This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa File: 9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa (raw, json) Hash identifier: JD+uDnrFk0wtNllnXSAz7RFQzMGJi7cSGsBQHo3daGo= Subject key identifier: 73:9D:07:79:37:FD:0D:E9:7E:46:17:32:9B:0B:4E:DB:C5:37:D0:15 Certificate issuer: /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Certificate serial: 010D0C9F4328584BFFDB7DF96AA5DEEDF3C4E480 Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 16509 IP address blocks: 209.127.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:7d:f9:6a:a5:de:ed:f3:c4:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=b3b23fb1-07a0-4fdd-95c3-779b59df4a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b1:b0:54:6d:61:31:6b:2c:d0:ab:b8:86:bd: 7a:e1:e6:66:50:11:fb:bf:4f:8e:9f:67:72:c5:86: 2b:e6:d0:22:1b:8b:d7:68:9c:b0:60:de:64:9b:39: e0:56:3e:79:59:94:f9:e7:bf:b5:a0:a5:68:d0:ed: cd:38:e6:16:50:67:a3:ab:ab:17:f6:f4:e1:2c:d4: 98:24:5f:e9:11:c8:47:8f:35:0a:fc:85:b5:7f:5e: c3:e0:38:77:28:a6:94:01:f7:60:c4:1d:9d:ea:e0: 30:83:df:77:a3:99:8e:d4:5f:65:30:ab:a2:31:90: 09:51:ce:f2:01:dd:6d:1c:a3:d3:b9:60:f7:b9:52: f2:18:ee:3b:a8:5f:d4:81:62:c9:fc:1d:8f:ce:36: a2:77:0a:5d:25:16:d1:2e:a4:3c:45:01:47:35:0b: bf:cd:ba:da:a2:b8:75:13:b9:e0:94:a6:9e:59:6f: 7f:d9:61:8d:61:d4:b2:e3:30:46:a1:f4:6b:f2:d8: 89:28:a9:37:ab:2d:fe:f2:b3:52:0d:fe:49:b9:2a: 5a:a9:7f:0e:77:c8:8d:97:af:2e:6d:b4:f6:76:b4: bf:a1:71:60:0d:93:0a:d5:a7:d0:23:11:bb:09:80: 52:07:76:d8:bd:85:70:5c:4e:1d:23:06:9a:84:92: f7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9D:07:79:37:FD:0D:E9:7E:46:17:32:9B:0B:4E:DB:C5:37:D0:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl X509v3 Authority Key Identifier: keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer sbgp-ipAddrBlock: critical IPv4: 209.127.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:37:08:3f:a1:52:2a:0b:e1:6a:15:de:f5:09:04:15:28:4e: ca:04:46:37:e6:8d:57:96:50:ef:5c:44:d0:4f:22:bd:06:0b: 7b:61:43:7f:83:1e:6a:5d:17:df:5e:3f:08:bc:73:32:cb:a9: 55:14:18:88:87:f9:30:51:59:85:35:e9:1f:f7:e1:15:18:8f: ac:6c:c2:b8:8e:a1:54:eb:2e:e1:04:05:38:fd:eb:5c:d4:67: aa:42:22:df:86:86:bd:9d:93:be:5a:fe:cc:94:02:eb:74:0c: d1:11:de:66:9b:7d:75:2a:65:ab:a6:7c:f9:d8:5e:58:60:b7: 55:b7:a9:5b:f1:db:42:d3:92:bf:40:5d:b4:f2:a9:77:1a:97: b4:3a:2f:dc:b4:c3:ed:54:35:84:d9:d0:ea:6a:4f:51:f9:3b: 4a:b2:9f:26:45:46:22:1c:18:58:98:2d:bf:8b:33:e2:b8:14: fe:4a:23:0a:4f:a5:13:33:a0:ad:37:ea:7e:6a:59:52:58:be: 2a:75:c4:43:b4:6c:69:a2:c6:e0:0b:08:52:81:04:f8:82:66: a0:70:60:26:91:85:6a:42:f1:7f:d3:dc:8e:fb:19:94:1f:71: 39:8f:55:8b:5b:8b:3b:ad:46:e6:54:70:52:d6:0f:e0:50:65: 58:87:43:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/2335aqXe7fPE5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY4ZWMyNWQtOTMyYS00ZGQ0LThmODMtZjFkYTA0OTA2 OGVjMB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk YjNiMjNmYjEtMDdhMC00ZmRkLTk1YzMtNzc5YjU5ZGY0YTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLGwVG1hMWss0Ku4hr164eZmUBH7v0+On2dy xYYr5tAiG4vXaJywYN5kmzngVj55WZT557+1oKVo0O3NOOYWUGejq6sX9vThLNSY JF/pEchHjzUK/IW1f17D4Dh3KKaUAfdgxB2d6uAwg993o5mO1F9lMKuiMZAJUc7y Ad1tHKPTuWD3uVLyGO47qF/UgWLJ/B2PzjaidwpdJRbRLqQ8RQFHNQu/zbraorh1 E7nglKaeWW9/2WGNYdSy4zBGofRr8tiJKKk3qy3+8rNSDf5JuSpaqX8Od8iNl68u bbT2drS/oXFgDZMK1afQIxG7CYBSB3bYvYVwXE4dIwaahJL3JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOdB3k3/Q3pfkYXMpsLTtvFN9AVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Zjhl YzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5MDY4ZWMvOWMxYWNkNmEtMDdjMC0z NzZlLTg3ZTItYjFhMjk5MmUyYzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGY4ZWMyNWQtOTMyYS00ZGQ0LThm ODMtZjFkYTA0OTA2OGVjLzRmOGVjMjVkLTkzMmEtNGRkNC04ZjgzLWYxZGEwNDkw NjhlYy5jcmwwHwYDVR0jBBgwFoAUMcXgnadCF+8nR36OpSmNPzPy5U0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRh MDQ5MDY4ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA3CD+hUioL4WoV3vUJBBUoTsoERjfmjVeWUO9cRNBPIr0GC3thQ3+D HmpdF99ePwi8czLLqVUUGIiH+TBRWYU16R/34RUYj6xswriOoVTrLuEEBTj961zU Z6pCIt+Ghr2dk75a/syUAut0DNER3mabfXUqZaumfPnYXlhgt1W3qVvx20LTkr9A XbTyqXcal7Q6L9y0w+1UNYTZ0OpqT1H5O0qynyZFRiIcGFiYLb+LM+K4FP5KIwpP pRMzoK036n5qWVJYvip1xEO0bGmixuALCFKBBPiCZqBwYCaRhWpC8X/T3I77GZQf cTmPVYtbizutRuZUcFLWD+BQZViHQz0= -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:18 2025 by rpki-client