This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/12070fac-3d8a-3d68-9e6d-24bf736db635.roa File: 12070fac-3d8a-3d68-9e6d-24bf736db635.roa (raw, json) Hash identifier: P2qGAQOdanM/+1T7yyCtXCUTVfmbSP9lc5V4e9q55cM= Subject key identifier: 6F:EB:22:E6:88:66:A3:37:56:0F:AC:6D:15:29:BD:99:E2:4F:48:A1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C3F2A00029A7FC22E7F790680 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/12070fac-3d8a-3d68-9e6d-24bf736db635.roa Signing time: Sat 20 Dec 2025 06:15:11 +0000 ROA not before: Sat 20 Dec 2025 06:15:11 +0000 ROA not after: Fri 20 Mar 2026 05:15:11 +0000 asID: 17497 IP address blocks: 66.92.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3f:2a:00:02:9a:7f:c2:2e:7f:79:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 20 06:15:11 2025 GMT Not After : Mar 20 05:15:11 2026 GMT Subject: CN=23547013-d43c-452b-befe-e6ce92b156d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:3d:65:b4:3a:f9:08:d6:c4:85:b5:de:e8: 5b:8f:7f:a9:a7:11:78:19:af:52:5d:c8:fb:e3:a3: ec:ac:c5:75:13:fa:53:d7:8c:15:5b:d5:86:2b:bc: 0f:ff:40:19:aa:c6:96:98:fe:21:77:27:92:f7:52: 3e:8b:84:09:32:e4:8d:13:73:3a:45:95:1e:0e:42: 81:2e:1d:ad:2a:02:ac:6a:9c:92:df:c0:a0:36:95: 47:46:01:7e:b6:ff:19:65:5e:5b:33:ce:a7:f0:c6: 0f:74:35:98:20:51:6c:14:b2:83:93:58:5f:ac:ec: a4:d4:63:98:69:86:60:57:33:2a:58:21:49:61:3b: 96:6c:24:38:88:5c:ff:02:73:ec:90:30:0d:78:83: 8f:09:50:0b:6b:64:45:03:99:14:fa:11:e3:06:a7: e3:31:5e:34:fd:ce:27:53:b9:c6:39:2b:f0:2e:a8: fc:2f:7e:d6:eb:60:05:0b:82:d1:7b:c3:90:97:d8: 9b:ce:f7:7a:37:03:df:bc:05:ae:8e:27:8f:c1:15: 22:c1:8e:ef:2a:db:7f:bb:af:42:d1:4e:c3:e2:99: a5:bd:b1:83:5b:5d:89:37:18:19:56:be:3e:17:64: 53:91:3d:9b:cd:d9:2f:d5:22:8a:b9:40:a6:ca:7a: 6b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EB:22:E6:88:66:A3:37:56:0F:AC:6D:15:29:BD:99:E2:4F:48:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/12070fac-3d8a-3d68-9e6d-24bf736db635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.92.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:da:6f:68:03:ce:78:dc:81:6f:9e:7c:21:e8:8c:78:e5:38: e0:7f:18:ae:1c:6d:53:fd:97:56:5b:d4:0b:92:b3:15:d7:75: cb:67:c0:c7:80:30:74:8e:ea:b6:14:85:49:85:17:88:53:6c: 0f:c5:c2:22:8d:5c:d9:e6:97:e9:53:1d:ab:17:72:e5:f7:a0: 29:8d:ba:53:a0:67:c7:f7:19:5c:7b:f4:86:e6:0e:03:8b:a2: 28:3c:8f:d1:7a:01:57:f7:b0:65:ca:ec:dc:6b:1f:54:bf:1b: e1:cf:dd:9b:21:20:8b:e4:79:94:76:e9:f9:c9:a0:11:fd:bf: d2:6c:37:fa:0c:ff:5c:01:7b:40:9c:7f:60:b8:1e:6f:19:14: 55:28:5c:d5:72:8d:61:3a:69:2b:23:0d:eb:d6:51:c6:2f:74: b3:03:1c:cc:23:f7:1c:55:79:52:a3:92:d7:57:3b:48:72:d9: fb:04:1e:8b:9c:be:3f:1d:3d:10:73:79:f1:88:33:49:d7:a9: ba:3c:d1:50:47:92:db:8d:de:36:b3:d6:67:12:97:54:16:c0: 81:eb:2b:79:e6:1b:ff:de:59:2e:e7:1a:4b:e4:17:df:a8:72: 17:86:a5:7c:0d:66:dd:7e:b5:7d:3a:b7:ee:2d:b9:37:d6:af: aa:4e:24:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw/KgACmn/CLn95BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIyMDA2MTUxMVoXDTI2MDMyMDA1MTUxMVowLzEtMCsGA1UEAxMk MjM1NDcwMTMtZDQzYy00NTJiLWJlZmUtZTZjZTkyYjE1NmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nk9ZbQ6+QjWxIW13uhbj3+ppxF4Ga9SXcj7 46PsrMV1E/pT14wVW9WGK7wP/0AZqsaWmP4hdyeS91I+i4QJMuSNE3M6RZUeDkKB Lh2tKgKsapyS38CgNpVHRgF+tv8ZZV5bM86n8MYPdDWYIFFsFLKDk1hfrOyk1GOY aYZgVzMqWCFJYTuWbCQ4iFz/AnPskDANeIOPCVALa2RFA5kU+hHjBqfjMV40/c4n U7nGOSvwLqj8L37W62AFC4LRe8OQl9ibzvd6NwPfvAWujiePwRUiwY7vKtt/u69C 0U7D4pmlvbGDW12JNxgZVr4+F2RTkT2bzdkv1SKKuUCmynpr8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/rIuaIZqM3Vg+sbRUpvZniT0ihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTIwNzBmYWMtM2Q4YS0z ZDY4LTllNmQtMjRiZjczNmRiNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlyrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHab2gDznjcgW+efCHojHjlOOB/GK4cbVP9l1Zb1AuSsxXXdctnwMeA MHSO6rYUhUmFF4hTbA/FwiKNXNnml+lTHasXcuX3oCmNulOgZ8f3GVx79IbmDgOL oig8j9F6AVf3sGXK7NxrH1S/G+HP3ZshIIvkeZR26fnJoBH9v9JsN/oM/1wBe0Cc f2C4Hm8ZFFUoXNVyjWE6aSsjDevWUcYvdLMDHMwj9xxVeVKjktdXO0hy2fsEHouc vj8dPRBzefGIM0nXqbo80VBHktuN3jaz1mcSl1QWwIHrK3nmG//eWS7nGkvkF9+o cheGpXwNZt1+tX06t+4tuTfWr6pOJLc= -----END CERTIFICATE-----Generated at Sat Dec 20 20:22:34 2025 by rpki-client