This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa File: dff21604-1698-3188-98f1-6b0994e52624.roa (raw, json) Hash identifier: 00y9pJFSSWFnxWTS2wYnpN9l9RGLozGVBHftTkeR3SE= Subject key identifier: 58:F0:15:9F:7C:16:D1:EE:AB:EC:E5:AA:35:BD:F6:DB:3E:BC:A5:E3 Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584C321BA5B64B18B020716E6100 Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa Signing time: Mon 15 Dec 2025 14:00:38 +0000 ROA not before: Mon 15 Dec 2025 14:00:38 +0000 ROA not after: Sun 15 Mar 2026 13:00:38 +0000 asID: 393821 IP address blocks: 192.169.66.0/23 maxlen: 24 206.125.144.0/21 maxlen: 24 2607:3680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:32:1b:a5:b6:4b:18:b0:20:71:6e:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Dec 15 14:00:38 2025 GMT Not After : Mar 15 13:00:38 2026 GMT Subject: CN=980835fe-e7d8-476f-a131-248d59149a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:72:8f:76:5c:d9:43:1b:de:6e:cc:d3:c4: d5:f7:ed:2f:dd:92:63:05:50:6f:72:0e:e8:22:a4: 88:5d:44:87:0b:fe:03:13:39:70:1d:d2:7e:cf:4a: 69:62:e2:b6:7c:5e:a8:05:e7:08:9e:a2:38:52:13: 6c:12:ec:5f:d3:00:02:7c:fa:13:cb:ff:09:a1:e5: 6f:1c:da:8d:37:bd:90:94:de:5d:5f:42:9b:a7:8b: 8c:0e:ba:e2:b6:43:92:77:0f:fc:b8:ea:d4:2e:21: 1d:1b:d1:67:65:62:fb:4c:8f:6a:5e:92:cf:6a:c3: 90:4c:26:69:dd:c8:4d:c9:cf:ad:04:73:27:20:b7: 41:6a:24:85:b0:ba:b7:2e:78:46:75:c7:cc:ad:db: ac:23:ce:d9:83:4b:e0:47:2c:1a:5e:65:cc:1d:87: 33:3f:f1:e6:15:2b:88:35:c0:7d:78:64:4e:a5:1b: 89:1a:a0:e9:72:d1:2a:3b:89:dc:3f:58:64:51:6f: a5:54:09:63:23:92:4a:71:67:51:64:24:c8:9a:1a: be:98:da:2f:ee:47:db:76:98:ed:4b:4b:61:31:4f: 77:5c:6e:eb:14:2a:d6:85:64:41:5f:ef:4b:c3:85: 4f:05:20:0d:81:df:39:f6:68:1b:f1:16:f7:33:27: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F0:15:9F:7C:16:D1:EE:AB:EC:E5:AA:35:BD:F6:DB:3E:BC:A5:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: 192.169.66.0/23 206.125.144.0/21 IPv6: 2607:3680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1b:1e:34:26:ba:84:b3:64:80:0f:4a:d9:fd:de:66:03:96: ba:e9:66:15:1b:41:53:e0:8c:9e:8f:a0:88:f9:e1:e5:2b:21: 53:a6:e5:60:03:11:0d:09:76:62:58:58:df:33:bf:85:23:c9: 6d:a2:34:27:e2:0b:46:ab:9c:40:bc:c8:dd:0b:b2:c1:5d:ea: 43:29:9d:20:a3:c7:f7:95:85:c4:f0:fa:2d:30:6e:a3:53:bf: 97:9e:a2:27:af:56:b0:58:6e:f7:50:a8:1e:b9:b2:4c:33:1d: 51:63:da:20:90:56:65:74:fa:37:3a:8d:38:c1:c6:3a:c7:fd: 7a:0f:32:9c:dc:2b:80:2a:c5:86:a3:be:a7:c0:ef:85:d2:64: 48:60:3c:33:01:26:24:7c:62:e0:ed:f3:15:94:62:45:8f:59: 12:fa:ca:5f:48:5c:2f:af:00:98:eb:c6:be:12:11:bb:85:05: f2:68:b4:6c:3e:05:ba:12:76:46:f8:09:b4:2f:82:86:fa:75: 7c:f3:a6:93:0c:66:38:4a:d1:07:f8:90:3b:e2:9c:fd:c2:79: d2:39:e7:21:89:56:4f:2e:ee:7f:b3:7e:ab:6f:21:40:dd:31: 14:7a:64:82:2b:30:0d:4d:98:9c:15:90:c3:81:19:c8:51:58: 79:44:b3:e2 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEwyG6W2SxiwIHFuYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI1MTIxNTE0MDAzOFoXDTI2MDMxNTEzMDAzOFowLzEtMCsGA1UEAxMk OTgwODM1ZmUtZTdkOC00NzZmLWExMzEtMjQ4ZDU5MTQ5YTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy5yj3Zc2UMb3m7M08TV9+0v3ZJjBVBvcg7o IqSIXUSHC/4DEzlwHdJ+z0ppYuK2fF6oBecInqI4UhNsEuxf0wACfPoTy/8JoeVv HNqNN72QlN5dX0Kbp4uMDrritkOSdw/8uOrULiEdG9FnZWL7TI9qXpLPasOQTCZp 3chNyc+tBHMnILdBaiSFsLq3LnhGdcfMrdusI87Zg0vgRywaXmXMHYczP/HmFSuI NcB9eGROpRuJGqDpctEqO4ncP1hkUW+lVAljI5JKcWdRZCTImhq+mNov7kfbdpjt S0thMU93XG7rFCrWhWRBX+9Lw4VPBSANgd859mgb8Rb3MydncQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFjwFZ98FtHuq+zlqjW99ts+vKXjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZGZmMjE2MDQtMTY5OC0z MTg4LTk4ZjEtNmIwOTk0ZTUyNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwKlCAwQD zn2QMA0EAgACMAcDBQAmBzaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAYbHjQmuoSzZIAPStn93mYDlrrp ZhUbQVPgjJ6PoIj54eUrIVOm5WADEQ0JdmJYWN8zv4UjyW2iNCfiC0arnEC8yN0L ssFd6kMpnSCjx/eVhcTw+i0wbqNTv5eeoievVrBYbvdQqB65skwzHVFj2iCQVmV0 +jc6jTjBxjrH/XoPMpzcK4AqxYajvqfA74XSZEhgPDMBJiR8YuDt8xWUYkWPWRL6 yl9IXC+vAJjrxr4SEbuFBfJotGw+BboSdkb4CbQvgob6dXzzppMMZjhK0Qf4kDvi nP3CedI55yGJVk8u7n+zfqtvIUDdMRR6ZIIrMA1NmJwVkMOBGchRWHlEs+I= -----END CERTIFICATE-----Generated at Sun Dec 21 01:22:53 2025 by rpki-client