This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/af868b4a-df56-3a8f-adee-7750259a727e.roa File: af868b4a-df56-3a8f-adee-7750259a727e.roa (raw, json) Hash identifier: xhYLYHHxiQLUeww3Gcup4qYKFvwgv7m7HwLWyLa19Mo= Subject key identifier: E8:09:2B:AB:E4:8D:71:5B:BB:8D:6B:10:CC:CB:CB:BE:8A:C9:17:3A Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584BF4B0AAE7970732C367A52D20 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/af868b4a-df56-3a8f-adee-7750259a727e.roa Signing time: Sun 23 Nov 2025 14:00:38 +0000 ROA not before: Sun 23 Nov 2025 14:00:38 +0000 ROA not after: Sat 21 Feb 2026 14:00:38 +0000 asID: 23470 IP address blocks: 209.222.96.0/24 maxlen: 24 209.222.97.0/24 maxlen: 24 209.222.98.0/24 maxlen: 24 209.222.99.0/24 maxlen: 24 209.222.101.0/24 maxlen: 24 209.222.103.0/24 maxlen: 24 209.222.104.0/24 maxlen: 24 209.222.105.0/24 maxlen: 24 209.222.106.0/24 maxlen: 24 209.222.107.0/24 maxlen: 24 209.222.108.0/24 maxlen: 24 209.222.109.0/24 maxlen: 24 209.222.110.0/24 maxlen: 24 209.222.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f4:b0:aa:e7:97:07:32:c3:67:a5:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Nov 23 14:00:38 2025 GMT Not After : Feb 21 14:00:38 2026 GMT Subject: CN=8189d71f-3407-4ccc-9f46-80e902fae91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9c:7c:45:9e:3b:b3:95:18:f1:32:80:f9:b4: c6:7e:c1:2e:1d:e0:13:fa:e0:09:dc:f6:2e:94:26: ae:0b:10:5f:f8:d1:27:5a:0e:ea:2e:56:b2:9b:97: fc:6c:ca:1f:e6:c3:f2:59:c4:36:8b:ad:c7:26:63: fc:ae:92:d5:ee:c5:54:a2:db:ab:a7:92:5b:5a:16: b4:78:67:fa:a8:f5:7f:e3:b8:30:58:89:a9:34:cc: 0f:d5:d5:46:35:53:33:bb:1f:86:78:85:33:48:07: 5d:ec:a8:df:47:c9:64:98:4c:63:b0:7d:26:3d:b7: 08:91:e3:d5:c6:0b:be:2d:71:6b:06:e4:7d:f2:8f: 0f:ae:97:06:40:70:20:0a:d7:c0:57:7e:38:e4:d1: 10:55:39:c9:f0:2a:17:2c:ed:22:21:58:01:d2:33: 5a:80:56:4e:67:b2:7a:67:18:8f:1b:81:26:9c:09: 33:76:a8:8d:2f:a6:99:69:1e:2a:31:36:f2:12:e2: ad:de:83:c5:f8:21:06:8c:5a:e5:21:79:f4:9b:27: 02:7f:4a:fd:d7:31:0c:75:ec:d9:a8:ba:61:9e:1f: 3e:4f:61:74:b1:0d:3c:48:63:3b:89:e3:5a:90:cf: d2:53:66:a2:15:75:54:74:05:b4:37:10:be:ea:1c: fa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:09:2B:AB:E4:8D:71:5B:BB:8D:6B:10:CC:CB:CB:BE:8A:C9:17:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/af868b4a-df56-3a8f-adee-7750259a727e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 209.222.96.0/22 209.222.101.0/24 209.222.103.0-209.222.111.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:de:6e:6a:0d:fa:80:bb:cf:40:a6:28:d5:1c:70:b2:5e:5d: 89:ca:e0:be:94:79:3e:c9:0f:83:d6:5d:0a:cc:b0:e5:9e:be: 5b:27:63:b8:ac:4d:f6:51:4e:63:94:be:8c:3b:f2:5a:f9:c2: b4:cc:65:7a:85:86:a7:0e:9b:ff:6a:d6:7c:7d:ab:87:ac:09: 57:f5:ff:26:ca:a4:72:31:60:01:5b:0f:78:a9:4d:8a:8a:b1: e3:27:cd:0b:65:a6:b0:03:19:df:2f:c7:5b:79:3b:71:86:ec: 1c:ca:f5:7e:d7:88:e4:9e:1a:c0:55:90:0d:9d:9b:3a:df:07: cc:fe:45:f9:22:f7:01:40:fb:3d:20:a9:f4:77:5d:e4:21:4d: b4:fe:49:ca:50:41:76:9c:61:58:8a:3f:7b:b2:d3:11:f8:f0: 87:8b:0e:7a:0e:c4:2e:6e:a8:61:38:43:85:8f:0f:06:ed:f6: ee:f0:c1:7c:78:e5:03:bf:ee:80:5e:90:4a:1d:4c:aa:f9:f8: 01:f1:ae:e4:fe:30:86:29:43:20:93:03:ac:65:b0:d4:bc:55: 95:35:1b:b7:c8:85:ae:86:fa:c7:d0:29:7f:d1:69:a3:df:8f: 4e:67:a7:b3:8e:3d:41:0e:ec:80:68:2f:ad:d3:48:a5:e2:d8: 42:be:c0:dd -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEv0sKrnlwcyw2elLSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk ODE4OWQ3MWYtMzQwNy00Y2NjLTlmNDYtODBlOTAyZmFlOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Jx8RZ47s5UY8TKA+bTGfsEuHeAT+uAJ3PYu lCauCxBf+NEnWg7qLlaym5f8bMof5sPyWcQ2i63HJmP8rpLV7sVUoturp5JbWha0 eGf6qPV/47gwWImpNMwP1dVGNVMzux+GeIUzSAdd7KjfR8lkmExjsH0mPbcIkePV xgu+LXFrBuR98o8PrpcGQHAgCtfAV3445NEQVTnJ8CoXLO0iIVgB0jNagFZOZ7J6 ZxiPG4EmnAkzdqiNL6aZaR4qMTbyEuKt3oPF+CEGjFrlIXn0mycCf0r91zEMdezZ qLphnh8+T2F0sQ08SGM7ieNakM/SU2aiFXVUdAW0NxC+6hz6/wIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFOgJK6vkjXFbu41rEMzLy76KyRc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvYWY4NjhiNGEtZGY1Ni0z YThmLWFkZWUtNzc1MDI1OWE3MjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQC0d5gAwQA 0d5lMAwDBADR3mcDBATR3mAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGt5uag36gLvPQKYo1Rxwsl5dicrg vpR5PskPg9ZdCsyw5Z6+WydjuKxN9lFOY5S+jDvyWvnCtMxleoWGpw6b/2rWfH2r h6wJV/X/JsqkcjFgAVsPeKlNioqx4yfNC2WmsAMZ3y/HW3k7cYbsHMr1fteI5J4a wFWQDZ2bOt8HzP5F+SL3AUD7PSCp9Hdd5CFNtP5JylBBdpxhWIo/e7LTEfjwh4sO eg7ELm6oYThDhY8PBu327vDBfHjlA7/ugF6QSh1Mqvn4AfGu5P4whilDIJMDrGWw 1LxVlTUbt8iFrob6x9Apf9Fpo9+PTmens449QQ7sgGgvrdNIpeLYQr7A3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:44:32 2025 by rpki-client