This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa File: 9814d97b-c411-3c0f-aac7-5659a975f78a.roa (raw, json) Hash identifier: mvSc0WhuZeoNiSfEbfnDRgyfbvSrrD0PNUxQoQuM3yU= Subject key identifier: 61:65:2E:46:E5:3D:66:AF:82:BA:47:2D:85:12:05:02:B5:D2:6A:61 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584C487131E4C2784D73F4B424A8 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 33322 IP address blocks: 208.71.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:31:e4:c2:78:4d:73:f4:b4:24:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=8599d67d-0ce1-47d0-9991-7c83d45c10f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3a:e0:37:2b:00:c0:0e:ee:7f:4d:ec:97:5e: dd:7f:07:61:22:44:8a:8d:c4:76:e4:36:72:c9:ce: b4:b7:36:43:cb:67:32:00:75:08:4b:f5:e5:85:ac: 6d:ef:69:83:3b:ea:b1:3a:b9:f0:f2:95:d1:58:e2: 69:cf:21:dc:eb:77:05:d7:f1:16:e5:54:a9:39:15: 5f:27:22:31:2d:cf:bc:37:90:03:47:7f:ea:df:74: c3:af:44:b0:2c:1b:52:8c:8d:df:67:73:72:c2:fe: 75:77:c7:b4:9d:1d:62:e6:2d:49:c5:fd:24:8e:01: 6f:1a:76:77:60:01:f7:46:d5:6e:37:21:db:79:63: 8a:9d:63:a3:d0:7e:4d:33:bb:ac:77:99:94:f0:0e: de:2b:63:c9:f4:a6:e2:6f:50:5c:ad:a4:d1:2f:95: 49:53:84:98:8f:29:bd:20:b7:1e:88:fb:2c:68:75: dd:fb:1d:b4:45:21:1d:99:72:aa:a3:70:88:99:a0: 4b:24:78:41:2d:ff:60:10:f7:31:f7:93:74:89:08: d0:d3:29:99:52:10:49:33:0c:ce:03:fc:e0:30:65: 50:d9:fc:e1:ab:e8:af:10:29:b9:99:98:a5:c7:76: 00:77:c8:9d:3a:e8:bb:ce:de:d9:43:4d:5d:5d:36: ce:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:65:2E:46:E5:3D:66:AF:82:BA:47:2D:85:12:05:02:B5:D2:6A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 208.71.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:16:e5:79:5d:96:a7:ef:09:10:83:98:f7:b4:a8:a2:3e:d1: 89:06:48:de:5e:4f:3f:87:75:f9:f3:ca:72:74:32:52:c1:46: 0a:d4:ff:30:f3:f8:82:67:d4:2f:62:9f:ab:41:51:15:2d:70: 9f:dd:3d:cf:89:87:9d:e6:89:16:da:fb:3a:6f:7d:5f:29:76: a8:2d:f2:0b:ee:46:b5:78:02:b1:42:31:dd:58:ea:7d:e2:c1: 51:46:88:f1:58:13:b7:32:e6:f5:b4:07:d3:8c:93:15:75:6b: 8e:cf:13:cc:1f:f9:7b:08:3b:06:32:07:d3:21:5b:6d:f1:d2: 71:31:78:13:3e:7a:b5:97:f7:17:94:49:75:9b:35:e2:70:74: 74:11:09:80:61:44:29:c3:d7:7f:af:72:41:55:8c:9a:20:01: 87:30:dd:f2:dc:e5:5d:a5:53:c8:58:d9:87:bb:da:ec:e9:88: e1:9b:e0:a7:cb:e9:2b:b1:9e:b7:d2:e5:4b:6e:01:3d:4e:d9: 6d:f8:92:b3:75:ee:e0:25:d6:06:05:db:02:12:d1:e5:19:fb: 8d:b5:49:44:2f:eb:74:7e:20:0b:c3:b7:fd:b2:6d:94:62:2a: eb:b5:8a:1c:a6:63:1a:5c:fe:fb:ed:13:85:06:ab:4e:e4:16: c5:a8:7d:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcTHkwnhNc/S0JKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk ODU5OWQ2N2QtMGNlMS00N2QwLTk5OTEtN2M4M2Q0NWMxMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTrgNysAwA7uf03sl17dfwdhIkSKjcR25DZy yc60tzZDy2cyAHUIS/Xlhaxt72mDO+qxOrnw8pXRWOJpzyHc63cF1/EW5VSpORVf JyIxLc+8N5ADR3/q33TDr0SwLBtSjI3fZ3Nywv51d8e0nR1i5i1Jxf0kjgFvGnZ3 YAH3RtVuNyHbeWOKnWOj0H5NM7usd5mU8A7eK2PJ9Kbib1BcraTRL5VJU4SYjym9 ILceiPssaHXd+x20RSEdmXKqo3CImaBLJHhBLf9gEPcx95N0iQjQ0ymZUhBJMwzO A/zgMGVQ2fzhq+ivECm5mZilx3YAd8idOui7zt7ZQ01dXTbOBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFlLkblPWavgrpHLYUSBQK10mphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvOTgxNGQ5N2ItYzQxMS0z YzBmLWFhYzctNTY1OWE5NzVmNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcW5XldlqfvCRCDmPe0qKI+0YkGSN5eTz+HdfnzynJ0MlLBRgrU/zDz +IJn1C9in6tBURUtcJ/dPc+Jh53miRba+zpvfV8pdqgt8gvuRrV4ArFCMd1Y6n3i wVFGiPFYE7cy5vW0B9OMkxV1a47PE8wf+XsIOwYyB9MhW23x0nExeBM+erWX9xeU SXWbNeJwdHQRCYBhRCnD13+vckFVjJogAYcw3fLc5V2lU8hY2Ye72uzpiOGb4KfL 6SuxnrfS5UtuAT1O2W34krN17uAl1gYF2wIS0eUZ+421SUQv63R+IAvDt/2ybZRi Kuu1ihymYxpc/vvtE4UGq07kFsWofQQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:13:23 2026 by rpki-client