This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa File: d1206389-b9de-36cd-8068-be081e3c00dd.roa (raw, json) Hash identifier: El6ksOzbpNlRxtZYfUrbbDgCrORzQOl26Tqvpd+t2zs= Subject key identifier: C5:20:71:91:41:00:8F:52:3F:C5:B6:B5:B7:3B:EA:31:B1:3F:4F:23 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584BD8C5BDCE06FDF371FA621C80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 398210 IP address blocks: 168.220.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:bd:ce:06:fd:f3:71:fa:62:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=98dc96d6-7ab9-476b-963e-3f204423426a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:a6:18:d4:20:74:bf:1d:e3:fb:1c:89:04: e6:4c:cc:13:bd:7e:b9:03:20:38:25:67:c0:d0:e1: d2:23:c5:1d:84:95:e0:3a:28:ee:0f:f9:62:a2:fe: c4:94:19:2d:23:32:b0:8a:f6:48:99:26:57:cd:f8: 97:6c:db:0a:76:25:3f:37:73:3b:2b:e7:81:09:e3: 96:56:83:62:ab:1d:1c:3e:aa:68:9d:a5:8f:b6:e1: fe:e7:a0:c2:54:f9:45:63:a4:73:61:78:f5:bb:19: 8f:ab:79:9a:07:da:f4:37:09:0e:0e:9d:39:b0:f9: 36:ac:32:9a:6e:4d:4c:ac:6d:fe:99:71:7b:4e:d2: 3c:c7:ae:0f:65:01:59:03:ba:24:48:9f:45:9c:64: 04:d6:f5:7c:4c:bc:3f:0a:e5:a1:f2:0f:78:16:f5: 5a:f2:4b:c8:d2:5f:b4:ba:2f:7b:f0:44:01:25:65: 42:d7:a8:06:b7:83:7d:23:ff:0e:a5:e8:47:aa:cc: ce:ff:35:42:7a:4c:80:a1:88:00:0b:1c:80:59:5f: ba:ba:ea:f4:fc:2f:61:2d:7c:7d:c6:1a:75:c5:e9: eb:85:08:37:08:45:b8:9a:f2:92:d4:77:42:aa:1e: e0:74:ca:f0:1c:9e:20:cb:36:29:70:11:fe:4d:b3: 2f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:20:71:91:41:00:8F:52:3F:C5:B6:B5:B7:3B:EA:31:B1:3F:4F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/d1206389-b9de-36cd-8068-be081e3c00dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f2:1e:ac:c3:77:1c:43:6b:5f:c7:a3:2c:f8:20:54:9e:1c: 5c:fb:34:5e:4c:d6:7a:5b:a4:2d:53:fc:ff:e9:05:5e:6f:46: 64:c9:3b:f5:e6:18:bb:cd:04:82:0b:f1:62:08:3f:bd:a4:bb: 22:23:89:5d:c7:28:55:f6:1f:a0:2a:28:65:f1:02:a3:22:fc: f1:cc:10:c5:72:50:0c:ac:0e:0a:0b:d2:f7:2d:61:21:ef:ac: d6:45:58:23:f5:ce:eb:85:3b:4a:bc:f7:3a:80:6a:b0:c1:15: 22:8e:fd:a1:5d:4c:6c:07:28:e6:3b:89:9b:2b:19:6b:83:3c: fc:58:ce:80:c9:a8:d2:57:9e:8c:66:f0:49:30:9d:60:77:f3: ed:73:82:ef:f2:a6:63:f1:e5:b3:02:13:17:31:e9:1b:8b:24: 0d:e3:63:32:4d:c7:c3:6d:1c:9d:ec:79:87:78:1f:19:72:21: f8:27:50:11:73:40:06:13:0e:fe:33:7e:28:e5:5c:b1:36:e0: 53:e2:8c:89:08:33:81:64:b1:ef:2b:8c:cb:58:17:70:50:a4: e5:c0:26:83:09:44:79:06:8c:48:b8:e9:3e:58:19:35:2d:4f: 4b:e6:c4:bf:85:99:10:37:16:ed:fb:db:a1:fe:4f:66:40:d4: a0:64:88:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxb3OBv3zcfpiHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk OThkYzk2ZDYtN2FiOS00NzZiLTk2M2UtM2YyMDQ0MjM0MjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ+mGNQgdL8d4/sciQTmTMwTvX65AyA4JWfA 0OHSI8UdhJXgOijuD/liov7ElBktIzKwivZImSZXzfiXbNsKdiU/N3M7K+eBCeOW VoNiqx0cPqponaWPtuH+56DCVPlFY6RzYXj1uxmPq3maB9r0NwkODp05sPk2rDKa bk1MrG3+mXF7TtI8x64PZQFZA7okSJ9FnGQE1vV8TLw/CuWh8g94FvVa8kvI0l+0 ui978EQBJWVC16gGt4N9I/8OpehHqszO/zVCekyAoYgACxyAWV+6uur0/C9hLXx9 xhp1xenrhQg3CEW4mvKS1HdCqh7gdMrwHJ4gyzYpcBH+TbMv6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUgcZFBAI9SP8W2tbc76jGxP08jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZDEyMDYzODktYjlkZS0z NmNkLTgwNjgtYmUwODFlM2MwMGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjyHqzDdxxDa1/Hoyz4IFSeHFz7NF5M1npbpC1T/P/pBV5vRmTJO/Xm GLvNBIIL8WIIP72kuyIjiV3HKFX2H6AqKGXxAqMi/PHMEMVyUAysDgoL0vctYSHv rNZFWCP1zuuFO0q89zqAarDBFSKO/aFdTGwHKOY7iZsrGWuDPPxYzoDJqNJXnoxm 8EkwnWB38+1zgu/ypmPx5bMCExcx6RuLJA3jYzJNx8NtHJ3seYd4HxlyIfgnUBFz QAYTDv4zfijlXLE24FPijIkIM4Fkse8rjMtYF3BQpOXAJoMJRHkGjEi46T5YGTUt T0vmxL+FmRA3Fu3726H+T2ZA1KBkiHg= -----END CERTIFICATE-----Generated at Sat Dec 6 16:32:40 2025 by rpki-client