This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a477c9d0-602c-383a-80f7-6d980210f7e8.roa File: a477c9d0-602c-383a-80f7-6d980210f7e8.roa (raw, json) Hash identifier: i/4WdY8TPfyCXdkkdEvceChcgP+juklJpiPEhXvCL+Q= Subject key identifier: 8A:DD:B7:25:B5:9B:54:76:74:47:6A:EB:7E:97:67:B2:4F:03:C7:8B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C1E93F69DB38A119EAFB7BB00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a477c9d0-602c-383a-80f7-6d980210f7e8.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 25198 IP address blocks: 66.253.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:93:f6:9d:b3:8a:11:9e:af:b7:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=1c79c920-f96b-474f-9fe6-2bf1426ccbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:6d:d2:11:2f:4c:32:0c:73:3d:26:1c:ef: 47:f7:85:a3:fa:d2:03:e6:96:9a:f9:36:d1:0a:20: 0b:27:89:bc:02:bc:d8:56:0b:64:7f:d5:c8:f6:ba: 47:51:a8:df:e4:64:e2:70:11:62:25:d3:97:50:f5: ff:ea:f2:5b:97:d6:8f:71:6e:e5:fd:2f:51:56:12: f7:57:a4:e9:9f:dd:78:a9:85:1d:67:ad:bc:91:f5: f0:d9:89:ef:34:52:64:ea:4a:f2:aa:f7:d8:50:14: ba:1a:2f:ca:95:c7:78:3a:c7:b5:f0:f3:e0:e4:e6: 61:79:a4:16:e6:62:08:c7:77:4a:46:67:88:cd:cf: 09:f9:2d:e4:96:e7:5d:38:ec:d2:cc:9f:df:e9:86: 9d:03:c7:d2:77:46:0c:8b:1d:3d:c1:d4:a3:dd:01: c0:5d:9b:63:cf:0e:fc:e8:3e:ac:49:77:07:c1:83: 3b:b4:e5:40:16:af:91:f4:2d:49:c4:50:ca:76:3b: 52:02:a0:7b:83:07:80:f9:7f:10:63:01:6d:27:fe: a5:4c:83:a6:83:96:7a:78:f6:00:97:30:d3:74:47: 45:79:4d:dc:c2:3a:bb:10:32:87:e5:f4:be:78:a0: 62:f9:85:05:5c:b2:7e:24:fe:fe:24:74:ba:7f:cd: 15:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DD:B7:25:B5:9B:54:76:74:47:6A:EB:7E:97:67:B2:4F:03:C7:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a477c9d0-602c-383a-80f7-6d980210f7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:84:30:f4:99:23:b7:9f:cb:4d:2f:a0:b2:50:d4:69:d0:95: 84:65:f8:02:a3:57:d4:68:97:e1:b5:74:e1:5c:8d:27:5a:77: 0a:68:61:b6:3f:a3:94:f9:38:17:1b:f5:bf:35:a8:ee:8c:e5: cc:1b:23:81:f5:05:7b:d4:bd:5c:bb:ec:cc:d0:2e:bb:35:8e: ed:ba:10:3e:b6:5d:2e:ee:59:9e:68:ce:4e:6e:1c:f7:dc:01: 9d:f0:cd:e6:cf:66:62:d4:7d:bf:e9:7b:ae:ef:c0:d0:fd:6b: 8a:36:51:38:0f:24:4b:fc:be:40:b0:ef:f0:b5:91:51:07:37: f6:81:20:83:b6:ba:ab:8a:97:7e:87:2d:f2:f5:83:a9:f7:e6: cf:bd:22:d0:b9:bf:a2:0b:b8:64:0d:e8:58:83:23:00:3f:9f: af:67:61:40:0b:fe:04:a6:e1:37:54:fa:f2:38:2f:8d:31:05: e6:81:11:ba:76:fb:21:fa:88:0e:57:54:4e:61:16:e2:e2:3e: c5:4a:b1:1c:d9:98:5a:a1:34:9a:0b:7c:2f:6c:82:2f:69:f9: 77:48:72:10:26:71:d0:f6:14:20:1b:84:e2:e7:39:34:6e:8e: 28:e5:de:f5:e8:d2:67:93:cc:f4:b3:19:c6:ae:8f:fb:10:5d: c3:db:3f:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwek/ads4oRnq+3uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk MWM3OWM5MjAtZjk2Yi00NzRmLTlmZTYtMmJmMTQyNmNjYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPFt0hEvTDIMcz0mHO9H94Wj+tID5paa+TbR CiALJ4m8ArzYVgtkf9XI9rpHUajf5GTicBFiJdOXUPX/6vJbl9aPcW7l/S9RVhL3 V6Tpn914qYUdZ628kfXw2YnvNFJk6kryqvfYUBS6Gi/Klcd4Ose18PPg5OZheaQW 5mIIx3dKRmeIzc8J+S3kluddOOzSzJ/f6YadA8fSd0YMix09wdSj3QHAXZtjzw78 6D6sSXcHwYM7tOVAFq+R9C1JxFDKdjtSAqB7gweA+X8QYwFtJ/6lTIOmg5Z6ePYA lzDTdEdFeU3cwjq7EDKH5fS+eKBi+YUFXLJ+JP7+JHS6f80VBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrdtyW1m1R2dEdq636XZ7JPA8eLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTQ3N2M5ZDAtNjAyYy0z ODNhLTgwZjctNmQ5ODAyMTBmN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6EMPSZI7efy00voLJQ1GnQlYRl+AKjV9Rol+G1dOFcjSdadwpoYbY/ o5T5OBcb9b81qO6M5cwbI4H1BXvUvVy77MzQLrs1ju26ED62XS7uWZ5ozk5uHPfc AZ3wzebPZmLUfb/pe67vwND9a4o2UTgPJEv8vkCw7/C1kVEHN/aBIIO2uquKl36H LfL1g6n35s+9ItC5v6ILuGQN6FiDIwA/n69nYUAL/gSm4TdU+vI4L40xBeaBEbp2 +yH6iA5XVE5hFuLiPsVKsRzZmFqhNJoLfC9sgi9p+XdIchAmcdD2FCAbhOLnOTRu jijl3vXo0meTzPSzGcauj/sQXcPbPww= -----END CERTIFICATE-----Generated at Sun Dec 21 12:59:54 2025 by rpki-client