This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa File: 5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa (raw, json) Hash identifier: 7aEL6T3jcoAO8MBQK1VVq6rmQvAsKqQo4EjyjwyCPi4= Subject key identifier: 77:2D:80:FD:FE:E2:2E:36:67:A3:77:25:9B:EB:8F:20:8F:79:62:63 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584C2DEB91E871D13E0FE6520FC8 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa Signing time: Sun 14 Dec 2025 02:00:31 +0000 ROA not before: Sun 14 Dec 2025 02:00:31 +0000 ROA not after: Sat 14 Mar 2026 01:00:31 +0000 asID: 36298 IP address blocks: 209.166.148.0/24 maxlen: 24 209.166.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2d:eb:91:e8:71:d1:3e:0f:e6:52:0f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Dec 14 02:00:31 2025 GMT Not After : Mar 14 01:00:31 2026 GMT Subject: CN=8d0f1a3e-7b91-419c-aac8-6570ad44eb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f4:e6:1e:92:17:d7:54:96:92:12:86:54:9b: 9f:4e:e5:cf:47:25:1b:a6:5b:73:cb:9a:df:2b:b7: d9:5e:e2:ba:ca:0c:44:93:b9:21:18:9f:a4:ec:b1: c7:52:bf:08:cd:05:18:81:af:44:51:f2:62:bc:4c: 2f:90:b9:3d:74:3f:bf:a0:1d:e6:73:c2:da:a7:d8: 30:e7:9b:0e:3e:3a:98:f9:93:a3:b3:5d:e3:32:b9: 6c:bb:1a:f4:69:07:de:6e:ad:ee:21:8c:6e:50:97: dc:47:11:d9:e0:97:17:77:a7:7e:a5:2b:b3:8c:73: 68:80:ae:68:d2:7e:c9:7a:bd:4f:56:09:6e:31:e8: b4:a0:6d:ad:94:fc:9a:53:26:d6:c2:fb:9e:98:1d: 34:06:e6:79:83:62:26:d4:19:e7:00:cd:f2:06:85: 07:e9:40:56:a0:d0:46:0d:ac:93:b1:07:92:d0:90: 51:b1:8a:f6:84:89:51:72:5f:0c:b8:e0:40:16:c5: 36:d9:d8:7b:bb:94:05:d7:85:59:4d:81:71:fe:2c: 4e:89:9a:e4:c0:24:0c:e5:e8:66:d2:6c:3b:ac:c2: fe:8c:09:f4:11:96:44:81:b1:39:34:84:06:6a:d6: e6:01:36:4d:04:ce:f1:74:07:88:f5:05:8f:ad:11: 4c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2D:80:FD:FE:E2:2E:36:67:A3:77:25:9B:EB:8F:20:8F:79:62:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:81:d9:24:a8:08:83:f0:56:ec:e8:d2:1e:4e:1f:ed:66:6c: df:d4:3a:c6:33:ee:4f:16:70:fb:ad:e1:50:5f:dc:c7:1b:7b: eb:8c:f0:dc:b5:e8:78:ab:61:e7:e5:d0:06:e6:59:0a:da:8b: 94:cd:53:fc:d1:ab:55:db:38:7a:bf:31:37:11:05:d8:14:dc: 6f:2a:e5:b2:aa:52:10:bb:c8:03:9d:6f:bb:d0:64:ec:05:e1: dc:16:6e:54:a0:72:23:45:ab:8e:d6:d8:93:10:47:f2:37:3e: 1f:6f:53:eb:0b:0a:dc:bd:bd:ee:e5:4a:09:07:ac:d2:d1:68: 83:aa:22:2b:68:cd:40:e0:23:71:0b:7f:73:62:bf:d7:1f:43: 92:ba:0f:18:e8:37:2a:2d:be:d7:1d:bf:a2:18:25:75:c0:42: 78:32:d0:6b:61:95:36:8c:ac:d6:53:6f:61:2d:88:c9:f6:90: 8c:fe:e0:91:9b:c7:9b:48:04:0c:92:3a:33:5d:c8:17:36:41: 32:68:75:d3:86:21:a6:b0:70:81:0a:46:13:6f:2e:3a:e0:d7: 96:26:0e:6c:0f:2e:1f:cc:7b:51:37:3f:2d:82:0f:69:a9:d8: fd:5d:50:dc:eb:59:07:fd:4a:f8:b1:ee:0f:89:a0:75:71:4f: 7c:a8:2c:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwt65HocdE+D+ZSD8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MTIxNDAyMDAzMVoXDTI2MDMxNDAxMDAzMVowLzEtMCsGA1UEAxMk OGQwZjFhM2UtN2I5MS00MTljLWFhYzgtNjU3MGFkNDRlYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvTmHpIX11SWkhKGVJufTuXPRyUbpltzy5rf K7fZXuK6ygxEk7khGJ+k7LHHUr8IzQUYga9EUfJivEwvkLk9dD+/oB3mc8Lap9gw 55sOPjqY+ZOjs13jMrlsuxr0aQfebq3uIYxuUJfcRxHZ4JcXd6d+pSuzjHNogK5o 0n7Jer1PVgluMei0oG2tlPyaUybWwvuemB00BuZ5g2Im1BnnAM3yBoUH6UBWoNBG DayTsQeS0JBRsYr2hIlRcl8MuOBAFsU22dh7u5QF14VZTYFx/ixOiZrkwCQM5ehm 0mw7rML+jAn0EZZEgbE5NIQGatbmATZNBM7xdAeI9QWPrRFMRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHctgP3+4i42Z6N3JZvrjyCPeWJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNWNjNGQ2YzEtZWZmMi0z YTQwLTg2MTktNWY2MTZmOGFmMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0aaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuB2SSoCIPwVuzo0h5OH+1mbN/UOsYz7k8WcPut4VBf3Mcbe+uM8Ny1 6HirYefl0AbmWQrai5TNU/zRq1XbOHq/MTcRBdgU3G8q5bKqUhC7yAOdb7vQZOwF 4dwWblSgciNFq47W2JMQR/I3Ph9vU+sLCty9ve7lSgkHrNLRaIOqIitozUDgI3EL f3Niv9cfQ5K6DxjoNyotvtcdv6IYJXXAQngy0GthlTaMrNZTb2EtiMn2kIz+4JGb x5tIBAySOjNdyBc2QTJoddOGIaawcIEKRhNvLjrg15YmDmwPLh/Me1E3Py2CD2mp 2P1dUNzrWQf9Svix7g+JoHVxT3yoLEc= -----END CERTIFICATE-----Generated at Sat Dec 20 09:07:26 2025 by rpki-client