This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa File: 28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa (raw, json) Hash identifier: mPFpJjCSBH0u7xoLJ04e/pEXzmoaAtxewpa3JvNZP0Y= Subject key identifier: AF:DB:8E:8D:CB:E1:E8:83:4A:C3:B6:1C:77:D9:3B:4B:16:7F:92:5A Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584C364B99E82213911FC1896B00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa Signing time: Wed 17 Dec 2025 02:00:31 +0000 ROA not before: Wed 17 Dec 2025 02:00:31 +0000 ROA not after: Tue 17 Mar 2026 01:00:31 +0000 asID: 852 IP address blocks: 209.121.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:36:4b:99:e8:22:13:91:1f:c1:89:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Dec 17 02:00:31 2025 GMT Not After : Mar 17 01:00:31 2026 GMT Subject: CN=2adf8510-d001-4396-b254-bacde9d48d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a0:29:16:98:39:20:07:7b:26:1a:40:59:b6: 45:90:1c:18:71:50:08:ba:4b:56:66:72:dc:f8:30: 79:90:27:48:e5:68:8b:d3:d5:ae:5f:9e:d2:82:44: 17:74:51:1f:e2:1f:3a:85:39:5e:b0:2f:48:e1:59: f9:d2:d0:ba:49:12:54:97:13:27:a6:04:d8:5a:66: c9:4d:8b:a8:29:14:7f:f3:6c:d6:ff:7f:17:58:40: df:ec:e5:60:87:d0:cd:bc:06:e9:0d:be:23:80:6a: 1b:ab:f2:6a:51:a4:5b:e3:0e:d6:74:34:ef:48:88: af:05:4b:a0:fb:0a:3b:aa:ed:af:35:d4:05:dd:e3: cd:ea:fd:09:ec:cc:e1:ee:16:ef:34:1e:9b:2c:2e: 39:be:9f:d5:ce:30:a6:43:3f:ef:11:45:dd:c6:89: 61:48:1d:2a:28:f8:68:9e:ba:b1:db:6c:d9:aa:db: 3b:3a:66:7f:d4:d9:43:98:e4:4b:b1:50:f8:78:1a: fd:34:35:f2:1d:ef:4b:3f:cc:17:c5:c8:2f:59:1d: c1:56:ab:bd:52:09:38:84:a4:c6:69:e0:04:73:6a: cd:89:53:6e:3b:79:46:91:97:d5:fd:a5:64:96:7f: 83:4d:dd:cf:e9:df:9d:90:69:5b:9f:b0:31:93:38: e3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DB:8E:8D:CB:E1:E8:83:4A:C3:B6:1C:77:D9:3B:4B:16:7F:92:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/28d0696b-8dfd-3cab-8fab-1a07f8dbee06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.121.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:b1:91:ba:e5:3d:c7:d1:a1:ac:c2:a6:4b:0e:27:39:06:f9: 7e:fb:c2:bc:ab:66:5b:d7:1c:27:31:e9:2b:79:9f:df:7a:17: 00:b8:97:38:1c:2b:48:91:43:4f:af:d9:15:56:c4:3e:34:5c: 02:dd:c1:2b:c2:95:b7:48:37:06:88:bd:da:24:a5:bd:56:6f: be:d4:56:76:3c:36:80:4b:29:04:a3:c2:4e:57:0c:3d:61:ab: 43:b0:fb:9d:cd:6b:64:19:02:4c:76:66:c2:1c:c5:33:7c:62: ab:1b:2f:21:ba:5d:90:73:04:5b:5e:cf:b1:d1:e5:8a:ba:be: 94:a9:27:86:2b:66:fe:6e:9b:ba:c8:3a:94:db:ea:6f:80:fc: 08:2e:00:8b:be:e3:9d:4f:f9:a6:86:ac:e2:0c:15:81:ad:c1: cb:b9:e6:bc:99:d7:c6:f3:f6:4f:b0:b0:30:cb:26:a3:e2:4c: e8:3b:41:46:4a:52:c1:6f:ee:4d:d7:b0:64:c4:41:a4:4e:cf: 0c:04:39:4b:0d:bc:fd:c3:98:28:d8:44:94:8c:67:d5:4c:68: ae:dc:a4:3e:86:b3:7b:f8:82:9d:7f:5f:c9:c7:79:cb:cd:99: b8:35:e5:f5:b5:d6:82:27:61:81:6a:09:7d:03:0b:54:92:d7: 52:7b:98:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw2S5noIhORH8GJawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTIxNzAyMDAzMVoXDTI2MDMxNzAxMDAzMVowLzEtMCsGA1UEAxMk MmFkZjg1MTAtZDAwMS00Mzk2LWIyNTQtYmFjZGU5ZDQ4ZDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaApFpg5IAd7JhpAWbZFkBwYcVAIuktWZnLc +DB5kCdI5WiL09WuX57SgkQXdFEf4h86hTlesC9I4Vn50tC6SRJUlxMnpgTYWmbJ TYuoKRR/82zW/38XWEDf7OVgh9DNvAbpDb4jgGobq/JqUaRb4w7WdDTvSIivBUug +wo7qu2vNdQF3ePN6v0J7Mzh7hbvNB6bLC45vp/VzjCmQz/vEUXdxolhSB0qKPho nrqx22zZqts7OmZ/1NlDmORLsVD4eBr9NDXyHe9LP8wXxcgvWR3BVqu9Ugk4hKTG aeAEc2rNiVNuO3lGkZfV/aVkln+DTd3P6d+dkGlbn7AxkzjjSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/bjo3L4eiDSsO2HHfZO0sWf5JaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjhkMDY5NmItOGRmZC0z Y2FiLThmYWItMWEwN2Y4ZGJlZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XlHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM2xkbrlPcfRoazCpksOJzkG+X77wryrZlvXHCcx6St5n996FwC4lzgc K0iRQ0+v2RVWxD40XALdwSvClbdINwaIvdokpb1Wb77UVnY8NoBLKQSjwk5XDD1h q0Ow+53Na2QZAkx2ZsIcxTN8YqsbLyG6XZBzBFtez7HR5Yq6vpSpJ4YrZv5um7rI OpTb6m+A/AguAIu+451P+aaGrOIMFYGtwcu55ryZ18bz9k+wsDDLJqPiTOg7QUZK UsFv7k3XsGTEQaROzwwEOUsNvP3DmCjYRJSMZ9VMaK7cpD6Gs3v4gp1/X8nHecvN mbg15fW11oInYYFqCX0DC1SS11J7mEg= -----END CERTIFICATE-----Generated at Sat Dec 20 20:49:28 2025 by rpki-client