This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa File: b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa (raw, json) Hash identifier: IPZ3sokZ/qSxc1m7eH2LCR7+xgzkE3kvoclXX58hAQE= Subject key identifier: DA:52:D5:8B:08:1D:00:13:62:76:F9:40:40:F1:7D:9A:A6:8B:FD:51 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584BF8E0A8C4B2AFD9AC1B6B3D00 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 19905 IP address blocks: 198.174.212.0/23 maxlen: 24 198.174.214.0/23 maxlen: 24 204.221.17.0/24 maxlen: 24 204.221.18.0/23 maxlen: 24 204.221.144.0/22 maxlen: 24 206.9.80.0/24 maxlen: 24 206.145.178.0/23 maxlen: 24 206.145.224.0/23 maxlen: 24 206.146.48.0/22 maxlen: 24 209.32.64.0/21 maxlen: 24 209.32.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:a8:c4:b2:af:d9:ac:1b:6b:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=4b72ae70-bef3-4686-8ceb-255e9dae2ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c1:d4:15:8a:df:44:62:4c:7a:69:f5:b7:e2: 4d:50:14:f0:38:61:63:bd:74:ae:15:17:41:26:a4: 63:97:ac:fb:36:05:d7:fc:b3:34:83:22:61:00:38: 87:75:e9:d9:9b:ad:06:14:97:bc:f2:18:6a:09:60: 5c:b9:f1:e9:df:04:e5:3a:3b:10:3c:38:a5:92:f2: 49:b1:f5:9a:0f:b7:d7:92:4e:41:8b:39:7e:dc:15: f5:78:7d:1b:89:b3:13:37:57:e5:d0:94:21:32:82: 4a:7b:5c:0e:c5:62:6e:0d:1a:4e:e1:5b:77:47:a4: f1:a1:f2:59:b1:f1:75:8c:e3:76:8a:0d:b8:d3:1f: f7:d0:86:28:fe:7a:e9:bb:42:4c:3d:85:2e:1f:43: d3:a6:3b:d9:61:6d:b4:0c:8b:4f:41:7e:c4:4a:2c: ae:72:bf:3e:4c:07:bf:9a:8b:0a:c4:97:a2:ca:a1: 21:f8:2e:6a:fd:88:77:41:10:95:30:3f:19:7a:07: 14:b2:ce:0c:57:7d:e9:be:5b:94:51:cb:da:70:41: 05:0a:96:96:2f:c0:df:a5:09:78:38:aa:de:7b:61: 34:a3:ed:62:ad:7c:6b:c0:b4:ad:df:07:c2:33:ac: 1a:4b:57:50:c2:79:b1:ac:63:4e:03:eb:13:e0:e3: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:52:D5:8B:08:1D:00:13:62:76:F9:40:40:F1:7D:9A:A6:8B:FD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv4: 198.174.212.0/22 204.221.17.0-204.221.19.255 204.221.144.0/22 206.9.80.0/24 206.145.178.0/23 206.145.224.0/23 206.146.48.0/22 209.32.64.0/21 209.32.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d4:10:da:1b:cd:ba:7a:67:d6:61:a9:5f:26:1f:6a:cf:8b: 51:b3:8f:ac:b3:f7:9c:b1:05:26:64:68:6d:44:c0:1a:68:6b: f5:0c:cf:b6:57:e1:b8:7d:0c:06:19:98:e8:a9:9e:81:d8:cc: 6e:7b:cc:4a:8f:bd:6c:50:d2:de:86:0f:50:42:b9:cb:14:46: c0:19:e3:ba:40:b6:83:b3:fb:04:69:98:d4:24:95:28:18:40: 71:74:50:96:99:fb:a3:4e:4f:89:60:7f:0c:41:7a:c8:ff:7d: a3:6a:be:d2:90:cf:ac:6d:18:c7:8f:9f:79:c2:9e:f3:e4:b8: ae:3e:6c:77:42:4d:96:11:0c:2f:a4:94:6c:2b:5a:3c:02:bc: 6f:d1:d7:a2:95:aa:90:1e:83:91:89:d5:bd:50:0a:5e:5c:a8: ee:f3:5d:9d:ac:51:14:71:53:61:ac:98:6b:ad:9a:9c:88:53: 36:b8:e7:0c:5b:fa:ab:0c:0f:ab:eb:04:ff:06:a7:6e:22:38: 5e:c9:8c:03:4a:45:d2:a0:4e:86:a3:fa:f6:6e:3c:63:26:1f: 4d:96:68:27:d9:f3:68:4e:32:0a:f7:4a:71:19:f7:8b:5d:27: eb:54:77:bd:da:51:46:8c:33:23:d2:2a:c0:04:d3:88:c3:e0: 51:e7:21:63 -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWEv44KjEsq/ZrBtrPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk NGI3MmFlNzAtYmVmMy00Njg2LThjZWItMjU1ZTlkYWUyZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8HUFYrfRGJMemn1t+JNUBTwOGFjvXSuFRdB JqRjl6z7NgXX/LM0gyJhADiHdenZm60GFJe88hhqCWBcufHp3wTlOjsQPDilkvJJ sfWaD7fXkk5Bizl+3BX1eH0bibMTN1fl0JQhMoJKe1wOxWJuDRpO4Vt3R6TxofJZ sfF1jON2ig240x/30IYo/nrpu0JMPYUuH0PTpjvZYW20DItPQX7ESiyucr8+TAe/ mosKxJeiyqEh+C5q/Yh3QRCVMD8ZegcUss4MV33pvluUUcvacEEFCpaWL8DfpQl4 OKree2E0o+1irXxrwLSt3wfCM6waS1dQwnmxrGNOA+sT4OMJYQIDAQABo4IDjTCC A4kwHQYDVR0OBBYEFNpS1YsIHQATYnb5QEDxfZqmi/1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvYjAwOTU4OWQtYzJhZS0z ZTdjLWFlNjItMGRiNTA0MGY5M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCxq7UMAwD BADM3REDBALM3RADBALM3ZADBADOCVADBAHOkbIDBAHOkeADBALOkjADBAPRIEAD BAPRIHAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEACNQQ2hvNunpn1mGpXyYfas+LUbOPrLP3nLEFJmRobUTA Gmhr9QzPtlfhuH0MBhmY6KmegdjMbnvMSo+9bFDS3oYPUEK5yxRGwBnjukC2g7P7 BGmY1CSVKBhAcXRQlpn7o05PiWB/DEF6yP99o2q+0pDPrG0Yx4+fecKe8+S4rj5s d0JNlhEML6SUbCtaPAK8b9HXopWqkB6DkYnVvVAKXlyo7vNdnaxRFHFTYayYa62a nIhTNrjnDFv6qwwPq+sE/wanbiI4XsmMA0pF0qBOhqP69m48YyYfTZZoJ9nzaE4y CvdKcRn3i10n61R3vdpRRowzI9IqwATTiMPgUechYw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:46 2025 by rpki-client