This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa File: f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa (raw, json) Hash identifier: vYQLxohC3VJKvro2LjA1z3/jKb8O3jZ7gDqB0PLYEs8= Subject key identifier: 6E:57:5F:BF:0D:AF:59:D8:28:19:29:8B:8C:03:30:A3:43:1B:87:31 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584BEDB5C996A749A68EC4E5D100 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 13414 IP address blocks: 209.237.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:c9:96:a7:49:a6:8e:c4:e5:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=d89bcf3b-0654-4497-98f8-b5dba5a77e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bb:29:18:e7:89:89:a1:4f:f5:b5:b3:21:9c: 38:38:9a:de:b5:df:a9:33:b3:94:67:8f:18:27:f2: a3:da:95:b2:34:43:03:7a:16:e0:eb:ae:d3:3d:78: 66:f1:d3:18:79:af:31:b8:19:8d:a9:43:0f:f7:f4: 83:b7:a3:d9:cc:ba:0e:e9:87:b1:8b:7b:bf:fa:ff: b7:a4:78:cf:93:62:96:22:3a:8e:8b:bd:3a:ba:b8: b9:a5:7c:3c:89:1b:bc:1c:2d:da:30:2a:ed:bd:51: 23:08:38:3f:34:f8:87:ac:b1:01:cc:7e:b9:3c:b9: 8b:a5:2b:e2:3c:97:90:db:8d:be:b7:7f:55:5a:d4: 6d:aa:55:e6:36:e4:df:07:a9:92:fd:c7:e3:8e:ac: 79:74:cf:3b:dc:15:ef:be:bc:74:60:54:e6:2e:2e: 2a:74:60:55:07:61:3d:d7:c5:ca:ba:6f:3b:c8:ae: ba:a5:6b:74:ca:5a:75:b3:4e:17:3e:d9:50:73:37: a6:88:69:3d:f9:8b:fe:82:6b:d5:74:d5:60:55:99: 1f:7a:e5:cc:5c:fd:41:2a:9a:ce:ab:37:d8:64:21: 9e:dc:05:31:ed:10:2d:73:b8:e4:97:6c:05:33:1c: 66:cc:df:bc:02:bb:f0:46:f2:af:ca:6e:41:82:7c: 8d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:57:5F:BF:0D:AF:59:D8:28:19:29:8B:8C:03:30:A3:43:1B:87:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f1bd1c18-533d-3c3f-b7a8-db2ef1ef1f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b6:3c:8f:c5:5b:27:a3:26:57:7d:2e:7a:e3:5e:ff:08:69: f6:d0:a7:85:56:2b:20:71:74:5b:ea:c1:00:81:92:81:01:a0: 9d:ac:5f:7f:05:e2:a4:f8:75:d3:52:a2:ed:2e:38:75:c5:bb: 24:86:75:40:9a:5c:0f:2a:68:38:51:7c:ae:44:8c:ee:45:9b: 75:95:6e:ce:f4:09:35:d7:8f:d2:08:f1:8e:a0:70:93:7c:ba: d1:b2:63:4e:0c:fd:ee:1d:e0:66:dc:97:cf:fc:bd:34:64:44: d7:44:bd:f9:79:0b:a2:79:fb:da:00:0d:0f:4f:c2:3a:5a:07: 80:b1:fd:74:25:f6:23:42:48:6b:54:90:8b:8d:1c:4f:77:c6: e0:0e:2b:35:56:14:3c:ee:4d:47:58:a9:34:96:a2:f0:8a:6a: c0:54:68:22:eb:4a:f4:6d:5b:59:c3:2c:b7:af:dc:cf:39:2f: b4:d4:8c:8f:00:b0:78:8c:6e:b2:95:da:8b:26:6d:93:45:6a: a5:35:a7:fd:14:d9:40:81:8d:76:66:87:be:06:52:a4:cf:e8: e5:e7:ff:1e:d0:e5:ba:3e:a4:52:be:fd:d4:79:82:e2:67:0a: 99:53:d3:23:5b:1a:b6:ce:0a:1e:3e:32:1e:6a:a6:b2:f4:c3: aa:bc:46:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvttcmWp0mmjsTl0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk ZDg5YmNmM2ItMDY1NC00NDk3LTk4ZjgtYjVkYmE1YTc3ZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbspGOeJiaFP9bWzIZw4OJretd+pM7OUZ48Y J/Kj2pWyNEMDehbg667TPXhm8dMYea8xuBmNqUMP9/SDt6PZzLoO6Yexi3u/+v+3 pHjPk2KWIjqOi706uri5pXw8iRu8HC3aMCrtvVEjCDg/NPiHrLEBzH65PLmLpSvi PJeQ242+t39VWtRtqlXmNuTfB6mS/cfjjqx5dM873BXvvrx0YFTmLi4qdGBVB2E9 18XKum87yK66pWt0ylp1s04XPtlQczemiGk9+Yv+gmvVdNVgVZkfeuXMXP1BKprO qzfYZCGe3AUx7RAtc7jkl2wFMxxmzN+8ArvwRvKvym5BgnyNywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5XX78Nr1nYKBkpi4wDMKNDG4cxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZjFiZDFjMTgtNTMzZC0z YzNmLWI3YTgtZGIyZWYxZWYxZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu2PI/FWyejJld9LnrjXv8IafbQp4VWKyBxdFvqwQCBkoEBoJ2sX38F 4qT4ddNSou0uOHXFuySGdUCaXA8qaDhRfK5EjO5Fm3WVbs70CTXXj9II8Y6gcJN8 utGyY04M/e4d4Gbcl8/8vTRkRNdEvfl5C6J5+9oADQ9PwjpaB4Cx/XQl9iNCSGtU kIuNHE93xuAOKzVWFDzuTUdYqTSWovCKasBUaCLrSvRtW1nDLLev3M85L7TUjI8A sHiMbrKV2osmbZNFaqU1p/0U2UCBjXZmh74GUqTP6OXn/x7Q5bo+pFK+/dR5guJn CplT0yNbGrbOCh4+Mh5qprL0w6q8RtY= -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:04 2025 by rpki-client