This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa File: 3a315f55-20c2-37ff-b50f-af30c5811ce0.roa (raw, json) Hash identifier: 1QooJj1czYMVz77F3fekJuRMxI7vmaKvi8Igo9YhR/g= Subject key identifier: 43:DE:A1:46:27:BD:95:F9:1D:27:0A:F2:79:45:03:0C:8A:CE:84:D3 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584C3EABA8081DB7D9DADFB8D380 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 7018 IP address blocks: 209.114.4.0/22 maxlen: 24 209.114.8.0/21 maxlen: 24 209.114.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:a8:08:1d:b7:d9:da:df:b8:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=c5b8ff8d-1c99-4538-baab-1230764d8352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:a9:b1:bc:aa:cd:80:01:e6:8f:7e:96:bd: 60:51:7d:4d:76:5d:de:64:23:b9:02:fd:c3:ef:50: 5e:dd:76:19:0d:ed:ff:d3:ec:d1:c7:02:e2:fe:18: a3:74:56:85:19:43:17:eb:7b:c9:d4:6f:7c:ea:00: fe:97:b4:30:8b:d9:eb:86:8b:5b:23:fb:b2:8e:fb: 4a:d8:50:11:35:60:70:ff:62:e4:2b:65:ae:88:6c: 97:0c:5a:72:40:13:23:8f:a9:8e:63:be:a1:d2:dd: 8c:1d:a3:e4:e5:d0:da:12:90:73:68:5b:10:fb:dd: 06:74:39:86:5d:e0:85:c3:2f:8c:24:95:a9:92:94: c7:0d:7a:83:9f:60:f1:18:35:49:51:ce:39:a8:e0: 53:fa:29:f4:92:b6:a0:67:8f:59:87:2e:89:cb:e9: 2f:33:16:05:3a:1d:c6:f6:d6:66:e0:7b:3c:19:2e: 8b:eb:06:b4:50:30:56:36:2e:7b:0d:2c:39:b6:a6: 0f:f4:fd:6d:0d:ef:73:20:ab:5d:9b:c1:14:90:96: d4:d0:78:a5:51:01:95:98:1b:ea:f6:22:7d:15:d1: f0:21:39:8f:54:09:fd:7b:ef:63:43:45:ce:88:2a: 5d:e1:43:66:2d:fd:f3:ec:57:ed:ef:11:58:7c:10: 3b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DE:A1:46:27:BD:95:F9:1D:27:0A:F2:79:45:03:0C:8A:CE:84:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.4.0-209.114.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:65:e9:31:a6:39:e8:33:8f:64:3f:59:7f:e3:66:5b:de:15: 6e:e3:30:c8:e8:24:e0:36:65:ee:0f:e1:ef:94:3f:d1:34:c3: cf:db:d5:78:9d:83:09:ef:ce:45:d6:c8:3d:c9:f7:e1:e1:51: 35:b7:dc:43:c3:fb:5e:91:23:d1:d5:90:5e:fb:28:7a:ac:45: 13:9c:c9:71:ab:e0:c0:9b:32:e7:5d:74:e8:ad:38:d6:a7:a4: f8:68:a3:67:34:ed:56:40:84:9c:8c:d5:16:c2:d2:59:3b:a6: a3:44:12:3b:c7:fa:86:e4:31:ea:62:e4:7f:70:4e:07:57:a5: e6:8a:67:fb:10:51:5e:94:49:46:97:39:f1:3c:df:a3:c5:41: ea:20:25:97:de:5a:88:e9:d0:76:fc:5d:97:b1:4c:c1:67:f6: 23:b2:e0:9b:1c:76:1e:ff:39:4d:45:48:1c:c2:b5:f9:6d:18: 29:33:fb:e9:e4:d1:63:06:f2:ff:7a:35:92:ae:c7:10:24:b2: 7c:7d:7b:d1:41:f8:e3:5d:a9:42:50:0b:5c:87:fb:61:43:1e: de:93:35:74:ac:a0:3a:99:9c:d7:ac:d6:69:25:6a:5b:8b:3f: 89:b3:6f:77:c7:55:70:f1:a8:98:1f:2c:06:f8:08:9d:c5:f0: 0a:87:7d:c2 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEw+q6gIHbfZ2t+404AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk YzViOGZmOGQtMWM5OS00NTM4LWJhYWItMTIzMDc2NGQ4MzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYapsbyqzYAB5o9+lr1gUX1Ndl3eZCO5Av3D 71Be3XYZDe3/0+zRxwLi/hijdFaFGUMX63vJ1G986gD+l7Qwi9nrhotbI/uyjvtK 2FARNWBw/2LkK2WuiGyXDFpyQBMjj6mOY76h0t2MHaPk5dDaEpBzaFsQ+90GdDmG XeCFwy+MJJWpkpTHDXqDn2DxGDVJUc45qOBT+in0kragZ49Zhy6Jy+kvMxYFOh3G 9tZm4Hs8GS6L6wa0UDBWNi57DSw5tqYP9P1tDe9zIKtdm8EUkJbU0HilUQGVmBvq 9iJ9FdHwITmPVAn9e+9jQ0XOiCpd4UNmLf3z7Fft7xFYfBA7gwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEPeoUYnvZX5HScK8nlFAwyKzoTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvM2EzMTVmNTUtMjBjMi0z N2ZmLWI1MGYtYWYzMGM1ODExY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRcgQD BAXRcgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAIWXpMaY56DOPZD9Zf+NmW94VbuMwyOgk4DZl7g/h75Q/ 0TTDz9vVeJ2DCe/ORdbIPcn34eFRNbfcQ8P7XpEj0dWQXvsoeqxFE5zJcavgwJsy 51106K041qek+GijZzTtVkCEnIzVFsLSWTumo0QSO8f6huQx6mLkf3BOB1el5opn +xBRXpRJRpc58Tzfo8VB6iAll95aiOnQdvxdl7FMwWf2I7Lgmxx2Hv85TUVIHMK1 +W0YKTP76eTRYwby/3o1kq7HECSyfH170UH4412pQlALXIf7YUMe3pM1dKygOpmc 16zWaSVqW4s/ibNvd8dVcPGomB8sBvgIncXwCod9wg== -----END CERTIFICATE-----Generated at Mon Dec 29 14:41:06 2025 by rpki-client