This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78367323-f44c-32a6-a102-2c55668cc4a1.roa File: 78367323-f44c-32a6-a102-2c55668cc4a1.roa (raw, json) Hash identifier: iVq6xJrm5zJWG2sgcMwXOQOF0+M4B9Ilzlrux9aMi5o= Subject key identifier: E6:45:18:E3:0C:98:C8:AB:D4:01:E3:C4:38:C1:5B:A8:40:C9:60:E2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C2C865743E8C48D361B998D90 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78367323-f44c-32a6-a102-2c55668cc4a1.roa Signing time: Sat 13 Dec 2025 14:00:38 +0000 ROA not before: Sat 13 Dec 2025 14:00:38 +0000 ROA not after: Fri 13 Mar 2026 13:00:38 +0000 asID: 400031 IP address blocks: 209.101.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2c:86:57:43:e8:c4:8d:36:1b:99:8d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 13 14:00:38 2025 GMT Not After : Mar 13 13:00:38 2026 GMT Subject: CN=513d9e51-52a1-4fa1-af2a-a9b794234381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:eb:c2:f7:dc:a8:5b:1e:96:a3:44:34:82:d4: ca:d4:f1:b6:17:1d:ca:bb:dc:ed:05:12:3a:93:8c: 05:86:19:67:e5:e8:d3:cd:ed:83:bb:c8:0f:c6:11: d5:d1:72:05:67:f0:4c:a1:40:b3:03:bf:13:39:0a: 46:2d:72:28:ea:e9:f9:4f:7b:9f:3f:5a:73:ed:cb: 2e:1e:74:d2:a0:ac:5b:d8:f1:f3:62:f7:aa:13:14: 3b:95:ba:18:2e:5e:ca:39:60:0c:33:e2:ec:7d:a1: 6b:e8:bf:e8:f4:93:14:8d:28:a9:eb:10:1e:1e:36: 8b:28:08:41:61:bf:66:4f:52:e3:67:5c:e0:e3:7d: 08:b9:2f:cc:61:8c:d5:61:cc:89:a8:4f:77:4a:7e: 01:93:f4:27:ee:5a:aa:cb:9f:90:09:0e:8e:8b:0c: 6c:48:4b:7d:1e:b4:5a:1b:bd:a0:04:58:5d:a1:84: 87:19:70:dd:52:06:49:d6:ba:36:5f:ea:17:58:59: 13:f7:39:bc:df:a6:74:53:ca:a7:2e:ce:ec:f2:53: 59:d2:be:cf:9e:1a:5f:a4:88:37:4f:ab:f5:3f:30: cb:41:af:6e:e3:ce:18:fd:8c:6f:f4:78:3d:3b:e0: 14:03:2d:f1:5f:50:66:1b:5a:68:71:71:8c:e6:27: 5d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:45:18:E3:0C:98:C8:AB:D4:01:E3:C4:38:C1:5B:A8:40:C9:60:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78367323-f44c-32a6-a102-2c55668cc4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:1e:34:b2:4b:f9:2b:21:36:84:65:91:22:9a:66:97:b0:19: 5a:e0:2d:b4:1f:a7:cb:be:19:e8:8d:69:32:59:5a:bf:d8:6a: a8:8f:e3:47:94:a9:5d:ed:1b:22:3b:d4:53:df:85:03:7c:5e: dc:cf:c0:8e:c8:13:fa:a2:74:18:60:30:73:e7:0b:b5:cd:92: ad:62:da:86:df:c3:79:21:5a:76:a9:30:a7:9d:35:b7:df:57: e7:74:3a:93:f2:c0:c7:2f:3c:17:91:f9:38:fb:59:94:61:7b: ec:22:9f:4e:92:68:14:24:84:16:cf:f3:14:e1:82:cc:9c:84: 26:2f:7b:1f:95:29:ff:f9:da:69:5a:4d:db:dc:1b:a0:37:d5: 99:2c:e9:ab:4a:99:a1:e2:ac:e1:20:d3:24:cf:76:b9:57:fb: 26:3a:ad:6b:f5:03:00:98:39:d3:f7:7d:cb:cc:25:46:98:14: 42:d1:a4:cb:ad:bc:47:6e:40:9f:01:b1:93:b3:b3:64:60:34: 8d:14:20:95:f3:1d:8d:b9:23:18:e7:fc:04:fc:33:87:1e:7a: 56:a2:8d:13:fe:55:e5:27:ab:dd:e9:b8:64:35:f6:dd:fc:8b: 18:29:a1:a1:85:2e:23:a4:04:46:67:b8:f6:d8:9e:db:c0:6e: 14:9c:fa:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwshldD6MSNNhuZjZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIxMzE0MDAzOFoXDTI2MDMxMzEzMDAzOFowLzEtMCsGA1UEAxMk NTEzZDllNTEtNTJhMS00ZmExLWFmMmEtYTliNzk0MjM0MzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOvC99yoWx6Wo0Q0gtTK1PG2Fx3Ku9ztBRI6 k4wFhhln5ejTze2Du8gPxhHV0XIFZ/BMoUCzA78TOQpGLXIo6un5T3ufP1pz7csu HnTSoKxb2PHzYveqExQ7lboYLl7KOWAMM+LsfaFr6L/o9JMUjSip6xAeHjaLKAhB Yb9mT1LjZ1zg430IuS/MYYzVYcyJqE93Sn4Bk/Qn7lqqy5+QCQ6OiwxsSEt9HrRa G72gBFhdoYSHGXDdUgZJ1ro2X+oXWFkT9zm836Z0U8qnLs7s8lNZ0r7PnhpfpIg3 T6v1PzDLQa9u484Y/Yxv9Hg9O+AUAy3xX1BmG1pocXGM5iddowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZFGOMMmMir1AHjxDjBW6hAyWDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNzgzNjczMjMtZjQ0Yy0z MmE2LWExMDItMmM1NTY2OGNjNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkeNLJL+SshNoRlkSKaZpewGVrgLbQfp8u+GeiNaTJZWr/YaqiP40eU qV3tGyI71FPfhQN8XtzPwI7IE/qidBhgMHPnC7XNkq1i2obfw3khWnapMKedNbff V+d0OpPywMcvPBeR+Tj7WZRhe+win06SaBQkhBbP8xThgsychCYvex+VKf/52mla TdvcG6A31Zks6atKmaHirOEg0yTPdrlX+yY6rWv1AwCYOdP3fcvMJUaYFELRpMut vEduQJ8BsZOzs2RgNI0UIJXzHY25Ixjn/AT8M4ceelaijRP+VeUnq93puGQ19t38 ixgpoaGFLiOkBEZnuPbYntvAbhSc+tI= -----END CERTIFICATE-----Generated at Sat Dec 20 22:39:41 2025 by rpki-client