This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/9900922b-5c2f-374f-b782-511c12d98afb.roa File: 9900922b-5c2f-374f-b782-511c12d98afb.roa (raw, json) Hash identifier: LNqMmGPODXTjkBD3Fe2lOFhueacr6IDAgNVNXhbFOXw= Subject key identifier: 61:12:36:63:FA:E2:D1:8A:5C:43:A5:E7:61:FC:4B:28:AC:0D:C3:2B Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584BF1E5F2106F4111D0E16DEA00 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/9900922b-5c2f-374f-b782-511c12d98afb.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 14090 IP address blocks: 209.243.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:f2:10:6f:41:11:d0:e1:6d:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=aa38eea5-2ee0-4537-9064-bb22cf8df9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:07:57:46:ff:4e:e1:57:cd:ed:ca:61:39:87: 80:77:4e:b5:23:1e:99:a6:df:37:a2:82:dc:e7:55: 73:67:55:f8:4d:72:ea:f3:d7:fd:43:1f:d9:e4:28: 6c:89:8a:be:d2:49:27:38:0c:01:df:c9:bf:37:1e: 20:1f:0b:24:73:af:85:71:55:59:50:63:fd:22:90: 2b:4a:ac:fa:2b:33:b0:36:b2:bb:4c:b3:46:8c:9f: fc:83:13:fb:a5:7b:5e:49:3c:63:0f:9e:76:b9:55: bd:bd:03:95:f7:c8:20:f8:c5:fd:bc:3b:c7:16:68: 26:12:44:16:fb:b1:16:dc:bf:10:d8:2d:17:d7:e7: 77:62:5f:5d:2a:80:03:7e:b5:86:de:a3:ad:aa:c3: 24:90:db:d9:86:b4:ca:23:b7:b0:3e:38:03:16:64: 32:fb:b6:91:43:29:32:54:22:ef:39:fe:e1:27:80: 98:d4:d9:b1:2e:0e:46:5a:9a:2b:25:93:20:d0:f8: 31:d8:b8:3e:03:04:7c:b7:f4:73:44:cb:31:35:1c: e5:94:67:a7:7b:89:43:06:59:07:cf:d9:0d:cc:6c: b4:f3:d7:56:69:2e:da:8f:e8:e9:26:3f:da:49:68: 59:25:75:aa:ca:29:09:16:b7:87:4f:44:1f:6f:29: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:12:36:63:FA:E2:D1:8A:5C:43:A5:E7:61:FC:4B:28:AC:0D:C3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/9900922b-5c2f-374f-b782-511c12d98afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 209.243.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:1d:d6:9a:a8:0c:af:5c:cb:d2:14:4b:7f:67:e6:15:e2:bc: b0:66:61:1e:89:8d:b6:e3:65:f6:33:da:54:0a:56:7a:c7:7e: 61:63:06:98:16:c1:b1:41:2e:d1:5f:9c:18:82:1a:e4:68:12: d7:19:0f:37:17:09:f1:e7:d4:23:c3:de:ac:3a:09:3d:7e:ca: bf:39:2b:6a:2c:db:64:c5:14:be:d1:8e:75:ec:e9:5b:b4:ee: 3e:ea:4a:e8:74:e9:c4:96:fc:73:7f:92:a2:43:05:2e:5a:59: fd:a7:67:fd:c8:9d:9f:13:b7:96:a4:77:3c:a0:07:0c:98:64: b0:46:15:88:03:84:4c:5b:d8:b9:53:01:91:8a:a7:1f:b0:52: 8c:ae:68:30:66:54:54:03:90:fc:35:59:39:e3:43:08:36:95: 6c:a7:29:c7:f4:88:a3:43:d8:df:96:fe:46:ec:b7:6a:24:4d: e2:25:49:9b:59:ff:d9:67:5f:8b:28:a1:ea:0c:f2:ec:8b:58: 4c:f4:9a:ad:de:c0:d7:a0:e2:28:42:a4:c3:01:1d:f6:59:56: ad:c4:29:02:d1:35:ac:47:01:ec:cb:28:f6:1a:10:df:4a:49: 1b:fc:80:f8:5d:a8:88:bb:08:d8:6e:49:c5:be:04:a5:8b:03: ec:ec:20:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvx5fIQb0ER0OFt6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk YWEzOGVlYTUtMmVlMC00NTM3LTkwNjQtYmIyMmNmOGRmOWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgdXRv9O4VfN7cphOYeAd061Ix6Zpt83ooLc 51VzZ1X4TXLq89f9Qx/Z5ChsiYq+0kknOAwB38m/Nx4gHwskc6+FcVVZUGP9IpAr Sqz6KzOwNrK7TLNGjJ/8gxP7pXteSTxjD552uVW9vQOV98gg+MX9vDvHFmgmEkQW +7EW3L8Q2C0X1+d3Yl9dKoADfrWG3qOtqsMkkNvZhrTKI7ewPjgDFmQy+7aRQyky VCLvOf7hJ4CY1NmxLg5GWporJZMg0Pgx2Lg+AwR8t/RzRMsxNRzllGene4lDBlkH z9kNzGy089dWaS7aj+jpJj/aSWhZJXWqyikJFreHT0QfbynYFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGESNmP64tGKXEOl52H8SyisDcMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvOTkwMDkyMmItNWMyZi0z NzRmLWI3ODItNTExYzEyZDk4YWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0fMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkd1pqoDK9cy9IUS39n5hXivLBmYR6JjbbjZfYz2lQKVnrHfmFjBpgW wbFBLtFfnBiCGuRoEtcZDzcXCfHn1CPD3qw6CT1+yr85K2os22TFFL7RjnXs6Vu0 7j7qSuh06cSW/HN/kqJDBS5aWf2nZ/3InZ8Tt5akdzygBwyYZLBGFYgDhExb2LlT AZGKpx+wUoyuaDBmVFQDkPw1WTnjQwg2lWynKcf0iKND2N+W/kbst2okTeIlSZtZ /9lnX4sooeoM8uyLWEz0mq3ewNeg4ihCpMMBHfZZVq3EKQLRNaxHAezLKPYaEN9K SRv8gPhdqIi7CNhuScW+BKWLA+zsINg= -----END CERTIFICATE-----Generated at Sat Dec 6 15:14:05 2025 by rpki-client