This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa File: 91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa (raw, json) Hash identifier: jQPCXkC/jcCNbkSytoIoBJFBYiGXlB6orqP/l7wwJTQ= Subject key identifier: 5C:43:F5:79:E0:CA:4A:10:08:E4:CF:7C:7A:79:C5:6C:F6:6F:49:E7 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584BF8E0A8DA5D959F9E44F32400 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 33362 IP address blocks: 198.174.212.0/23 maxlen: 24 198.174.214.0/23 maxlen: 24 204.221.17.0/24 maxlen: 24 204.221.18.0/23 maxlen: 24 204.221.144.0/22 maxlen: 24 206.9.80.0/24 maxlen: 24 206.145.178.0/23 maxlen: 24 206.145.224.0/23 maxlen: 24 206.146.48.0/22 maxlen: 24 209.32.64.0/21 maxlen: 24 209.32.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:a8:da:5d:95:9f:9e:44:f3:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=b667fc85-dd3b-4835-ad61-d78474f22041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:72:03:f0:f0:44:56:3f:5e:2d:86:de:f8:af: 54:95:6b:90:ea:ab:eb:fb:f6:e4:be:fe:98:71:91: 19:7b:cb:7e:7c:88:81:78:e5:2b:35:d4:2c:21:78: 01:ec:d7:c0:24:4e:9f:b6:68:f2:e8:7e:b5:cf:40: 56:eb:48:67:44:2c:01:68:db:8a:a0:4c:eb:3e:b2: f2:72:ab:bc:31:f9:1c:11:d3:4a:ce:0b:1a:9f:80: b6:27:46:be:f6:15:6a:e2:eb:59:d3:07:8b:f2:56: d5:6d:c6:96:80:d8:70:b4:d9:40:02:35:70:a9:2b: 04:0a:c0:78:68:ef:9e:56:2b:78:70:a3:9c:61:14: e6:c4:85:e6:42:a3:2e:47:fd:ac:58:79:4f:c3:bd: 09:cd:9c:d7:a2:2a:0f:86:55:11:bf:83:61:1e:4d: a5:8f:4b:c2:d4:ba:dc:fe:29:37:6c:2f:66:8f:f7: 56:c0:fc:7e:8a:03:a1:ac:17:40:8b:8c:46:79:36: f7:98:7f:01:a3:c7:17:c5:8c:12:d6:ca:6d:0f:97: fa:35:24:4a:19:13:bc:94:67:ba:92:b9:4f:a1:b6: be:be:2b:e8:da:f1:df:ce:c0:4b:f9:1e:35:ca:0e: 65:eb:57:15:c1:7e:40:f8:9b:90:64:c4:49:a7:27: de:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:43:F5:79:E0:CA:4A:10:08:E4:CF:7C:7A:79:C5:6C:F6:6F:49:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/91fa3f7f-9f28-3835-a2a7-45df52217cfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv4: 198.174.212.0/22 204.221.17.0-204.221.19.255 204.221.144.0/22 206.9.80.0/24 206.145.178.0/23 206.145.224.0/23 206.146.48.0/22 209.32.64.0/21 209.32.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5d:c5:49:a7:73:f9:9a:dc:e8:ba:47:57:17:b1:b6:88:9b: 93:70:d6:d4:53:96:28:b6:24:62:0e:df:a4:98:72:06:fd:af: 97:45:15:c2:8b:22:dc:eb:dd:6e:12:d3:16:d4:2d:3b:67:97: 42:4b:c6:16:27:a8:6d:3a:52:af:ae:f8:94:da:b8:34:d6:a8: 59:22:fb:cc:ad:e4:f5:42:ff:a4:05:4c:32:fa:9b:8e:24:40: 71:99:10:35:b8:a4:3b:50:c6:2f:53:4b:3d:44:63:0b:e8:55: 57:a3:a0:71:d3:7e:16:da:70:5d:3f:42:cf:75:1f:06:ef:c6: 4d:74:bc:07:94:eb:a6:9d:06:07:22:8f:44:1d:49:d3:70:fd: d4:88:44:04:3f:c1:ba:c3:ec:77:fc:0b:3b:15:2a:73:04:25: e6:e9:b4:ba:d3:3c:02:3b:62:89:22:3d:51:a5:09:68:69:71: 49:55:31:a5:4e:91:09:ec:4e:c8:db:fd:26:e6:01:e9:5b:7e: ac:e6:a3:a7:e9:77:06:68:2b:5a:59:9c:d0:a4:48:b5:36:8f: cc:f9:64:5e:c2:0b:0e:e0:5a:d0:d3:03:ac:59:b7:79:07:4e: f6:36:bd:bc:17:ca:1a:fd:73:51:6b:b2:ef:11:2f:95:d2:a9: cf:65:91:d5 -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWEv44KjaXZWfnkTzJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk YjY2N2ZjODUtZGQzYi00ODM1LWFkNjEtZDc4NDc0ZjIyMDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXID8PBEVj9eLYbe+K9UlWuQ6qvr+/bkvv6Y cZEZe8t+fIiBeOUrNdQsIXgB7NfAJE6ftmjy6H61z0BW60hnRCwBaNuKoEzrPrLy cqu8MfkcEdNKzgsan4C2J0a+9hVq4utZ0weL8lbVbcaWgNhwtNlAAjVwqSsECsB4 aO+eVit4cKOcYRTmxIXmQqMuR/2sWHlPw70JzZzXoioPhlURv4NhHk2lj0vC1Lrc /ik3bC9mj/dWwPx+igOhrBdAi4xGeTb3mH8Bo8cXxYwS1sptD5f6NSRKGRO8lGe6 krlPoba+vivo2vHfzsBL+R41yg5l61cVwX5A+JuQZMRJpyfetQIDAQABo4IDjTCC A4kwHQYDVR0OBBYEFFxD9XngykoQCOTPfHp5xWz2b0nnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvOTFmYTNmN2YtOWYyOC0z ODM1LWEyYTctNDVkZjUyMjE3Y2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCxq7UMAwD BADM3REDBALM3RADBALM3ZADBADOCVADBAHOkbIDBAHOkeADBALOkjADBAPRIEAD BAPRIHAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEALF3FSadz+Zrc6LpHVxextoibk3DW1FOWKLYkYg7fpJhy Bv2vl0UVwosi3OvdbhLTFtQtO2eXQkvGFieobTpSr674lNq4NNaoWSL7zK3k9UL/ pAVMMvqbjiRAcZkQNbikO1DGL1NLPURjC+hVV6OgcdN+FtpwXT9Cz3UfBu/GTXS8 B5Trpp0GByKPRB1J03D91IhEBD/BusPsd/wLOxUqcwQl5um0utM8AjtiiSI9UaUJ aGlxSVUxpU6RCexOyNv9JuYB6Vt+rOajp+l3BmgrWlmc0KRItTaPzPlkXsILDuBa 0NMDrFm3eQdO9ja9vBfKGv1zUWuy7xEvldKpz2WR1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:34 2025 by rpki-client