This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa File: 8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa (raw, json) Hash identifier: JQXbPNANik+CQFclAdXAAMc4kGN8AnZHr8M8eSQe9+8= Subject key identifier: 35:C0:BE:25:69:3F:C9:C0:02:10:3C:D9:C0:94:CD:04:8F:11:2E:92 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584C417655602FFAE3024C8C35E0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 931 IP address blocks: 66.118.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:55:60:2f:fa:e3:02:4c:8c:35:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=86404ebe-4fa4-4fed-81a3-ce7e9619440e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:25:60:eb:fd:52:bb:eb:e7:91:1c:71:5d: c5:23:c2:ea:d4:c6:cb:53:76:27:9f:41:d0:49:31: 6a:2f:ff:75:17:e0:cb:e7:93:59:56:18:ef:8e:f7: 48:94:57:9a:a4:11:ab:b8:a4:0e:28:44:ff:67:83: 98:40:3c:e8:44:21:71:15:89:3f:94:f7:61:2f:58: 45:58:30:ee:2d:60:90:1f:5b:b1:c0:84:0b:b9:57: 51:c1:f9:c2:b2:60:c5:de:2a:a8:32:60:15:ab:91: ef:b5:f5:f4:47:71:48:d9:98:06:6e:4d:d6:bc:8d: 06:fe:92:17:30:07:cd:af:87:b3:6c:29:cb:09:67: 36:33:97:15:8a:f2:3a:f1:5d:67:7f:f8:1e:62:fd: a7:15:1e:71:87:23:65:2b:f5:93:1a:97:f1:1e:66: 2a:8f:04:07:74:96:93:10:2f:1c:99:ee:c7:56:2e: 80:09:5d:99:37:f1:9d:e1:da:74:56:8b:dc:f9:45: 00:13:33:8c:03:20:fc:d0:1a:b3:b8:e8:9b:11:6b: b7:67:03:39:0f:ff:5e:88:8e:83:6f:08:8f:a8:ef: b0:c8:28:35:28:03:8a:1a:d1:df:ff:0f:4a:dc:c7: c2:72:5f:39:7c:d4:7a:b7:f5:7c:75:92:2a:04:36: ae:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C0:BE:25:69:3F:C9:C0:02:10:3C:D9:C0:94:CD:04:8F:11:2E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/8420f570-04bc-387d-9bb6-d5f7a43e75f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:62:cc:ae:1c:fe:20:53:9b:7a:df:19:ee:a7:b1:65:bf:df: 45:5e:52:f0:2c:66:71:fd:e9:24:e0:ff:20:19:3f:1f:06:88: b6:cd:16:65:e8:53:fa:76:1e:63:51:bd:9a:b4:e5:ed:be:65: 71:eb:d6:ac:c2:b4:dd:70:c4:d1:71:23:a6:ff:04:6e:d7:0d: fa:f3:1a:1d:ed:b3:5d:9c:73:6e:2e:2d:19:bc:14:c8:57:26: e4:c5:24:0d:4c:5c:86:b5:e1:79:b3:2e:25:08:5c:5d:c4:cb: d8:0b:00:40:32:f8:23:57:e5:10:bc:29:b0:23:6a:f4:a4:be: 16:68:d3:62:fa:47:6e:3c:7c:a4:8f:fd:84:18:51:f9:c6:68: 8f:ed:bf:96:66:96:4d:c1:9e:b5:71:5e:dc:e2:c8:15:d1:06: 6c:c5:b5:d8:20:d2:f6:db:d3:40:b2:3f:bd:bf:d6:b2:6d:85: 9f:7b:eb:ae:c9:cc:24:d0:a9:03:0b:31:e9:79:bb:d0:0d:e8: 9b:94:40:bc:e5:32:f1:45:d2:1c:a8:15:fc:6d:74:8d:3c:2e: 10:dd:6d:cc:d5:54:c5:46:5d:4f:25:74:95:96:65:ad:a0:36: 11:12:7c:2f:6f:1e:00:e5:1d:ba:69:6e:af:9b:ef:88:34:fe: dc:90:d1:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdlVgL/rjAkyMNeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk ODY0MDRlYmUtNGZhNC00ZmVkLTgxYTMtY2U3ZTk2MTk0NDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniElYOv9Urvr55EccV3FI8Lq1MbLU3Ynn0HQ STFqL/91F+DL55NZVhjvjvdIlFeapBGruKQOKET/Z4OYQDzoRCFxFYk/lPdhL1hF WDDuLWCQH1uxwIQLuVdRwfnCsmDF3iqoMmAVq5HvtfX0R3FI2ZgGbk3WvI0G/pIX MAfNr4ezbCnLCWc2M5cVivI68V1nf/geYv2nFR5xhyNlK/WTGpfxHmYqjwQHdJaT EC8cme7HVi6ACV2ZN/Gd4dp0Vovc+UUAEzOMAyD80BqzuOibEWu3ZwM5D/9eiI6D bwiPqO+wyCg1KAOKGtHf/w9K3MfCcl85fNR6t/V8dZIqBDaulwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXAviVpP8nAAhA82cCUzQSPES6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvODQyMGY1NzAtMDRiYy0z ODdkLTliYjYtZDVmN2E0M2U3NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVizK4c/iBTm3rfGe6nsWW/30VeUvAsZnH96STg/yAZPx8GiLbNFmXo U/p2HmNRvZq05e2+ZXHr1qzCtN1wxNFxI6b/BG7XDfrzGh3ts12cc24uLRm8FMhX JuTFJA1MXIa14XmzLiUIXF3Ey9gLAEAy+CNX5RC8KbAjavSkvhZo02L6R248fKSP /YQYUfnGaI/tv5Zmlk3BnrVxXtziyBXRBmzFtdgg0vbb00CyP72/1rJthZ97667J zCTQqQMLMel5u9AN6JuUQLzlMvFF0hyoFfxtdI08LhDdbczVVMVGXU8ldJWWZa2g NhESfC9vHgDlHbppbq+b74g0/tyQ0eU= -----END CERTIFICATE-----Generated at Sun Dec 21 03:54:18 2025 by rpki-client