This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa File: 1c405104-ce81-34dd-86ff-db540904d806.roa (raw, json) Hash identifier: Z25pCu24m1mL/33dHalWbKxmmg+9xhZeA0lqJk2G88M= Subject key identifier: 09:B9:9E:8F:87:8A:B4:03:C0:05:C7:19:AE:5F:65:7C:99:D6:7A:6C Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584C50D12BB6897EEB36F7CB2880 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 10397 IP address blocks: 209.209.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:2b:b6:89:7e:eb:36:f7:cb:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=883fef1c-a0b7-4552-a003-544ee587bc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:26:c6:8e:5a:ca:e4:48:35:c1:1e:31:a4:a9: fc:50:cb:59:e8:6b:ae:85:75:50:85:29:f0:3f:35: dc:c3:25:3d:78:f0:76:2a:98:6a:3c:97:bf:02:39: 42:39:e8:25:3d:17:b9:6d:42:46:41:4e:77:94:6f: 50:a6:54:c1:c7:dd:b6:44:72:eb:6c:52:50:0e:9a: a7:a1:c1:76:5d:42:37:08:cb:af:02:c6:51:fd:74: 97:17:ed:07:9d:02:2d:7e:7f:1d:21:32:fc:00:5e: 40:42:ea:09:be:48:93:d8:72:e2:94:4c:ce:67:94: 44:fd:16:1a:27:83:7d:a9:74:8f:78:fb:72:86:ff: 3c:44:a5:3e:e8:34:9f:fd:aa:00:d3:d8:d8:24:1c: 84:9b:41:02:af:9a:82:e5:30:b0:31:80:44:f6:e2: c1:68:e4:33:08:0c:6e:86:45:be:42:69:3c:da:3f: 62:7a:07:fa:8a:f2:78:b1:c3:fb:e8:20:4a:89:3e: 97:05:64:3b:6b:23:d0:b4:26:9b:80:22:7c:dd:0c: 7e:4f:b0:d0:43:dd:41:84:a1:4c:31:a5:d5:99:95: 90:a4:79:41:94:63:3c:71:72:5b:ac:44:03:68:dd: f8:45:89:c4:6c:8c:24:c5:4a:ed:3c:75:81:8a:f2: a9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B9:9E:8F:87:8A:B4:03:C0:05:C7:19:AE:5F:65:7C:99:D6:7A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1c405104-ce81-34dd-86ff-db540904d806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.209.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ff:e2:2c:c4:3d:89:a4:a2:c3:f1:df:38:07:7d:84:81:d9: 0e:12:b1:ef:5f:2a:54:80:6d:51:10:81:65:89:e1:e1:de:47: 09:6e:7f:82:1d:b4:86:6b:e5:77:68:61:02:55:aa:02:ef:eb: 97:c2:b0:cd:fa:81:0e:b8:26:55:ef:18:32:df:6f:f5:68:a6: 37:17:05:bb:06:36:0a:c5:fb:ea:6c:68:8a:4d:27:b4:bc:d8: bb:67:00:e6:ee:56:8c:ba:ef:71:b1:d4:86:a4:bd:f0:3e:c5: 92:87:69:62:31:c7:7c:79:ea:e0:27:ac:77:5c:b5:ca:36:a3: 54:b9:7c:61:67:13:ef:fb:89:63:b7:e5:2a:10:95:05:27:de: 22:73:2c:15:b5:4e:f9:33:d9:d3:65:53:3d:48:2b:fb:4d:8f: 98:87:dc:83:f0:e9:bc:cc:c1:24:a4:9e:82:bb:20:82:34:cd: cb:31:6d:12:3c:9b:eb:6d:16:15:a1:22:a4:3f:50:33:77:61: 42:ed:82:7f:98:2a:2f:75:d8:f0:d9:11:05:36:e5:34:5c:26: 7e:75:ab:c3:8b:27:b5:70:3c:81:84:a3:a7:5a:2d:dc:1c:33: 21:89:ba:e2:39:c0:4b:5c:dc:0c:d4:9b:c8:cf:7a:e0:62:b1: 06:56:93:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0Su2iX7rNvfLKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk ODgzZmVmMWMtYTBiNy00NTUyLWEwMDMtNTQ0ZWU1ODdiYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ibGjlrK5Eg1wR4xpKn8UMtZ6GuuhXVQhSnw PzXcwyU9ePB2KphqPJe/AjlCOeglPRe5bUJGQU53lG9QplTBx922RHLrbFJQDpqn ocF2XUI3CMuvAsZR/XSXF+0HnQItfn8dITL8AF5AQuoJvkiT2HLilEzOZ5RE/RYa J4N9qXSPePtyhv88RKU+6DSf/aoA09jYJByEm0ECr5qC5TCwMYBE9uLBaOQzCAxu hkW+Qmk82j9iegf6ivJ4scP76CBKiT6XBWQ7ayPQtCabgCJ83Qx+T7DQQ91BhKFM MaXVmZWQpHlBlGM8cXJbrEQDaN34RYnEbIwkxUrtPHWBivKpnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm5no+HirQDwAXHGa5fZXyZ1npsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMWM0MDUxMDQtY2U4MS0z NGRkLTg2ZmYtZGI1NDA5MDRkODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn/4izEPYmkosPx3zgHfYSB2Q4Sse9fKlSAbVEQgWWJ4eHeRwluf4Id tIZr5XdoYQJVqgLv65fCsM36gQ64JlXvGDLfb/VopjcXBbsGNgrF++psaIpNJ7S8 2LtnAObuVoy673Gx1IakvfA+xZKHaWIxx3x56uAnrHdctco2o1S5fGFnE+/7iWO3 5SoQlQUn3iJzLBW1Tvkz2dNlUz1IK/tNj5iH3IPw6bzMwSSknoK7III0zcsxbRI8 m+ttFhWhIqQ/UDN3YULtgn+YKi912PDZEQU25TRcJn51q8OLJ7VwPIGEo6daLdwc MyGJuuI5wEtc3AzUm8jPeuBisQZWk3I= -----END CERTIFICATE-----Generated at Sun Jan 25 08:13:56 2026 by rpki-client