This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa File: 067b0439-4cea-3e63-ae85-baf79b93fd58.roa (raw, json) Hash identifier: jVxE79FnF1RTP/Ul2S9B7Uf8LhhouVAV447lVlqCQxY= Subject key identifier: 99:68:A7:56:77:D1:85:2B:BE:E2:B2:47:E3:80:64:39:D1:C4:27:89 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584C1630C8E4E1C93BFB9735A240 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 23465 IP address blocks: 70.99.72.0/21 maxlen: 21 70.99.104.0/21 maxlen: 21 70.99.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:c8:e4:e1:c9:3b:fb:97:35:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=ff6400ac-b265-48ba-8370-1fda18fc4f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:b8:ad:04:1d:25:da:fa:ae:47:d5:8b:c5: 7e:47:b2:0d:6c:86:95:f1:c3:04:84:4d:12:0e:17: 4f:ca:e4:93:9f:bc:f1:36:e5:82:28:37:d0:e5:02: 82:ef:86:1e:07:d9:64:15:bf:c8:a7:24:4f:57:02: ee:78:86:8e:de:31:a4:1e:2b:47:41:e4:8a:c5:a2: 71:79:fd:b9:97:d8:c9:50:ea:ea:54:af:3c:53:42: 17:ad:42:ea:16:67:d8:86:bd:ce:0c:23:ca:b4:78: 55:1d:13:80:8d:d0:23:bf:9b:9a:75:d8:8a:f5:86: bf:33:dd:87:c8:0a:22:73:99:ee:06:f8:10:d4:12: e9:7f:06:d1:fd:df:87:ce:74:18:55:04:d9:72:4a: 55:46:84:95:91:5a:4f:e2:d5:78:e7:1d:7f:f3:22: cf:55:4f:a0:a6:59:78:d8:82:99:01:dd:82:17:9f: 1e:45:4b:a9:9a:c0:3d:61:eb:6b:7a:25:db:ca:6b: ff:69:d0:35:33:30:fe:da:ec:90:88:99:78:f5:0e: 71:ee:31:7e:41:89:ee:b7:42:4c:1f:8b:41:d0:90: 1d:07:d9:55:72:51:61:fc:9c:d9:45:6a:66:71:12: a0:92:36:aa:cb:bf:34:f6:af:f4:88:ab:2c:f0:b5: 02:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:68:A7:56:77:D1:85:2B:BE:E2:B2:47:E3:80:64:39:D1:C4:27:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.99.72.0/21 70.99.104.0/21 70.99.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:91:7d:01:84:89:32:ac:af:bd:db:0e:17:7a:53:35:6e:24: ee:f5:f7:94:24:e7:2d:7e:73:58:25:ce:8e:59:9c:2a:7b:c6: 11:33:86:67:9e:60:dc:d2:b4:10:a4:17:60:35:a6:a8:1b:dd: e4:1b:0b:40:2c:03:41:20:9e:99:50:d4:4e:aa:a8:db:94:d6: 7d:5a:78:76:16:79:66:ca:cc:25:e0:29:d6:48:e8:f9:76:57: b6:bf:79:26:c3:0c:31:1b:d3:86:8a:ab:66:c5:b8:43:04:a7: 67:9d:32:39:b4:c6:0f:e9:d5:bb:57:61:cd:a0:fc:fa:35:85: 6d:dc:8b:2f:1a:48:dd:a2:be:71:27:d4:18:b2:df:a7:a0:8f: 7f:73:dc:98:01:7a:11:fd:ca:d5:2d:f0:cc:31:c9:cc:60:9c: 80:b7:1a:47:f4:0e:82:a9:0a:b8:98:3a:51:90:3c:5e:6f:66: a9:af:71:ca:fb:fe:fb:cd:79:e5:d8:a7:f4:66:3e:34:37:46: 4e:09:68:96:35:9b:33:fb:61:d2:34:de:56:3a:4a:17:34:ed: 1f:bc:4e:2b:68:66:75:f3:04:01:cc:51:50:da:60:81:2b:b4: 6f:e2:d0:bb:b5:9a:ce:3d:38:2a:a1:60:a4:3c:ac:6c:8d:58: d5:4b:a6:eb -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEwWMMjk4ck7+5c1okAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk ZmY2NDAwYWMtYjI2NS00OGJhLTgzNzAtMWZkYTE4ZmM0ZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgS4rQQdJdr6rkfVi8V+R7INbIaV8cMEhE0S DhdPyuSTn7zxNuWCKDfQ5QKC74YeB9lkFb/IpyRPVwLueIaO3jGkHitHQeSKxaJx ef25l9jJUOrqVK88U0IXrULqFmfYhr3ODCPKtHhVHROAjdAjv5uaddiK9Ya/M92H yAoic5nuBvgQ1BLpfwbR/d+HznQYVQTZckpVRoSVkVpP4tV45x1/8yLPVU+gpll4 2IKZAd2CF58eRUupmsA9YetreiXbymv/adA1MzD+2uyQiJl49Q5x7jF+QYnut0JM H4tB0JAdB9lVclFh/JzZRWpmcRKgkjaqy7809q/0iKss8LUC4QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJlop1Z30YUrvuKyR+OAZDnRxCeJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvMDY3YjA0MzktNGNlYS0z ZTYzLWFlODUtYmFmNzliOTNmZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDRmNIAwQD RmNoAwQARmP7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFKRfQGEiTKsr73bDhd6UzVuJO7195Qk5y1+c1gl zo5ZnCp7xhEzhmeeYNzStBCkF2A1pqgb3eQbC0AsA0EgnplQ1E6qqNuU1n1aeHYW eWbKzCXgKdZI6Pl2V7a/eSbDDDEb04aKq2bFuEMEp2edMjm0xg/p1btXYc2g/Po1 hW3ciy8aSN2ivnEn1Biy36egj39z3JgBehH9ytUt8MwxycxgnIC3Gkf0DoKpCriY OlGQPF5vZqmvccr7/vvNeeXYp/RmPjQ3Rk4JaJY1mzP7YdI03lY6Shc07R+8Tito ZnXzBAHMUVDaYIErtG/i0Lu1ms49OCqhYKQ8rGyNWNVLpus= -----END CERTIFICATE-----Generated at Sun Dec 7 06:59:36 2025 by rpki-client