This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa File: d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa (raw, json) Hash identifier: nbe6g90Xgc8DJzjsuqHCLBl2do0q359Rl+g53RQ8g8c= Subject key identifier: 7D:3B:C0:79:BE:87:D1:C5:B6:08:77:4F:99:67:B6:82:78:95:75:A8 Certificate issuer: /CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507 Certificate serial: 010D0C9F4328584C2856363DD0DD20C0C2846280 Authority key identifier: 9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 22280 IP address blocks: 209.196.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:36:3d:d0:dd:20:c0:c2:84:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f60c0cf-9537-4a86-bd67-a1dfd2892507 Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=69c1752c-a603-4b8c-9d4e-bc52ef41d6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:77:f9:42:37:3e:47:44:a3:f0:76:7f:0e: 07:92:a5:3b:95:c4:8d:b0:d6:42:76:eb:b3:2f:53: 60:70:fa:31:02:e8:49:5e:ad:bb:09:74:a5:9c:8b: 57:f0:40:25:0c:b2:21:b4:7e:14:46:c4:07:fd:ef: 68:7c:13:6b:64:fd:48:9c:e7:e3:8a:b1:db:c7:67: 65:da:c7:b7:34:ea:8b:28:fe:dd:14:20:2a:b6:a5: 7b:95:88:11:d3:00:67:ab:d1:4d:44:ee:e5:22:49: 9e:d5:23:ad:16:e6:ef:76:ea:a7:34:ef:c5:b1:c1: 54:99:4c:a2:19:26:97:03:15:d6:6d:18:d2:3d:40: 4e:f7:0a:39:08:38:db:c9:83:7e:02:ef:ee:bb:09: 0a:b5:67:24:6e:8f:bd:b5:8b:89:d2:6c:25:f9:ff: 9d:ef:1f:ac:a7:63:82:6e:10:c0:d9:08:20:d4:54: ea:a5:cd:bf:dd:63:80:7d:30:cb:94:b3:af:1e:1b: 19:e1:7f:b5:8b:27:d5:26:51:cc:c5:09:1f:14:b8: 96:24:d0:31:5b:84:0d:fa:9c:0c:d9:a8:f2:88:7b: ed:18:f5:ec:87:4f:1a:c2:03:e5:df:df:a7:10:85: a4:f3:86:b0:f7:25:d5:1e:08:09:6a:01:a1:bf:3d: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3B:C0:79:BE:87:D1:C5:B6:08:77:4F:99:67:B6:82:78:95:75:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/d54a48a9-f6c9-34f1-bd58-42915ccd49d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507/1f60c0cf-9537-4a86-bd67-a1dfd2892507.crl X509v3 Authority Key Identifier: keyid:9D:B7:19:FA:97:3D:4F:D2:FA:41:B6:80:92:4E:D7:18:33:4C:4E:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1f60c0cf-9537-4a86-bd67-a1dfd2892507.cer sbgp-ipAddrBlock: critical IPv4: 209.196.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:64:9a:49:e6:dd:c1:b9:24:8b:f4:79:fd:9b:5a:db:91:55: 6a:60:38:da:27:ee:db:c3:00:b9:a3:2f:86:57:57:a3:17:24: 90:bc:97:0f:c7:c9:72:ab:60:61:ca:ca:e1:94:e4:aa:ba:f4: e2:1d:08:5b:c9:4b:6f:7a:37:a3:f2:72:26:ec:88:0b:47:a1: b7:a4:61:00:4a:1b:95:98:69:22:d9:aa:31:8e:2c:e6:ce:8c: ad:e7:e1:b2:b1:2b:c1:66:4f:28:82:4e:d2:a4:69:26:8c:8d: 57:0a:4d:17:21:09:4a:a3:b2:f8:b4:5b:70:94:0c:d0:99:bc: 3a:2d:41:10:05:30:b5:24:a3:e2:0c:56:0e:86:eb:1f:dd:49: f9:a4:f9:ac:62:73:1b:f1:e8:00:6a:26:5b:1e:4b:d1:82:98: 3d:ec:93:89:b4:18:f5:88:b9:3e:85:f9:1a:e9:ba:36:f0:84: 53:f2:d2:ef:44:d7:55:a2:9a:21:c6:d3:5b:6a:f1:7a:26:77: 87:62:7a:57:df:af:1f:ea:a3:16:19:0c:27:2d:48:2d:91:29: ac:bc:de:41:d1:68:44:a9:d5:e8:80:c1:d8:e0:44:4a:27:38: 7b:c7:3f:c0:77:11:a0:1e:2b:3a:6d:50:34:cb:6c:0b:76:d8: 13:7f:e9:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwoVjY90N0gwMKEYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2MGMwY2YtOTUzNy00YTg2LWJkNjctYTFkZmQyODky NTA3MB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk NjljMTc1MmMtYTYwMy00YjhjLTlkNGUtYmM1MmVmNDFkNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvh3+UI3PkdEo/B2fw4HkqU7lcSNsNZCduuz L1NgcPoxAuhJXq27CXSlnItX8EAlDLIhtH4URsQH/e9ofBNrZP1InOfjirHbx2dl 2se3NOqLKP7dFCAqtqV7lYgR0wBnq9FNRO7lIkme1SOtFubvduqnNO/FscFUmUyi GSaXAxXWbRjSPUBO9wo5CDjbyYN+Au/uuwkKtWckbo+9tYuJ0mwl+f+d7x+sp2OC bhDA2Qgg1FTqpc2/3WOAfTDLlLOvHhsZ4X+1iyfVJlHMxQkfFLiWJNAxW4QN+pwM 2ajyiHvtGPXsh08awgPl39+nEIWk84aw9yXVHggJagGhvz1JmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH07wHm+h9HFtgh3T5lntoJ4lXWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZjYw YzBjZi05NTM3LTRhODYtYmQ2Ny1hMWRmZDI4OTI1MDcvZDU0YTQ4YTktZjZjOS0z NGYxLWJkNTgtNDI5MTVjY2Q0OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWY2MGMwY2YtOTUzNy00YTg2LWJk NjctYTFkZmQyODkyNTA3LzFmNjBjMGNmLTk1MzctNGE4Ni1iZDY3LWExZGZkMjg5 MjUwNy5jcmwwHwYDVR0jBBgwFoAUnbcZ+pc9T9L6QbaAkk7XGDNMTpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZjYwYzBjZi05NTM3LTRhODYtYmQ2Ny1hMWRm ZDI4OTI1MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0cSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMdkmknm3cG5JIv0ef2bWtuRVWpgONon7tvDALmjL4ZXV6MXJJC8lw/H yXKrYGHKyuGU5Kq69OIdCFvJS296N6PycibsiAtHobekYQBKG5WYaSLZqjGOLObO jK3n4bKxK8FmTyiCTtKkaSaMjVcKTRchCUqjsvi0W3CUDNCZvDotQRAFMLUko+IM Vg6G6x/dSfmk+axicxvx6ABqJlseS9GCmD3sk4m0GPWIuT6F+RrpujbwhFPy0u9E 11WimiHG01tq8Xomd4dielffrx/qoxYZDCctSC2RKay83kHRaESp1eiAwdjgREon OHvHP8B3EaAeKzptUDTLbAt22BN/6Sk= -----END CERTIFICATE-----Generated at Mon Dec 22 09:43:36 2025 by rpki-client