This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa File: 0def88de-7904-3498-ae64-f09bd667030d.roa (raw, json) Hash identifier: Pa+uZ/1rYOXWn4YZPPijjLU0AJbKVo1ZMafV8FZSpKE= Subject key identifier: 08:83:79:6C:3B:DE:ED:8C:72:DA:28:08:E3:C5:EC:16:FD:4C:BE:45 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584C1A60BE4171EBBB5E1A00E900 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa Signing time: Sun 07 Dec 2025 02:00:30 +0000 ROA not before: Sun 07 Dec 2025 02:00:30 +0000 ROA not after: Sat 07 Mar 2026 02:00:30 +0000 asID: 13536 IP address blocks: 209.198.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1a:60:be:41:71:eb:bb:5e:1a:00:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Dec 7 02:00:30 2025 GMT Not After : Mar 7 02:00:30 2026 GMT Subject: CN=f8d9a882-e50f-4404-ac79-80c184fd9d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f7:03:fc:be:a4:6c:3b:9d:bc:25:4e:80:e6: 1b:70:4b:f4:ee:e7:4f:fc:f2:e9:0a:52:08:dd:36: d7:2a:f7:b2:14:f9:c1:9c:8d:95:45:f2:23:98:4f: 6e:89:9b:66:fb:1d:67:56:b1:c1:87:fe:cb:c1:88: 57:67:b1:8e:67:5a:dc:aa:6f:c5:8f:f3:88:98:62: b4:c7:47:3f:0c:f4:aa:8b:70:4c:b8:d5:2c:1d:44: d8:23:86:1b:c8:64:ba:7d:af:70:d8:07:60:81:ef: 01:c1:89:9a:0a:ce:b4:a4:ce:e2:d3:e5:1d:6a:de: 30:29:5f:94:d9:34:0e:8a:cc:ab:fd:ee:49:e9:35: ef:84:49:02:39:c5:23:01:70:8e:17:3f:5d:cb:6f: 6a:21:59:90:d4:7e:b9:b4:53:76:a3:d4:90:f9:68: 1d:16:32:cb:e2:64:54:04:7a:9d:a9:88:38:0e:9d: c5:78:e2:37:17:cd:5f:9d:22:1c:4e:be:48:06:4e: cd:43:5c:b0:32:13:ba:4c:5c:4e:80:0c:d4:39:de: 6b:75:e0:f6:45:7a:ef:1f:ac:f0:d0:bf:50:8d:6e: fb:28:fc:c0:e5:fa:26:07:e5:18:bf:48:58:eb:84: 74:09:23:15:99:56:93:dc:82:bf:bb:e1:20:a2:d3: 44:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:83:79:6C:3B:DE:ED:8C:72:DA:28:08:E3:C5:EC:16:FD:4C:BE:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0def88de-7904-3498-ae64-f09bd667030d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 209.198.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d7:1c:02:36:50:50:df:5e:40:a5:c8:87:cc:d1:da:f4:80: ad:29:f3:d8:35:80:de:7d:56:71:c1:9f:50:c0:d4:fa:88:dd: fe:09:58:21:e1:a9:2b:d1:e7:88:5c:55:6a:56:94:f2:3a:20: 71:0f:ef:75:bd:bf:20:54:8a:6d:c3:f0:49:66:5a:57:54:ce: 02:f5:9f:ff:33:92:d0:6c:bf:ae:4a:5d:dd:50:aa:b1:28:45: 00:e2:bd:ac:e2:81:90:9b:bf:16:40:d8:e2:62:b0:fe:57:81: d8:c3:33:d6:ba:9c:2a:aa:39:4d:89:93:b0:8c:f9:49:ac:1a: 0d:10:50:24:39:01:ee:2c:21:5a:89:17:9b:9f:9c:af:1c:e9: 27:64:cd:10:9d:6b:29:6d:9c:a9:61:db:9b:a4:01:2a:05:1f: 39:25:07:66:98:70:46:5c:29:d9:66:72:63:54:7b:c7:14:63: 70:bf:17:c7:d3:eb:d4:e8:25:62:b0:2f:d1:46:a7:c2:92:f2: a8:79:3b:d1:4e:bf:19:eb:32:7d:5d:e9:b6:1a:3b:34:cc:ff: 8c:6a:7e:67:4e:9b:dc:6d:b4:cd:51:f6:8d:3e:00:99:b6:2a: 42:42:20:78:52:e1:19:88:e1:9b:f5:cc:47:70:2a:f9:38:97: 18:a3:64:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwaYL5Bceu7XhoA6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MTIwNzAyMDAzMFoXDTI2MDMwNzAyMDAzMFowLzEtMCsGA1UEAxMk ZjhkOWE4ODItZTUwZi00NDA0LWFjNzktODBjMTg0ZmQ5ZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPcD/L6kbDudvCVOgOYbcEv07udP/PLpClII 3TbXKveyFPnBnI2VRfIjmE9uiZtm+x1nVrHBh/7LwYhXZ7GOZ1rcqm/Fj/OImGK0 x0c/DPSqi3BMuNUsHUTYI4YbyGS6fa9w2Adgge8BwYmaCs60pM7i0+Udat4wKV+U 2TQOisyr/e5J6TXvhEkCOcUjAXCOFz9dy29qIVmQ1H65tFN2o9SQ+WgdFjLL4mRU BHqdqYg4Dp3FeOI3F81fnSIcTr5IBk7NQ1ywMhO6TFxOgAzUOd5rdeD2RXrvH6zw 0L9QjW77KPzA5fomB+UYv0hY64R0CSMVmVaT3IK/u+EgotNEqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiDeWw73u2MctooCOPF7Bb9TL5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMGRlZjg4ZGUtNzkwNC0z NDk4LWFlNjQtZjA5YmQ2NjcwMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cZCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrXHAI2UFDfXkClyIfM0dr0gK0p89g1gN59VnHBn1DA1PqI3f4JWCHh qSvR54hcVWpWlPI6IHEP73W9vyBUim3D8ElmWldUzgL1n/8zktBsv65KXd1QqrEo RQDivazigZCbvxZA2OJisP5XgdjDM9a6nCqqOU2Jk7CM+UmsGg0QUCQ5Ae4sIVqJ F5ufnK8c6SdkzRCdayltnKlh25ukASoFHzklB2aYcEZcKdlmcmNUe8cUY3C/F8fT 69ToJWKwL9FGp8KS8qh5O9FOvxnrMn1d6bYaOzTM/4xqfmdOm9xttM1R9o0+AJm2 KkJCIHhS4RmI4Zv1zEdwKvk4lxijZOI= -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:57 2025 by rpki-client