1b:b8:24:97:61:99:41:f6:ee:f9:9c:14:c4: 90:1b:7a:15:21:a1:29:54:2f:6d:90:a1:4f:58:5e:09:bb:36: b1:43:a4:e4:52:08:9e:e3:2e:e4:58:d8:cb:2d:cb:b2:07:2c: ec:ed:bc:eb:b5:17:5d:33:d0:60:90:04:8e:5d:94:5b:4b:7c: 39:9c:52:49:7a:60:2c:6e:b0:4e:45:79:81:de:d0:7d:99:2b: 3e:5f:27:ec:62:f7:ff:f6:8d:44:e9:32:44:45:70:57:55:b9: c8:6b:60:93:1c:d3:94:5a:24:9d:32:08:80:4f:9b:37:2f:61: 23:7b:40:7b:77:38:70:44:d3:ac:65:77:8f:14:67:84:46:29: 95:e6:58:fe:0d:3b:7c:51:d5:d8:20:29:21:11:0c:7a:46:dd: e8:98:a3:cb:34:fb:d6:f3:28:f5:76:8c:4a:99:d9:3e:3c:ff: b3:17:fe:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74Q7EvbkcL+ZiyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk MTRkMWUwOWQtZWM1Zi00NjhlLWJlN2EtMzc5MDE4YmYxZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqS+ONdriKluxvo1OgdSp5nUKJZlxVfb5Djh nWne+9KPdyNvaSPF7IRIAEMShMCdS6IpO/kKoIn+7RnXWOFEnDmXwhsxT59yhA4h rW5RngXOIGs4tRBUbdx9OWUUTbSgdg0jBcGT5HCU+CfjemeMf92XBuN+z062E6fo PMmZeDlmxOLpgpPO2d3Sda10lvciexV3TQaouFljIVEQcSTE0Kqo5an7W9p/vrxL IWrRRy4N7SiEYdLp/1DZLeFIddkiygem87bEpzlS19uvGy4lTF/7w18mTnqXbvud Bjekc7DyxsI1Lvh2BHaonIrDle87rYfNxxEzxtLGgTMtbtyAkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHUAsu01gjn3Oq3x745fL/8oH2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvMTAzNDdlNzEtN2ZlNi0z OTQ0LWFhZmEtZjUwMjliNWY4N2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0foLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp1QCRReVGqDEWPikNoseTqQFp490qFf10Cq3Dch3cIzLW166rh//V2 if1RmFJA1Rr/XIPXXP7cNCymlUiE3iQSTYZXi6tdiG+Hm5WsG7gkl2GZQfbu+ZwU xJAbehUhoSlUL22QoU9YXgm7NrFDpORSCJ7jLuRY2Msty7IHLOztvOu1F10z0GCQ BI5dlFtLfDmcUkl6YCxusE5FeYHe0H2ZKz5fJ+xi9//2jUTpMkRFcFdVuchrYJMc 05RaJJ0yCIBPmzcvYSN7QHt3OHBE06xld48UZ4RGKZXmWP4NO3xR1dggKSERDHpG 3eiYo8s0+9bzKPV2jEqZ2T48/7MX/js= -----END CERTIFICATE-----Generated at Sat Dec 20 01:29:04 2025 by rpki-client