This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/04dd376f-375b-32f9-adbf-1111396a27e0.roa File: 04dd376f-375b-32f9-adbf-1111396a27e0.roa (raw, json) Hash identifier: rBG+8TcwoC1Bwu03wUtsA50nTE8WO+IHebY0RWerlGY= Subject key identifier: 3E:E8:BD:38:8E:D8:05:05:CD:F6:BA:52:97:26:89:CA:67:2F:FA:B8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BFFDC0626D68F9E5F66FFA300 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/04dd376f-375b-32f9-adbf-1111396a27e0.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 401783 IP address blocks: 209.101.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:dc:06:26:d6:8f:9e:5f:66:ff:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=3adb73be-515a-4d6c-b403-121522dc3771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d7:67:19:e7:8b:93:03:d4:d1:5d:be:0e:01: 73:41:d1:00:ed:25:25:3c:bc:48:22:da:ec:82:4c: 4a:f5:05:fd:aa:30:5d:82:14:c5:11:3d:5a:8c:1d: 03:5b:0a:f1:34:ca:ce:00:b3:e0:35:a4:fa:6c:e6: cf:fa:16:8a:f4:ed:f0:01:1c:34:1c:bc:0a:d1:b1: 3c:9b:8f:9f:17:a6:2b:40:c7:e4:fa:3b:cc:02:e1: b2:da:8f:22:7f:c7:c9:fc:43:01:4b:9b:76:a7:a3: 0d:68:1d:7d:44:17:13:08:61:b5:6e:35:4a:38:6c: 90:fa:00:b7:32:fd:7c:dc:87:8d:c2:97:b7:9e:23: 98:13:61:46:a1:c1:40:0a:bf:77:8d:26:61:03:fd: 6a:2f:d2:5a:bb:c0:a8:3f:fa:03:99:c2:15:b5:15: 39:42:f3:c0:89:0f:5a:95:e6:57:94:39:8b:44:b8: 20:eb:81:cb:51:34:e4:9f:f2:d7:81:7f:2a:b4:e9: 32:d6:ed:8f:98:8e:df:d8:9d:87:c8:de:bc:63:d2: d1:6c:db:c8:bc:7a:b5:f9:f2:af:4b:a8:93:69:e3: 7b:dd:64:76:5f:bf:a4:e5:f1:8e:70:da:4c:4d:53: ce:f0:86:87:32:78:a0:a6:03:a7:7a:2b:55:31:87: 32:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E8:BD:38:8E:D8:05:05:CD:F6:BA:52:97:26:89:CA:67:2F:FA:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/04dd376f-375b-32f9-adbf-1111396a27e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f5:36:4e:3b:6b:e3:5c:d8:b9:21:cc:d3:42:17:b7:1c:27: 83:41:ca:24:fb:4a:60:dc:14:fa:d5:c3:c0:74:4a:9c:90:1f: 5f:b3:2a:94:f8:83:ef:c7:d2:43:11:d4:70:18:e2:80:9f:bf: 77:b0:b8:59:c2:9c:58:5a:c2:f7:47:ad:6a:da:10:c6:50:b5: 49:b5:e8:69:7d:90:10:e1:08:85:df:b6:c2:6a:8a:1b:db:8d: 6f:39:37:2c:b0:29:72:69:06:a5:c8:ec:7e:d9:f5:22:1d:cd: 3d:d5:83:3a:66:a9:6e:eb:81:54:b1:8f:25:24:aa:61:f9:06: 31:ec:fd:cd:ef:70:ed:c2:35:bd:52:9c:60:7b:22:81:a9:ea: 08:b3:22:41:67:2f:11:bd:e5:f2:39:51:8b:e5:33:7f:02:09: 30:cb:51:d6:99:39:97:66:bb:15:4c:c3:0a:23:c1:dc:07:35: 9e:c2:31:f5:3b:30:e4:3e:3f:af:37:58:4f:92:e5:2e:92:18: c6:6e:c4:79:bf:ff:45:63:03:dd:6a:24:82:fb:b6:30:6d:7b: 26:a0:27:6b:45:4b:ee:40:61:9a:df:da:ee:07:7a:92:5c:e7: f3:e4:50:2f:d9:8d:d5:3e:48:d2:18:ea:d0:5a:6b:eb:31:0c: 93:62:1a:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/3AYm1o+eX2b/owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk M2FkYjczYmUtNTE1YS00ZDZjLWI0MDMtMTIxNTIyZGMzNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9dnGeeLkwPU0V2+DgFzQdEA7SUlPLxIItrs gkxK9QX9qjBdghTFET1ajB0DWwrxNMrOALPgNaT6bObP+haK9O3wARw0HLwK0bE8 m4+fF6YrQMfk+jvMAuGy2o8if8fJ/EMBS5t2p6MNaB19RBcTCGG1bjVKOGyQ+gC3 Mv183IeNwpe3niOYE2FGocFACr93jSZhA/1qL9Jau8CoP/oDmcIVtRU5QvPAiQ9a leZXlDmLRLgg64HLUTTkn/LXgX8qtOky1u2PmI7f2J2HyN68Y9LRbNvIvHq1+fKv S6iTaeN73WR2X7+k5fGOcNpMTVPO8IaHMnigpgOneitVMYcy3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7ovTiO2AUFzfa6UpcmicpnL/q4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMDRkZDM3NmYtMzc1Yi0z MmY5LWFkYmYtMTExMTM5NmEyN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD1Nk47a+Nc2LkhzNNCF7ccJ4NByiT7SmDcFPrVw8B0SpyQH1+zKpT4 g+/H0kMR1HAY4oCfv3ewuFnCnFhawvdHrWraEMZQtUm16Gl9kBDhCIXftsJqihvb jW85NyywKXJpBqXI7H7Z9SIdzT3VgzpmqW7rgVSxjyUkqmH5BjHs/c3vcO3CNb1S nGB7IoGp6gizIkFnLxG95fI5UYvlM38CCTDLUdaZOZdmuxVMwwojwdwHNZ7CMfU7 MOQ+P683WE+S5S6SGMZuxHm//0VjA91qJIL7tjBteyagJ2tFS+5AYZrf2u4HepJc 5/PkUC/ZjdU+SNIY6tBaa+sxDJNiGsg= -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:50 2025 by rpki-client