This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/221c5f01-9412-38d6-b4e7-72db492d7460.roa File: 221c5f01-9412-38d6-b4e7-72db492d7460.roa (raw, json) Hash identifier: jNfcYEGcz6YzulDdgj3lz8Qge/m22Qyo6nCcEjMom70= Subject key identifier: 89:B9:28:FA:62:91:78:EF:F2:63:CC:D9:D4:F7:17:D7:FF:B5:11:0E Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584BFD10C5541B1FD13B56ED5380 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/221c5f01-9412-38d6-b4e7-72db492d7460.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 393249 IP address blocks: 209.87.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:c5:54:1b:1f:d1:3b:56:ed:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=37125da1-a09e-435b-8257-2fe1a70fd7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:82:76:fb:2a:34:a5:3d:66:28:84:f3:10:bc: 01:58:be:18:b3:b2:09:53:bf:6e:e8:8b:8c:65:53: 92:74:e4:8c:c4:c2:c4:df:b4:89:ee:9e:38:4c:de: 22:02:1f:53:23:a9:3d:aa:e5:85:8c:c5:e7:82:ac: 5e:dc:a7:09:89:1b:ae:64:b0:1f:1b:d3:d9:dc:1a: 3d:d3:0f:2a:46:5b:2c:eb:b1:db:aa:20:1e:d1:c1: 77:80:77:7b:65:11:b6:ee:d6:70:6b:8f:e8:a5:48: 32:d0:39:83:41:7e:2c:ed:43:1c:5e:00:ca:bf:70: 39:d9:b8:eb:83:1d:1d:96:25:a4:4f:9a:d8:a0:76: 29:5f:23:0c:92:52:32:c8:95:58:9b:ff:0a:c3:b0: 1c:4b:66:b2:51:86:fa:77:f5:0f:2c:83:6a:28:06: c0:74:be:e3:36:4a:0e:47:b2:89:2d:b8:3f:1b:be: 4f:af:5c:e1:76:71:3b:60:f1:9d:70:44:67:5b:92: 75:e6:83:01:f5:f2:fc:39:09:32:a2:45:3d:d9:0b: e6:3f:56:ad:86:33:16:5c:42:99:64:f3:bb:51:9a: 4a:62:9e:c0:c4:6c:5e:cb:cc:fb:a4:fc:9c:61:05: f7:3e:52:00:75:68:e8:71:44:74:b3:8c:6a:74:f4: 9c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B9:28:FA:62:91:78:EF:F2:63:CC:D9:D4:F7:17:D7:FF:B5:11:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/221c5f01-9412-38d6-b4e7-72db492d7460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c0:b1:34:57:b6:1b:a8:1f:7b:96:87:6f:47:0c:82:32:19: 42:2b:cb:a4:8b:3d:ae:41:5e:1e:c8:15:e4:df:0c:f8:a9:f9: 8a:9b:40:c9:fa:ef:cd:a6:4b:65:b3:cd:65:c5:05:54:c3:f2: 11:ed:0d:3c:10:e4:43:eb:2f:82:26:ff:09:62:81:07:c3:5e: d0:2b:77:da:62:a4:75:ca:e8:2a:e8:c8:54:27:04:86:6d:7d: 2e:96:b0:78:28:dc:28:8b:47:9d:01:89:ae:5e:6a:f4:58:d0: 4f:bd:38:cc:ef:ae:0b:36:e3:36:ee:f6:28:c2:3f:24:8a:f8: 7d:e0:47:b4:d2:96:27:90:80:4f:bc:36:45:43:41:c6:25:13: d0:6b:ba:86:e8:42:8a:f8:1c:21:40:96:47:df:35:72:6d:aa: 65:38:4d:32:d9:57:55:5f:7e:3b:c3:7d:5b:a4:05:64:d9:32: 3c:05:16:a7:e8:98:db:a4:56:ba:4a:0c:8b:8d:5c:34:95:43: aa:ff:05:ae:e0:28:1b:0c:80:74:5b:71:3d:66:a0:9e:f4:33: fb:72:f0:08:ae:1b:9e:0c:27:1d:77:85:70:cf:fb:3e:73:d4: 65:83:86:5b:f5:b7:cd:1b:6d:20:c9:3c:4f:2c:bd:bc:df:8a: 36:77:23:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EMVUGx/RO1btU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk MzcxMjVkYTEtYTA5ZS00MzViLTgyNTctMmZlMWE3MGZkN2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4J2+yo0pT1mKITzELwBWL4Ys7IJU79u6IuM ZVOSdOSMxMLE37SJ7p44TN4iAh9TI6k9quWFjMXngqxe3KcJiRuuZLAfG9PZ3Bo9 0w8qRlss67HbqiAe0cF3gHd7ZRG27tZwa4/opUgy0DmDQX4s7UMcXgDKv3A52bjr gx0dliWkT5rYoHYpXyMMklIyyJVYm/8Kw7AcS2ayUYb6d/UPLINqKAbAdL7jNkoO R7KJLbg/G75Pr1zhdnE7YPGdcERnW5J15oMB9fL8OQkyokU92QvmP1athjMWXEKZ ZPO7UZpKYp7AxGxey8z7pPycYQX3PlIAdWjocUR0s4xqdPScyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm5KPpikXjv8mPM2dT3F9f/tREOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMjIxYzVmMDEtOTQxMi0z OGQ2LWI0ZTctNzJkYjQ5MmQ3NDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXAsTRXthuoH3uWh29HDIIyGUIry6SLPa5BXh7IFeTfDPip+YqbQMn6 782mS2WzzWXFBVTD8hHtDTwQ5EPrL4Im/wligQfDXtArd9pipHXK6CroyFQnBIZt fS6WsHgo3CiLR50Bia5eavRY0E+9OMzvrgs24zbu9ijCPySK+H3gR7TSlieQgE+8 NkVDQcYlE9BruoboQor4HCFAlkffNXJtqmU4TTLZV1VffjvDfVukBWTZMjwFFqfo mNukVrpKDIuNXDSVQ6r/Ba7gKBsMgHRbcT1moJ70M/ty8AiuG54MJx13hXDP+z5z 1GWDhlv1t80bbSDJPE8svbzfijZ3I0w= -----END CERTIFICATE-----Generated at Sat Dec 6 19:03:30 2025 by rpki-client