This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b65b89f1-96b1-3ddd-8772-63484052b2b9.roa File: b65b89f1-96b1-3ddd-8772-63484052b2b9.roa (raw, json) Hash identifier: BM3sR8UoEc+o6JIaCEAas+7T5lASaXTCnHodyWu9RZU= Subject key identifier: 1C:5C:0D:85:78:22:79:C0:3C:5F:74:10:A0:C8:99:C4:59:BC:6F:72 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C2C865756E4F95E749065CC00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b65b89f1-96b1-3ddd-8772-63484052b2b9.roa Signing time: Sat 13 Dec 2025 14:00:38 +0000 ROA not before: Sat 13 Dec 2025 14:00:38 +0000 ROA not after: Fri 13 Mar 2026 13:00:38 +0000 asID: 400031 IP address blocks: 209.101.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2c:86:57:56:e4:f9:5e:74:90:65:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 13 14:00:38 2025 GMT Not After : Mar 13 13:00:38 2026 GMT Subject: CN=4c565236-1c6b-426c-9afd-5b82666d469b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:23:7c:a3:88:2a:38:94:d6:84:a0:35:68:f8: 31:2f:36:0e:06:8d:06:3e:b3:c6:da:cc:dd:ec:39: 3c:b5:d5:37:c6:66:9f:5f:fb:01:e9:9f:94:39:09: 5a:78:6d:4d:b4:f2:69:51:4c:30:b8:0a:3a:2c:71: ac:4c:18:c4:fb:55:ac:8a:2f:be:40:9d:c0:d3:f7: 50:0a:58:b7:93:2f:e9:a3:4b:d3:b4:76:a7:7a:50: fa:d5:93:39:80:1e:43:bf:85:68:15:f6:07:a8:69: 27:0f:c1:77:74:77:3f:95:11:e8:1b:92:5f:b4:a8: f2:1a:26:11:cf:bd:d1:33:20:90:64:b5:76:a8:4c: a7:1d:bb:f9:78:3a:01:e7:22:07:66:33:55:f4:39: 00:e0:bb:32:1a:fc:ad:d9:3f:9a:ad:73:a3:77:38: 10:46:1b:96:ec:53:7c:f7:94:9a:f1:4a:c7:bf:87: 95:f8:d7:fc:55:fd:1a:14:36:83:e4:34:3c:f6:59: dd:1b:91:6f:1c:56:94:16:e8:9e:c9:a7:f1:b8:94: 88:a1:89:fa:9d:79:e1:a5:6e:fc:d4:33:1e:4d:7b: a1:69:da:64:0f:ec:98:bb:7e:df:0e:63:fd:2a:a7: e6:b0:07:64:e7:3d:48:ed:84:3b:d4:ec:16:b5:53: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5C:0D:85:78:22:79:C0:3C:5F:74:10:A0:C8:99:C4:59:BC:6F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b65b89f1-96b1-3ddd-8772-63484052b2b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b6:3f:f4:76:dd:27:aa:79:1b:5c:88:d2:ae:f3:50:b7:92: 95:02:86:55:e0:30:bf:9d:44:c3:c7:15:33:a0:29:3a:29:11: 3e:4f:67:06:74:4b:49:69:aa:79:48:ca:fa:34:a1:f2:7d:72: 0d:5f:b0:6d:fd:c2:46:1d:08:8c:6c:65:6f:3e:30:4d:b4:ce: 9e:40:97:eb:a1:38:4d:e5:b9:a4:43:d7:65:c8:6b:69:14:2a: 30:8b:4e:0d:cc:c7:ba:e2:d6:25:50:af:70:cb:1c:35:ec:a5: dc:b8:d8:37:b9:72:cf:82:46:fe:e9:73:7c:3f:03:2d:4e:d9: 5a:fa:59:10:5e:a0:97:2a:04:b0:75:1e:6f:a3:58:f6:a8:68: c2:98:17:fd:59:ba:90:be:e6:1b:31:4e:8b:e5:31:82:82:e1: 5a:ab:cf:7f:07:1d:47:f2:0e:db:b8:f8:9a:29:d6:18:14:c4: 3b:3c:4b:92:77:76:1c:62:5e:a6:23:65:d6:ca:e8:76:94:2d: 18:38:69:1f:40:da:13:47:66:b0:a1:53:78:24:98:a9:95:7e: 5d:69:fb:17:e3:fe:69:83:21:27:71:b7:de:ef:5d:9b:28:4f: 79:6c:a5:4b:f4:95:49:e7:41:71:32:2f:45:5a:68:0d:60:08: d6:de:3f:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwshldW5PledJBlzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIxMzE0MDAzOFoXDTI2MDMxMzEzMDAzOFowLzEtMCsGA1UEAxMk NGM1NjUyMzYtMWM2Yi00MjZjLTlhZmQtNWI4MjY2NmQ0NjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliN8o4gqOJTWhKA1aPgxLzYOBo0GPrPG2szd 7Dk8tdU3xmafX/sB6Z+UOQlaeG1NtPJpUUwwuAo6LHGsTBjE+1Wsii++QJ3A0/dQ Cli3ky/po0vTtHanelD61ZM5gB5Dv4VoFfYHqGknD8F3dHc/lRHoG5JftKjyGiYR z73RMyCQZLV2qEynHbv5eDoB5yIHZjNV9DkA4LsyGvyt2T+arXOjdzgQRhuW7FN8 95Sa8UrHv4eV+Nf8Vf0aFDaD5DQ89lndG5FvHFaUFuieyafxuJSIoYn6nXnhpW78 1DMeTXuhadpkD+yYu37fDmP9KqfmsAdk5z1I7YQ71OwWtVPd8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxcDYV4InnAPF90EKDImcRZvG9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjY1Yjg5ZjEtOTZiMS0z ZGRkLTg3NzItNjM0ODQwNTJiMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB62P/R23SeqeRtciNKu81C3kpUChlXgML+dRMPHFTOgKTopET5PZwZ0 S0lpqnlIyvo0ofJ9cg1fsG39wkYdCIxsZW8+ME20zp5Al+uhOE3luaRD12XIa2kU KjCLTg3Mx7ri1iVQr3DLHDXspdy42De5cs+CRv7pc3w/Ay1O2Vr6WRBeoJcqBLB1 Hm+jWPaoaMKYF/1ZupC+5hsxTovlMYKC4Vqrz38HHUfyDtu4+Jop1hgUxDs8S5J3 dhxiXqYjZdbK6HaULRg4aR9A2hNHZrChU3gkmKmVfl1p+xfj/mmDISdxt97vXZso T3lspUv0lUnnQXEyL0VaaA1gCNbeP5U= -----END CERTIFICATE-----Generated at Sun Dec 21 00:36:12 2025 by rpki-client