This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bb17d2f-0a29-33a6-b04d-930532a2393b.roa File: 4bb17d2f-0a29-33a6-b04d-930532a2393b.roa (raw, json) Hash identifier: X2A5bqlbGW8Q5jgtBH4VU3WO8fkhv/Dp1nS7ZhtPNNs= Subject key identifier: A3:94:C2:A1:09:03:90:D5:2D:E6:86:EA:8A:9C:3A:03:13:AB:13:B0 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584C0DD0CCADFF77F58BCF7F2E40 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bb17d2f-0a29-33a6-b04d-930532a2393b.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 57043 IP address blocks: 166.1.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:cc:ad:ff:77:f5:8b:cf:7f:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=9d91f8a4-acd2-4f74-92e8-2e70c419a534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:68:a5:38:a2:a4:fd:0f:57:85:e9:33:10:77: 28:1d:a0:a0:fb:84:ae:9e:c7:26:79:26:ce:c0:d9: 29:33:ba:0d:dd:96:4a:19:bd:3d:66:53:e5:e7:b1: 6b:77:d6:9a:0c:96:32:ea:87:2d:55:41:42:b9:ec: 70:23:22:75:46:d9:67:47:2f:14:91:ef:11:2c:92: 5f:0f:31:fe:11:6b:e6:bd:ca:dc:34:27:69:26:e5: 8d:4b:59:8d:60:d2:21:b4:3b:d5:25:e4:fb:ea:1d: a5:fb:00:9f:69:0e:a6:13:b8:53:6c:49:c3:20:3e: 5f:dc:d9:97:04:6b:fc:a2:e3:e6:59:4e:f1:47:9f: f4:b2:e6:da:e0:af:d1:2b:14:86:0e:c7:e3:ce:7a: 4b:96:3e:b2:f1:e9:e7:e1:b2:6e:b0:d7:1c:2a:59: c2:e4:74:8e:dc:2d:0d:5e:35:15:6d:f4:3e:85:7d: 28:b1:ca:82:96:b2:f5:49:c7:00:1e:4f:7b:e1:a2: 93:09:e5:fd:2f:9e:c1:60:56:4e:b3:41:57:d0:e8: 87:84:30:2a:9c:56:81:40:10:be:e3:ce:79:0b:3b: da:4f:e0:ad:ba:91:3f:5a:3c:30:d8:93:cd:99:c0: bb:20:f1:d3:04:48:9b:61:83:ed:9d:52:86:29:80: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:94:C2:A1:09:03:90:D5:2D:E6:86:EA:8A:9C:3A:03:13:AB:13:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4bb17d2f-0a29-33a6-b04d-930532a2393b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 166.1.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e9:06:47:0c:76:9d:0e:66:a3:58:9c:96:45:dd:c7:4a:cd: 1a:3e:ad:db:07:27:07:61:ef:87:d7:b1:8b:8d:32:3a:88:69: c5:56:d9:28:ef:88:a9:9d:54:93:4b:3c:8c:65:64:e0:56:26: ad:ec:96:27:eb:b2:d1:c2:c5:a6:8a:88:3c:49:54:65:6d:91: 10:d5:44:92:e1:36:3b:80:0e:bb:2c:e8:0a:63:c5:cc:77:be: f2:cc:99:36:5c:e4:19:e6:13:fa:3e:7d:e1:32:97:c5:73:85: 3a:2f:f7:ad:01:59:a0:b1:2b:e4:7d:d1:2f:85:2b:7d:de:30: d4:dd:21:51:46:6d:f3:6a:75:0c:88:73:57:ab:99:99:6d:d7: fa:7d:9d:36:70:1a:24:df:19:21:e3:04:2f:53:9d:f6:09:16: 70:d5:5b:a0:09:01:51:1a:2a:2c:e7:9f:71:ac:75:ee:31:fa: 73:cb:7d:bd:3f:13:d8:d0:08:ad:cc:c4:7f:f1:c2:8e:10:3c: 83:0f:13:4a:d8:05:d4:bf:9d:ec:f1:e6:f0:9e:0d:ae:61:1c: 5b:d2:12:9a:da:07:98:e6:70:08:c5:60:4d:e9:1b:5e:38:58: 28:63:0a:77:f8:14:eb:08:05:77:d2:43:4f:65:b9:a8:39:c4: 69:05:d0:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0Myt/3f1i89/LkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk OWQ5MWY4YTQtYWNkMi00Zjc0LTkyZTgtMmU3MGM0MTlhNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WilOKKk/Q9XhekzEHcoHaCg+4SunscmeSbO wNkpM7oN3ZZKGb09ZlPl57Frd9aaDJYy6octVUFCuexwIyJ1RtlnRy8Uke8RLJJf DzH+EWvmvcrcNCdpJuWNS1mNYNIhtDvVJeT76h2l+wCfaQ6mE7hTbEnDID5f3NmX BGv8ouPmWU7xR5/0suba4K/RKxSGDsfjznpLlj6y8enn4bJusNccKlnC5HSO3C0N XjUVbfQ+hX0oscqClrL1SccAHk974aKTCeX9L57BYFZOs0FX0OiHhDAqnFaBQBC+ 4855CzvaT+CtupE/Wjww2JPNmcC7IPHTBEibYYPtnVKGKYDWzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOUwqEJA5DVLeaG6oqcOgMTqxOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGJiMTdkMmYtMGEyOS0z M2E2LWIwNGQtOTMwNTMyYTIzOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLpBkcMdp0OZqNYnJZF3cdKzRo+rdsHJwdh74fXsYuNMjqIacVW2Sjv iKmdVJNLPIxlZOBWJq3slifrstHCxaaKiDxJVGVtkRDVRJLhNjuADrss6Apjxcx3 vvLMmTZc5BnmE/o+feEyl8VzhTov960BWaCxK+R90S+FK33eMNTdIVFGbfNqdQyI c1ermZlt1/p9nTZwGiTfGSHjBC9TnfYJFnDVW6AJAVEaKiznn3Gsde4x+nPLfb0/ E9jQCK3MxH/xwo4QPIMPE0rYBdS/nezx5vCeDa5hHFvSEpraB5jmcAjFYE3pG144 WChjCnf4FOsIBXfSQ09luag5xGkF0Io= -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:51 2025 by rpki-client