This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/ffdaae2c-6641-3649-a249-97918224c1cd.roa File: ffdaae2c-6641-3649-a249-97918224c1cd.roa (raw, json) Hash identifier: vHHRo6ZbDU9o4U0ga8HZWxbfb6eiu/U9sPsB603f7hw= Subject key identifier: 40:C4:3A:DA:1B:1B:28:87:04:F1:26:DB:32:29:28:67:BD:A8:1B:A0 Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584BD1CAF65C6D46561535B3FD80 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/ffdaae2c-6641-3649-a249-97918224c1cd.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 13213 IP address blocks: 209.236.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:ca:f6:5c:6d:46:56:15:35:b3:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=36dcea18-ad2b-4b39-bda8-1df148a0f3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:69:21:49:e9:36:00:3a:3d:52:e8:c9:78:0a: 03:a8:83:c0:34:53:7d:d3:c1:69:e4:21:39:91:66: f3:2a:4c:2f:61:29:b7:f3:0f:36:71:5a:fc:0e:0e: 02:73:16:64:f3:63:67:76:67:7f:30:8b:c9:af:e3: 10:77:d7:88:74:3d:8d:06:ef:89:f7:e9:16:f8:e1: e8:a3:d9:db:e2:92:75:23:04:76:2c:08:f9:f5:4e: 62:00:22:2d:6a:de:5c:79:75:c5:de:09:15:cf:b8: 5e:df:38:0a:a7:00:e4:f4:43:fe:c9:1f:71:57:4b: f7:e2:66:9a:43:e7:dc:7f:32:c5:01:5e:9c:c4:7f: 93:e8:2f:d3:3d:cb:f1:cc:71:bb:ed:ef:54:f4:20: 7f:77:09:b5:da:bb:9f:14:0f:81:5e:b0:ec:c3:85: 65:dd:25:59:8b:b4:d9:3c:e4:7b:dc:2e:2e:af:f5: d6:b8:61:dd:fd:78:19:d4:5b:da:f5:85:8b:46:b0: cb:77:f5:ff:8a:15:a9:9d:c9:e8:94:04:cc:08:a9: a6:74:81:b9:f8:02:af:96:e6:83:89:d5:8f:42:91: 65:4e:83:6f:53:3a:97:cd:36:b6:ba:4b:70:7a:d9: ad:17:f6:b6:3d:a3:d4:3b:b0:20:a3:e1:85:85:00: e5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C4:3A:DA:1B:1B:28:87:04:F1:26:DB:32:29:28:67:BD:A8:1B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/ffdaae2c-6641-3649-a249-97918224c1cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:73:04:c0:59:02:2b:1c:31:ae:b4:f0:14:24:d7:b2:8f:6f: 0f:85:ce:bf:28:59:3b:3b:98:49:08:a5:5c:26:4a:e8:15:21: 12:6f:54:0e:db:89:79:4f:a2:16:88:5b:ab:07:8d:2f:e9:3e: d2:3e:dc:35:45:fc:3e:4f:8f:1c:2d:0d:58:03:91:62:c7:2c: 3a:fa:c5:da:d7:68:ae:51:78:fd:eb:1d:0c:e0:2d:6f:86:7b: 95:44:71:93:3c:b8:f7:45:bb:82:e8:fc:a8:06:4d:3f:0f:ce: 46:aa:32:94:0d:fe:c0:62:ce:1f:1b:4b:49:db:a5:0f:93:bd: 62:de:04:eb:df:a2:b4:9e:0e:18:a0:6a:4f:61:6e:5c:b3:d7: e8:c4:fd:5d:e2:a3:b9:73:a2:e7:1d:6d:c4:01:93:b0:23:17: 60:a1:0c:82:04:e7:c2:5d:6d:7e:ca:a1:c1:cf:bf:2a:57:06: 45:28:63:7e:a6:f4:11:4e:a5:8e:29:75:e4:73:1c:74:24:ea: 35:99:de:98:2b:1d:ee:a5:28:c9:03:10:56:f7:e3:03:c5:d8: ff:35:f9:ff:f3:c4:00:27:b1:bf:9f:5c:25:18:d3:4c:66:18: a0:21:a7:31:4b:58:af:bf:06:46:46:b2:72:77:1c:76:19:4d: 94:a8:ef:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvRyvZcbUZWFTWz/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk MzZkY2VhMTgtYWQyYi00YjM5LWJkYTgtMWRmMTQ4YTBmM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2khSek2ADo9UujJeAoDqIPANFN908Fp5CE5 kWbzKkwvYSm38w82cVr8Dg4CcxZk82Nndmd/MIvJr+MQd9eIdD2NBu+J9+kW+OHo o9nb4pJ1IwR2LAj59U5iACItat5ceXXF3gkVz7he3zgKpwDk9EP+yR9xV0v34maa Q+fcfzLFAV6cxH+T6C/TPcvxzHG77e9U9CB/dwm12rufFA+BXrDsw4Vl3SVZi7TZ POR73C4ur/XWuGHd/XgZ1Fva9YWLRrDLd/X/ihWpncnolATMCKmmdIG5+AKvluaD idWPQpFlToNvUzqXzTa2uktwetmtF/a2PaPUO7Ago+GFhQDl8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDEOtobGyiHBPEm2zIpKGe9qBugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZmZkYWFlMmMtNjY0MS0z NjQ5LWEyNDktOTc5MTgyMjRjMWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0exEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZzBMBZAiscMa608BQk17KPbw+Fzr8oWTs7mEkIpVwmSugVIRJvVA7b iXlPohaIW6sHjS/pPtI+3DVF/D5PjxwtDVgDkWLHLDr6xdrXaK5ReP3rHQzgLW+G e5VEcZM8uPdFu4Lo/KgGTT8PzkaqMpQN/sBizh8bS0nbpQ+TvWLeBOvforSeDhig ak9hblyz1+jE/V3io7lzoucdbcQBk7AjF2ChDIIE58JdbX7KocHPvypXBkUoY36m 9BFOpY4pdeRzHHQk6jWZ3pgrHe6lKMkDEFb34wPF2P81+f/zxAAnsb+fXCUY00xm GKAhpzFLWK+/BkZGsnJ3HHYZTZSo7wQ= -----END CERTIFICATE-----Generated at Sat Dec 6 14:14:56 2025 by rpki-client