This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa File: 8cd9bb4a-ed14-375c-aa14-4200b366035f.roa (raw, json) Hash identifier: D6gSzXUGA4Y7fZMtRw8/HvncZLgHQNtwyu3NAqdr3A8= Subject key identifier: 85:F9:D1:44:8A:AA:E7:B9:CF:83:AE:BB:12:C6:CB:D8:06:FD:7B:4C Certificate issuer: /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Certificate serial: 010D0C9F4328584BFFDB7E09225EA502D6D0D300 Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 14618 IP address blocks: 209.127.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:7e:09:22:5e:a5:02:d6:d0:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=e93129b9-909c-44ba-b05d-9e06b18a7a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:03:50:25:0b:c9:f7:df:6a:e0:fc:3f:13:21: ef:c0:aa:64:68:30:b5:d6:e1:35:fc:11:7d:e2:c7: 8e:95:ef:f0:7f:72:fa:6c:a2:dc:f6:9d:5f:eb:9d: c7:ef:51:f7:f4:ba:e0:49:f5:a3:bd:87:cb:4c:c9: 15:77:69:f4:c9:56:df:cb:6a:68:46:af:14:7e:ed: f3:79:ac:95:27:c1:ec:48:6f:66:9d:f0:36:b4:fd: 2a:cb:4d:60:e2:1c:b0:38:20:18:21:e5:52:f2:8b: 2b:e4:f3:50:02:e9:37:e0:28:70:95:8f:20:7d:81: e6:e9:5b:eb:a1:72:21:e7:95:f7:4a:bc:f5:22:54: 26:f1:80:e8:14:3a:8c:77:c0:50:91:86:8d:83:99: d7:94:cb:29:51:90:f5:17:b4:ae:03:ed:70:e6:e7: f9:f2:00:ce:f4:84:48:09:20:10:b9:ff:da:3e:6c: b2:d7:a5:12:07:f3:19:ad:b9:1d:9a:e5:2b:7a:e9: 75:2e:e1:e9:97:88:94:1f:9b:10:e4:84:5b:a3:1a: 3b:ef:71:83:a6:6c:25:66:af:1a:62:fa:16:98:96: 12:e7:77:43:df:aa:eb:c4:c3:f1:7b:43:a6:07:9e: 83:26:10:11:87:88:c8:64:8a:42:e9:ae:11:91:fd: 0e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F9:D1:44:8A:AA:E7:B9:CF:83:AE:BB:12:C6:CB:D8:06:FD:7B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl X509v3 Authority Key Identifier: keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer sbgp-ipAddrBlock: critical IPv4: 209.127.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:45:6b:bf:c1:6c:da:73:6a:99:7e:25:bc:57:2b:29:16:57: a5:04:00:f3:3b:cf:7c:dc:60:e8:e5:64:3a:3d:a1:6b:fc:97: c6:f3:87:50:17:c4:ce:6d:1e:fc:df:54:77:5e:92:bb:08:e9: 22:7b:dc:2d:02:a3:29:a5:e7:10:66:af:95:73:12:6b:fc:2c: e7:01:77:8b:83:fd:c7:90:af:45:99:78:df:56:4e:fb:dd:9f: ee:fa:cf:5c:19:a6:07:50:18:3d:3c:7a:02:1e:a1:de:9e:74: 89:ee:df:4e:48:4a:a4:b9:60:c7:62:ae:d0:de:9d:f9:83:4c: 02:11:b5:b7:1b:4e:97:e6:7f:dd:00:4a:ee:19:6e:e1:22:f4: 5b:5a:68:0e:7e:38:c7:df:a3:ce:10:92:4f:e0:96:27:d7:9a: e6:b6:8c:17:80:bf:34:0f:93:2b:fc:2d:c6:60:52:8b:c8:f9: 05:70:c0:10:5d:8d:e1:98:ef:03:df:a1:de:81:fa:e4:80:f8: f0:60:6b:22:a4:c0:45:46:76:d6:34:9e:fb:fc:ce:95:7f:dd: cc:cc:9d:5b:af:0f:b9:80:be:d3:63:4e:a7:1f:0b:3a:97:55: 1e:57:9c:c3:dc:65:6e:ce:1f:38:9e:90:3a:96:f1:56:a8:20: b6:38:00:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/234JIl6lAtbQ0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY4ZWMyNWQtOTMyYS00ZGQ0LThmODMtZjFkYTA0OTA2 OGVjMB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk ZTkzMTI5YjktOTA5Yy00NGJhLWIwNWQtOWUwNmIxOGE3YTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogNQJQvJ999q4Pw/EyHvwKpkaDC11uE1/BF9 4seOle/wf3L6bKLc9p1f653H71H39LrgSfWjvYfLTMkVd2n0yVbfy2poRq8Ufu3z eayVJ8HsSG9mnfA2tP0qy01g4hywOCAYIeVS8osr5PNQAuk34ChwlY8gfYHm6Vvr oXIh55X3Srz1IlQm8YDoFDqMd8BQkYaNg5nXlMspUZD1F7SuA+1w5uf58gDO9IRI CSAQuf/aPmyy16USB/MZrbkdmuUreul1LuHpl4iUH5sQ5IRboxo773GDpmwlZq8a YvoWmJYS53dD36rrxMPxe0OmB56DJhARh4jIZIpC6a4Rkf0OOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIX50USKque5z4OuuxLGy9gG/XtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Zjhl YzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5MDY4ZWMvOGNkOWJiNGEtZWQxNC0z NzVjLWFhMTQtNDIwMGIzNjYwMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGY4ZWMyNWQtOTMyYS00ZGQ0LThm ODMtZjFkYTA0OTA2OGVjLzRmOGVjMjVkLTkzMmEtNGRkNC04ZjgzLWYxZGEwNDkw NjhlYy5jcmwwHwYDVR0jBBgwFoAUMcXgnadCF+8nR36OpSmNPzPy5U0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRh MDQ5MDY4ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtFa7/BbNpzapl+JbxXKykWV6UEAPM7z3zcYOjlZDo9oWv8l8bzh1AX xM5tHvzfVHdekrsI6SJ73C0Coyml5xBmr5VzEmv8LOcBd4uD/ceQr0WZeN9WTvvd n+76z1wZpgdQGD08egIeod6edInu305ISqS5YMdirtDenfmDTAIRtbcbTpfmf90A Su4ZbuEi9FtaaA5+OMffo84Qkk/glifXmua2jBeAvzQPkyv8LcZgUovI+QVwwBBd jeGY7wPfod6B+uSA+PBgayKkwEVGdtY0nvv8zpV/3czMnVuvD7mAvtNjTqcfCzqX VR5XnMPcZW7OHziekDqW8VaoILY4AHg= -----END CERTIFICATE-----Generated at Sat Dec 6 15:58:11 2025 by rpki-client