This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa File: 25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa (raw, json) Hash identifier: NBgecR+Uz4sjdCSlNlxbfX9YNAdQSdnfkOAimzCh0HA= Subject key identifier: E5:12:84:8A:E8:D3:C0:94:D5:7B:3D:4F:2A:04:2F:41:A1:34:B1:A6 Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F4328584C5EC69312D79FA00180694880 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 1239 IP address blocks: 208.94.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:93:12:d7:9f:a0:01:80:69:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=ecb28a2a-39f9-472e-bff2-08b7586f366a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a1:9f:10:27:0d:c3:22:d5:46:bc:1e:b7:2f: dc:e8:4d:57:e5:b4:16:c1:d1:44:df:97:38:1f:b9: b0:89:40:49:50:d6:48:2b:2a:73:aa:ba:c5:5a:fc: ec:52:9f:7a:31:96:dd:55:cb:f8:89:d5:d1:c2:7a: 9d:a3:13:61:7d:7b:43:e8:8b:26:00:ce:9d:24:0f: 42:55:d2:41:2e:54:b0:ca:51:1d:7d:ee:73:76:18: b0:19:ce:cd:db:ff:de:2a:3e:02:a8:cc:31:d5:49: ca:ff:f3:20:cc:16:87:17:67:ba:86:05:75:32:3e: b5:b3:a8:bb:1e:9b:40:f4:e9:ba:ad:be:5b:69:1d: 97:6f:02:d1:53:ee:6d:8b:20:a0:f6:aa:33:82:ad: 8c:da:5b:2f:f0:0c:0e:fc:0a:d6:d8:86:24:fd:09: 6c:c8:4e:7a:02:a5:3f:b0:5e:ad:4b:93:be:8b:c8: 69:2d:8d:ca:c2:2b:97:85:91:54:4e:de:df:66:93: e1:f4:a9:da:79:07:25:81:82:e0:09:bf:9c:b2:ec: a4:18:f0:c8:0c:63:12:61:d5:19:a2:73:c2:7d:71: 4a:81:69:ee:67:0d:01:d5:9b:2b:6f:a0:20:67:8e: 58:b2:e3:b3:54:7c:8b:cc:de:be:ce:c7:d5:5f:3b: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:12:84:8A:E8:D3:C0:94:D5:7B:3D:4F:2A:04:2F:41:A1:34:B1:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 208.94.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:84:6e:47:a0:d5:18:2c:e0:c0:58:27:b2:66:8f:6b:ff:96: 09:7f:9a:00:dc:b2:49:84:5a:3d:8a:c5:8d:02:94:2e:a9:e0: f3:4c:5f:80:9a:59:53:a7:73:cb:5b:dd:25:db:41:2f:ab:28: 8f:c3:0c:1f:1d:68:ff:b1:61:5d:d9:e9:7c:89:0d:95:9f:f7: 20:d7:98:f5:dc:5a:9c:a2:f3:ae:f7:63:fa:74:f2:a3:8a:82: e7:87:17:e2:f6:f2:bf:c2:74:66:ed:63:7a:d6:29:80:2f:7e: b5:86:ca:5f:67:b0:71:d0:68:ef:ef:f3:58:ed:30:ef:e5:60: 31:42:8a:4d:3d:da:b2:41:f6:9e:ee:7b:39:9b:71:85:fe:74: c3:94:78:5d:a9:ba:85:de:04:93:a3:5f:b0:14:72:1e:41:91: d4:81:2e:0a:2f:a7:66:6e:2e:e3:00:7d:14:d6:79:31:7e:54: 2f:93:91:9b:7b:f7:22:0a:ec:28:37:44:82:a6:a8:b5:ed:36: 9a:35:b2:da:db:e7:fb:e1:94:17:ab:55:82:ad:3c:66:2e:b9: b2:cc:0b:97:cf:3f:ce:b8:fd:08:76:85:a3:ce:98:ab:58:19: de:1b:e5:87:67:24:42:13:d7:01:db:3c:2d:c7:ff:5f:97:aa: 81:cf:a9:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexpMS15+gAYBpSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk ZWNiMjhhMmEtMzlmOS00NzJlLWJmZjItMDhiNzU4NmYzNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqGfECcNwyLVRrwety/c6E1X5bQWwdFE35c4 H7mwiUBJUNZIKypzqrrFWvzsUp96MZbdVcv4idXRwnqdoxNhfXtD6IsmAM6dJA9C VdJBLlSwylEdfe5zdhiwGc7N2//eKj4CqMwx1UnK//MgzBaHF2e6hgV1Mj61s6i7 HptA9Om6rb5baR2XbwLRU+5tiyCg9qozgq2M2lsv8AwO/ArW2IYk/QlsyE56AqU/ sF6tS5O+i8hpLY3KwiuXhZFUTt7fZpPh9KnaeQclgYLgCb+csuykGPDIDGMSYdUZ onPCfXFKgWnuZw0B1Zsrb6AgZ45YsuOzVHyLzN6+zsfVXzsHjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUShIro08CU1Xs9TyoEL0GhNLGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvMjVhMDk1YjAtMWE1Ny0z OWI1LTg1ZmYtYzdmYTM0N2ZjMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASEbkeg1Rgs4MBYJ7Jmj2v/lgl/mgDcskmEWj2KxY0ClC6p4PNMX4Ca WVOnc8tb3SXbQS+rKI/DDB8daP+xYV3Z6XyJDZWf9yDXmPXcWpyi8673Y/p08qOK gueHF+L28r/CdGbtY3rWKYAvfrWGyl9nsHHQaO/v81jtMO/lYDFCik092rJB9p7u ezmbcYX+dMOUeF2puoXeBJOjX7AUch5BkdSBLgovp2ZuLuMAfRTWeTF+VC+TkZt7 9yIK7Cg3RIKmqLXtNpo1strb5/vhlBerVYKtPGYuubLMC5fPP864/Qh2haPOmKtY Gd4b5YdnJEIT1wHbPC3H/1+XqoHPqf8= -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:00 2026 by rpki-client