This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ccce1e4-6124-3810-9286-19ace59043fa.roa File: 0ccce1e4-6124-3810-9286-19ace59043fa.roa (raw, json) Hash identifier: qYJiQ/4CiemKEhqLzmze9/IzL0NDSNapoviJuNd4kjQ= Subject key identifier: 88:9F:75:BC:FA:41:EC:1F:D8:6D:C7:35:00:CE:03:DC:00:F8:42:21 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C2C86578DAC8FDE54CBCD1680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ccce1e4-6124-3810-9286-19ace59043fa.roa Signing time: Sat 13 Dec 2025 14:00:38 +0000 ROA not before: Sat 13 Dec 2025 14:00:38 +0000 ROA not after: Fri 13 Mar 2026 13:00:38 +0000 asID: 400031 IP address blocks: 209.101.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2c:86:57:8d:ac:8f:de:54:cb:cd:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 13 14:00:38 2025 GMT Not After : Mar 13 13:00:38 2026 GMT Subject: CN=b83283cb-d54a-4f0e-b504-16075db3429f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:15:3d:d0:f9:fd:0a:75:b1:37:2e:40:13: 21:7f:c5:50:c1:77:47:d3:76:5d:14:8c:74:2c:50: df:ca:76:ef:6f:a3:73:31:2e:28:bd:fe:8b:6b:0b: b4:17:1f:9d:a6:d9:a6:35:1a:ee:1a:9c:36:d2:28: fe:a3:99:15:e7:a4:e7:39:ed:56:ec:78:cd:36:81: 66:96:c6:12:ae:35:e9:3d:ef:d9:40:42:95:be:f4: 89:5a:51:e2:8f:48:69:d0:bc:2c:d7:03:40:59:53: 8f:d3:01:2c:b6:ca:7d:51:65:61:49:cb:c3:10:55: e0:f1:28:8e:f0:a4:4a:e8:66:6d:79:b1:09:4e:74: 1d:aa:38:07:24:2e:dc:bb:11:02:63:f4:f7:f2:5a: 37:45:b7:7d:50:26:4e:d6:f6:5f:0d:aa:08:2a:e5: 1f:ba:8c:15:55:2a:e0:3f:6f:dc:b2:7c:8f:9f:35: 6e:08:7b:33:e9:ea:5c:44:18:e9:19:76:10:25:fd: a3:0c:b8:e7:a6:7d:7a:d1:dd:be:8f:cc:3a:8d:84: 15:3b:40:13:14:e2:ee:ba:a3:81:1a:de:e5:84:d1: 14:23:bd:1b:a6:7f:dd:76:52:22:d3:ea:87:73:0b: b3:b4:2e:e0:f6:74:9a:3c:68:09:7f:8c:de:0b:9a: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9F:75:BC:FA:41:EC:1F:D8:6D:C7:35:00:CE:03:DC:00:F8:42:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0ccce1e4-6124-3810-9286-19ace59043fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:4f:c0:c7:1d:7c:d6:91:b7:37:09:1a:53:34:ae:b6:32:8a: a2:b8:23:0f:41:c9:cd:17:11:6c:48:dc:f5:66:51:b8:c5:0e: a4:9b:80:34:35:71:0f:96:90:bc:78:aa:af:f9:14:19:fb:65: 8a:3b:3f:63:4b:29:b4:9b:4f:8c:7b:d1:ac:8a:22:2a:9e:02: a5:79:83:cf:74:5c:a1:71:1e:f6:04:9b:0e:4e:4c:24:97:1e: 2c:98:a7:79:03:95:7e:fb:98:dd:10:36:99:7d:6d:2f:d7:90: e3:13:f9:44:b1:c8:03:d0:56:82:d3:e5:fc:9f:49:3b:14:0d: 05:48:5d:03:f5:22:57:34:f4:89:6e:e1:9b:c6:45:1a:c0:e7: 0d:a4:c9:d7:1f:ae:b5:89:c6:fe:af:01:5d:3e:39:20:ed:0d: 00:8f:55:2c:aa:ba:7b:db:0d:2b:f1:ee:4d:26:9b:b7:24:a3: ae:8f:5a:37:02:54:4f:d6:df:81:ad:5c:fc:e2:1b:62:f9:dd: e9:48:77:9a:9e:11:7c:98:01:ca:ff:4d:e7:18:f3:1b:dd:27: 6d:8a:ae:3b:5d:8a:30:a5:f8:5c:6c:dc:f8:65:9a:2d:ed:f0: 9c:b9:8b:7a:b2:c7:c5:d0:c7:b1:7b:1d:86:2d:1e:64:aa:0e: 5d:11:92:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwshleNrI/eVMvNFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIxMzE0MDAzOFoXDTI2MDMxMzEzMDAzOFowLzEtMCsGA1UEAxMk YjgzMjgzY2ItZDU0YS00ZjBlLWI1MDQtMTYwNzVkYjM0MjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTwVPdD5/Qp1sTcuQBMhf8VQwXdH03ZdFIx0 LFDfynbvb6NzMS4ovf6Lawu0Fx+dptmmNRruGpw20ij+o5kV56TnOe1W7HjNNoFm lsYSrjXpPe/ZQEKVvvSJWlHij0hp0Lws1wNAWVOP0wEstsp9UWVhScvDEFXg8SiO 8KRK6GZtebEJTnQdqjgHJC7cuxECY/T38lo3Rbd9UCZO1vZfDaoIKuUfuowVVSrg P2/csnyPnzVuCHsz6epcRBjpGXYQJf2jDLjnpn160d2+j8w6jYQVO0ATFOLuuqOB Gt7lhNEUI70bpn/ddlIi0+qHcwuztC7g9nSaPGgJf4zeC5q3cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIifdbz6Qewf2G3HNQDOA9wA+EIhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGNjY2UxZTQtNjEyNC0z ODEwLTkyODYtMTlhY2U1OTA0M2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlPwMcdfNaRtzcJGlM0rrYyiqK4Iw9Byc0XEWxI3PVmUbjFDqSbgDQ1 cQ+WkLx4qq/5FBn7ZYo7P2NLKbSbT4x70ayKIiqeAqV5g890XKFxHvYEmw5OTCSX HiyYp3kDlX77mN0QNpl9bS/XkOMT+USxyAPQVoLT5fyfSTsUDQVIXQP1Ilc09Ilu 4ZvGRRrA5w2kydcfrrWJxv6vAV0+OSDtDQCPVSyqunvbDSvx7k0mm7cko66PWjcC VE/W34GtXPziG2L53elId5qeEXyYAcr/TecY8xvdJ22KrjtdijCl+Fxs3Phlmi3t 8Jy5i3qyx8XQx7F7HYYtHmSqDl0RkjE= -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:00 2025 by rpki-client