This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa File: dca748a7-33a1-3825-aba7-e83549aaa4f0.roa (raw, json) Hash identifier: I8ROHAGGe1vtahwZlyBGd2UHqgS/r7tp1aVK1hYK0pk= Subject key identifier: F8:45:6A:9C:12:C6:31:38:E4:53:EB:56:3F:CA:8C:8C:4C:DA:EA:32 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584C29BB8E170317F4C9998F1000 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 271 IP address blocks: 209.87.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:8e:17:03:17:f4:c9:99:8f:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=121d25bc-6771-4cde-88fd-774f33d92273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:30:d1:74:2f:cd:36:0b:fb:9e:b4:5d:00:33: 88:5f:19:2b:4c:69:8c:94:69:f5:2b:db:24:9d:75: d5:a5:32:12:cf:8d:d7:c1:c1:60:e6:14:6c:0c:bf: dd:97:cf:33:ff:47:f2:61:28:fe:24:48:eb:1b:4a: c4:39:23:df:34:2a:09:7f:21:5f:10:d9:e6:29:ca: 6c:7a:22:6d:f1:1c:cb:9b:ac:4b:82:48:ae:7a:fe: 8a:5f:ff:91:f9:54:08:3a:f3:c9:45:da:c5:ac:a7: 60:8d:68:64:3a:2c:a3:41:c6:14:52:77:51:91:63: b5:a6:db:e9:49:f1:12:82:4a:23:64:70:35:f3:70: 83:6b:9f:f1:12:13:61:7f:1d:57:88:0c:ea:e0:da: 55:17:bd:3a:14:fd:b9:64:33:4d:53:c5:eb:9f:02: 79:29:1f:19:2c:a0:89:56:c4:4e:22:11:91:e8:e2: 66:48:9b:8d:09:55:8e:5e:91:66:c4:8a:c4:96:d4: ef:58:5b:b5:05:90:e9:e5:31:7c:a7:47:dd:20:8a: af:57:33:d1:fb:8e:b0:7e:57:83:8f:05:cf:9a:80: 30:31:32:8f:23:d3:3d:6d:8f:e7:cd:ed:eb:4c:bf: 04:34:25:02:df:5f:a1:cd:0e:6a:5c:82:60:81:95: 95:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:45:6A:9C:12:C6:31:38:E4:53:EB:56:3F:CA:8C:8C:4C:DA:EA:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:50:11:c3:59:68:09:9c:d9:96:94:d6:36:d4:ac:51:5c:76: c0:09:e0:b6:25:0c:e1:bc:f6:8e:ec:3f:fc:1b:76:bd:22:a6: 71:a7:00:e7:87:79:5a:37:73:f4:0b:e2:d8:5b:b1:f9:ae:50: 0b:bc:a9:5a:42:5f:0e:61:0e:39:43:6e:81:27:26:19:e2:34: 34:50:8c:38:6a:b0:04:a3:b9:8b:c7:0a:92:87:a2:dd:07:27: 0d:17:43:6b:b3:34:f9:9a:5e:c7:ad:7c:4d:dd:79:b5:08:8a: 3d:19:ab:6e:7b:98:fe:ec:da:28:0d:c4:e9:80:e3:f1:ce:80: 68:63:69:82:5a:34:4b:f1:f8:c3:32:34:77:df:09:45:d0:ce: 9e:c8:85:5c:59:bb:d4:c4:c6:7c:72:46:01:41:ac:da:34:98: b0:77:7a:3b:18:e0:cb:22:80:66:9c:1b:76:f4:af:d7:ba:5a: 37:af:12:65:cf:4a:c6:82:98:e5:46:cf:f9:87:24:1c:99:e9: 2d:94:e5:40:1d:85:82:c2:ef:af:f9:a9:03:0c:bd:5a:02:08: 74:4e:b8:58:a7:92:40:4b:5c:90:c7:88:af:8b:4e:cb:20:6f: 2d:26:cc:5f:58:18:27:e2:b5:41:77:b9:9d:46:c7:17:ef:c0: 3d:85:48:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwpu44XAxf0yZmPEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk MTIxZDI1YmMtNjc3MS00Y2RlLTg4ZmQtNzc0ZjMzZDkyMjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTDRdC/NNgv7nrRdADOIXxkrTGmMlGn1K9sk nXXVpTISz43XwcFg5hRsDL/dl88z/0fyYSj+JEjrG0rEOSPfNCoJfyFfENnmKcps eiJt8RzLm6xLgkiuev6KX/+R+VQIOvPJRdrFrKdgjWhkOiyjQcYUUndRkWO1ptvp SfESgkojZHA183CDa5/xEhNhfx1XiAzq4NpVF706FP25ZDNNU8XrnwJ5KR8ZLKCJ VsROIhGR6OJmSJuNCVWOXpFmxIrEltTvWFu1BZDp5TF8p0fdIIqvVzPR+46wfleD jwXPmoAwMTKPI9M9bY/nze3rTL8ENCUC31+hzQ5qXIJggZWVmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhFapwSxjE45FPrVj/KjIxM2uoyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZGNhNzQ4YTctMzNhMS0z ODI1LWFiYTctZTgzNTQ5YWFhNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VcSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVQEcNZaAmc2ZaU1jbUrFFcdsAJ4LYlDOG89o7sP/wbdr0ipnGnAOeH eVo3c/QL4thbsfmuUAu8qVpCXw5hDjlDboEnJhniNDRQjDhqsASjuYvHCpKHot0H Jw0XQ2uzNPmaXsetfE3debUIij0Zq257mP7s2igNxOmA4/HOgGhjaYJaNEvx+MMy NHffCUXQzp7IhVxZu9TExnxyRgFBrNo0mLB3ejsY4MsigGacG3b0r9e6WjevEmXP SsaCmOVGz/mHJByZ6S2U5UAdhYLC76/5qQMMvVoCCHROuFinkkBLXJDHiK+LTssg by0mzF9YGCfitUF3uZ1GxxfvwD2FSPI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:41:05 2026 by rpki-client