This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de834cef-e9e4-3903-9b12-cd13a54fbd09.roa File: de834cef-e9e4-3903-9b12-cd13a54fbd09.roa (raw, json) Hash identifier: Z4RMQSrQV89MTw6gqu+ZpEj2nLtOJ6nSdJ8nTZOlgzw= Subject key identifier: 89:3D:D7:8C:C5:3F:52:30:B2:83:B9:4C:D5:12:33:8B:1D:D1:E8:2C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C3A7BC3847F8E849E210F28C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de834cef-e9e4-3903-9b12-cd13a54fbd09.roa Signing time: Thu 18 Dec 2025 14:00:39 +0000 ROA not before: Thu 18 Dec 2025 14:00:39 +0000 ROA not after: Wed 18 Mar 2026 13:00:39 +0000 asID: 834 IP address blocks: 69.17.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3a:7b:c3:84:7f:8e:84:9e:21:0f:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 18 14:00:39 2025 GMT Not After : Mar 18 13:00:39 2026 GMT Subject: CN=af5fe568-ed93-4627-9e62-2faac39af22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:45:13:28:41:0a:f8:32:28:6a:cc:84:74:78: 43:50:d0:9c:f5:c8:d4:a7:8a:6d:83:88:a5:92:ae: 96:49:71:5b:22:33:08:4a:d8:3a:7b:0b:bc:da:cf: 67:dd:6d:6b:93:43:de:18:a3:c1:e7:fb:97:43:09: ef:10:53:9d:74:a9:cc:de:d7:a7:08:c7:05:5a:5e: cb:db:09:a1:5c:75:ce:ac:fc:51:72:75:97:f0:d7: 07:ca:66:d8:f8:31:54:b1:e6:21:45:97:5c:e1:b0: 65:de:5a:c3:ee:35:a5:60:5e:7a:2b:90:ae:49:2d: 05:a9:c5:d2:ce:f4:ee:9c:8b:4a:aa:46:dc:bd:63: 8c:9e:18:a8:12:ea:51:61:db:83:00:80:cb:95:02: 90:c6:f3:fd:d9:49:1b:f4:d7:de:ba:97:7b:13:bc: 0d:60:57:68:bd:0c:34:96:64:56:de:75:26:1e:75: 87:cc:4e:ee:5f:11:ea:d8:ef:9d:6c:8f:57:c2:6b: f2:0f:41:96:cc:c6:e7:76:18:ec:f5:f5:44:fe:d7: cb:74:08:44:ee:59:41:4d:07:89:6c:b4:ca:77:d0: 64:e0:19:5f:3d:f5:63:d6:18:67:d0:1e:f3:c1:7a: e4:af:f0:f0:d8:67:37:fb:00:13:1f:15:6b:5d:62: fa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3D:D7:8C:C5:3F:52:30:B2:83:B9:4C:D5:12:33:8B:1D:D1:E8:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/de834cef-e9e4-3903-9b12-cd13a54fbd09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 69.17.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:a7:18:03:23:81:a7:e9:b5:2a:aa:96:e4:79:14:29:95:f6: 79:c7:be:fe:be:bc:1e:97:ae:62:ee:b7:78:86:49:3f:ec:c8: d0:9f:f5:31:d5:06:24:88:77:cb:b2:5a:dd:fe:06:25:94:bb: a1:da:95:12:4b:f0:33:35:0d:0e:dd:09:c4:dd:6a:26:58:e8: 72:33:8e:ae:c3:b3:6e:ef:18:33:17:a8:26:ce:04:7f:77:7d: b4:d1:8d:41:47:af:25:e7:02:a0:eb:69:23:fb:58:50:82:6c: f7:45:69:e6:f3:1c:f6:d6:2d:13:ee:ae:99:80:77:a0:80:60: 8c:1c:94:36:a3:4b:41:1c:12:f8:bd:1c:93:8a:13:c8:b7:84: c7:dd:d1:89:03:f3:a5:13:9b:4d:a4:e3:4f:e3:6d:24:6d:fb: 94:ce:23:d9:f4:9b:6b:c4:82:be:dc:32:e5:34:7a:5f:79:2d: c9:c8:d0:bd:cc:e9:04:5d:8b:5f:ce:8c:c6:fb:36:8b:f7:0d: 21:5c:c3:4d:ff:a9:af:51:60:23:42:77:7a:b3:39:81:cd:6c: a2:40:ed:fe:e0:f9:d8:63:32:db:ea:58:06:34:08:36:c0:e1: 56:bf:2b:94:10:9e:68:cf:f0:e5:79:5b:5c:22:67:d7:c8:ff: b3:7a:8a:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw6e8OEf46EniEPKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIxODE0MDAzOVoXDTI2MDMxODEzMDAzOVowLzEtMCsGA1UEAxMk YWY1ZmU1NjgtZWQ5My00NjI3LTllNjItMmZhYWMzOWFmMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUUTKEEK+DIoasyEdHhDUNCc9cjUp4ptg4il kq6WSXFbIjMIStg6ewu82s9n3W1rk0PeGKPB5/uXQwnvEFOddKnM3tenCMcFWl7L 2wmhXHXOrPxRcnWX8NcHymbY+DFUseYhRZdc4bBl3lrD7jWlYF56K5CuSS0FqcXS zvTunItKqkbcvWOMnhioEupRYduDAIDLlQKQxvP92Ukb9Nfeupd7E7wNYFdovQw0 lmRW3nUmHnWHzE7uXxHq2O+dbI9XwmvyD0GWzMbndhjs9fVE/tfLdAhE7llBTQeJ bLTKd9Bk4BlfPfVj1hhn0B7zwXrkr/Dw2Gc3+wATHxVrXWL66QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIk914zFP1IwsoO5TNUSM4sd0egsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGU4MzRjZWYtZTllNC0z OTAzLTliMTItY2QxM2E1NGZiZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRRE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKnGAMjgafptSqqluR5FCmV9nnHvv6+vB6XrmLut3iGST/syNCf9THV BiSId8uyWt3+BiWUu6HalRJL8DM1DQ7dCcTdaiZY6HIzjq7Ds27vGDMXqCbOBH93 fbTRjUFHryXnAqDraSP7WFCCbPdFaebzHPbWLRPurpmAd6CAYIwclDajS0EcEvi9 HJOKE8i3hMfd0YkD86UTm02k40/jbSRt+5TOI9n0m2vEgr7cMuU0el95LcnI0L3M 6QRdi1/OjMb7Nov3DSFcw03/qa9RYCNCd3qzOYHNbKJA7f7g+dhjMtvqWAY0CDbA 4Va/K5QQnmjP8OV5W1wiZ9fI/7N6ik8= -----END CERTIFICATE-----Generated at Sun Dec 21 13:07:26 2025 by rpki-client