This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7f6bbd7-70db-38b8-9cea-9a331e307ee4.roa File: c7f6bbd7-70db-38b8-9cea-9a331e307ee4.roa (raw, json) Hash identifier: jofrLpNPUmxTFjUIP/+UZ8xS1DG5YIs5IxIyadkXfIc= Subject key identifier: B7:BB:75:90:E9:C7:3E:F8:E5:13:1B:68:00:CA:00:5B:4B:77:73:6B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584C3EABA499DDEC8F6C18B4E80D Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7f6bbd7-70db-38b8-9cea-9a331e307ee4.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 852 IP address blocks: 209.29.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:a4:99:dd:ec:8f:6c:18:b4:e8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=0cc74dc0-d5bc-4e48-84d4-e2433b40e479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:06:da:5f:fa:a8:5d:5e:6c:05:70:4b:2d:dd: 43:5c:73:fb:32:41:19:c4:e5:89:5a:c9:b3:88:9b: fd:6f:87:25:41:6d:8a:ae:b0:87:b6:f4:1d:c2:6f: c9:75:c8:16:64:8d:ea:17:07:6e:0e:0a:0a:5e:7c: 9e:14:3c:23:81:cb:2e:50:35:50:9c:99:92:1c:34: 5c:04:b6:47:3d:8f:a2:f0:05:8a:ce:22:c0:aa:08: 5c:42:8d:77:3d:f1:9d:16:16:10:d3:04:04:df:d2: 82:97:eb:a1:24:38:30:07:b9:fe:82:95:9c:1b:2f: 92:83:d6:16:7c:17:27:9d:17:2e:97:77:67:28:7a: 39:c4:39:c3:3b:ec:bb:dc:52:9f:21:c0:fe:a4:78: 02:8c:93:4a:00:09:b2:95:47:c1:ab:5d:08:47:88: 4f:d5:2d:83:ae:4b:97:4e:4c:4d:f0:f7:07:8b:30: 32:c6:77:f9:3f:09:51:74:9b:53:36:32:d6:f9:8d: e2:09:a4:3a:9b:d9:93:a2:88:c2:db:a9:b6:5a:f6: 43:ec:12:3a:4f:e0:bc:54:48:15:ab:4e:b5:b9:12: 1a:6c:03:ed:1a:f0:bf:4c:47:8c:e0:c2:c4:f3:4f: b4:cf:de:b6:15:4f:97:ed:65:f5:aa:3e:0a:18:f5: 96:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BB:75:90:E9:C7:3E:F8:E5:13:1B:68:00:CA:00:5B:4B:77:73:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7f6bbd7-70db-38b8-9cea-9a331e307ee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:cd:6c:2c:25:03:f1:01:9e:c5:2e:d5:16:1e:8c:f5:25:1f: c6:dd:c9:00:26:03:d1:f7:f9:a7:03:8d:2a:2d:d0:fc:98:b3: 41:ad:dc:3e:79:f3:9e:82:6c:5b:fe:f0:97:fa:e6:ac:95:76: 9e:59:3e:d8:3c:f5:6a:1c:aa:3e:9b:7d:a2:e6:8d:61:53:ba: bc:ed:ad:c1:ac:d6:92:5f:02:48:97:f8:76:49:4b:fb:1b:02: 6f:56:56:dc:f4:ee:a5:4f:82:74:8d:d3:4e:8e:13:c7:c6:c9: 3a:3a:49:d8:15:ad:b3:6e:f0:17:97:9f:99:69:9f:ea:f6:a7: a2:53:8b:90:c3:5f:45:82:f2:30:0b:d6:2f:6d:20:73:04:f6: 3d:7f:dd:1c:48:af:4e:fc:93:56:cb:ff:93:27:e7:be:c5:6b: 3e:7c:6a:4a:06:26:e7:2e:52:b3:e4:ae:8a:1e:a6:16:f7:58: f3:a4:0d:07:99:9a:86:5f:d5:32:16:2d:83:c9:db:a2:cd:c3: 23:7e:fe:cf:f6:39:31:ef:6b:0d:51:93:37:60:d4:d1:19:41: 56:cc:86:95:e7:a0:d6:75:61:e2:2d:62:a8:31:c2:8d:ad:b8: 2b:ef:b3:50:20:20:1f:e9:59:fa:10:25:e0:23:4a:d3:10:d5: 18:21:74:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q6SZ3eyPbBi06A0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk MGNjNzRkYzAtZDViYy00ZTQ4LTg0ZDQtZTI0MzNiNDBlNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wbaX/qoXV5sBXBLLd1DXHP7MkEZxOWJWsmz iJv9b4clQW2KrrCHtvQdwm/JdcgWZI3qFwduDgoKXnyeFDwjgcsuUDVQnJmSHDRc BLZHPY+i8AWKziLAqghcQo13PfGdFhYQ0wQE39KCl+uhJDgwB7n+gpWcGy+Sg9YW fBcnnRcul3dnKHo5xDnDO+y73FKfIcD+pHgCjJNKAAmylUfBq10IR4hP1S2DrkuX TkxN8PcHizAyxnf5PwlRdJtTNjLW+Y3iCaQ6m9mToojC26m2WvZD7BI6T+C8VEgV q061uRIabAPtGvC/TEeM4MLE80+0z962FU+X7WX1qj4KGPWWoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLe7dZDpxz745RMbaADKAFtLd3NrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzdmNmJiZDctNzBkYi0z OGI4LTljZWEtOWEzMzFlMzA3ZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R1qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPNbCwlA/EBnsUu1RYejPUlH8bdyQAmA9H3+acDjSot0PyYs0Gt3D55 856CbFv+8Jf65qyVdp5ZPtg89Wocqj6bfaLmjWFTurztrcGs1pJfAkiX+HZJS/sb Am9WVtz07qVPgnSN006OE8fGyTo6SdgVrbNu8BeXn5lpn+r2p6JTi5DDX0WC8jAL 1i9tIHME9j1/3RxIr078k1bL/5Mn577Faz58akoGJucuUrPkrooephb3WPOkDQeZ moZf1TIWLYPJ26LNwyN+/s/2OTHvaw1Rkzdg1NEZQVbMhpXnoNZ1YeItYqgxwo2t uCvvs1AgIB/pWfoQJeAjStMQ1RghdMg= -----END CERTIFICATE-----Generated at Sat Dec 20 22:35:55 2025 by rpki-client