This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8703fce2-71f2-3ab4-962f-b12e334f9207.roa File: 8703fce2-71f2-3ab4-962f-b12e334f9207.roa (raw, json) Hash identifier: Jae7fYrZiEqxQOQ66fLum8ur0O4mxqqTL6va1JLXhG4= Subject key identifier: BC:FF:05:91:74:E5:2A:3B:06:1E:4C:B7:D2:00:D3:17:39:90:20:40 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BFFDC08C1992D25EC790CA220 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8703fce2-71f2-3ab4-962f-b12e334f9207.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 401783 IP address blocks: 209.101.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:dc:08:c1:99:2d:25:ec:79:0c:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=42ebb704-4134-4c5b-b97e-b364b8b29af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:03:37:fd:78:f0:6b:43:6a:7d:e1:40:b5: 63:19:24:2d:16:d9:b5:9a:5d:15:20:3a:cf:bf:81: 9e:32:6a:48:42:53:4e:9a:55:cd:84:bb:ad:f1:94: d6:6c:95:ad:c5:82:f2:08:97:0b:a7:a3:67:9f:8a: 57:11:b1:59:ad:58:e8:a1:87:92:dc:53:65:9c:30: f0:72:7a:c7:23:3d:83:b7:6d:0b:43:db:66:d1:4e: 0e:6d:33:51:bf:58:64:63:ef:e5:d2:1e:78:cf:94: 48:89:0a:1e:50:99:f5:17:44:90:30:2e:53:07:04: 40:80:97:a1:da:15:4b:16:55:99:53:d6:80:05:ca: 98:7d:60:4b:bc:6f:35:26:b5:b1:13:0f:d4:18:84: 70:28:3f:f6:54:5a:fe:73:18:93:09:c9:af:a1:4d: 00:a2:06:75:02:3c:52:10:92:36:fa:b3:e4:f8:9d: 3b:e8:34:e4:43:58:dc:48:2b:65:36:ff:f5:b0:31: 6a:cd:fe:4b:89:16:ad:14:18:08:cc:50:c7:c5:09: 01:8f:ad:8a:2f:98:4b:bf:86:76:3a:0b:e4:6d:50: 3f:07:1d:0a:4f:57:df:d2:97:60:06:22:56:b3:8c: c0:3c:60:54:6a:18:48:49:62:8d:b8:3c:2a:f9:f0: 78:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FF:05:91:74:E5:2A:3B:06:1E:4C:B7:D2:00:D3:17:39:90:20:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8703fce2-71f2-3ab4-962f-b12e334f9207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:03:6c:5c:37:2c:ee:7f:76:aa:43:39:54:a0:de:a4:6c:a0: 41:d7:2b:14:fc:ae:d2:c7:47:2c:4e:44:63:39:a0:f2:d4:18: 06:37:aa:2a:56:6e:17:37:2c:97:ea:a6:6d:e3:4b:13:f1:d4: 04:2e:a1:c6:be:53:cd:27:ca:c3:c3:5a:ee:ff:17:95:5e:25: fa:07:f2:88:89:b0:40:5a:98:78:a9:ae:7d:c5:52:fb:59:e1: 3f:87:55:52:bc:b7:d9:d1:41:02:54:ab:e2:99:c0:96:a4:b5: 80:20:21:0d:9f:e9:7b:4d:d2:ff:72:45:7a:88:d8:e6:18:6a: 3d:cb:fb:47:cd:60:cb:12:43:b3:79:55:09:c5:b9:fe:e7:9e: 63:98:6e:18:a6:9c:da:c3:1d:0a:02:8e:f0:8d:43:fa:47:7e: d3:af:a3:65:84:5a:a3:08:c3:cd:ed:17:95:14:4b:f9:bd:ca: e5:32:67:3a:5a:1c:3d:01:7e:6d:48:ff:aa:83:39:85:15:e7: 57:83:43:23:83:5e:62:8a:bc:e1:b5:ca:2a:11:c7:61:e6:74: 6d:f9:a9:4e:2a:6a:b6:06:17:c2:28:71:9f:87:8a:d3:46:60: 32:64:48:f0:4b:b4:74:9d:ef:e8:58:be:dd:ef:b9:b8:f4:fa: 9e:30:a7:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/3AjBmS0l7HkMoiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk NDJlYmI3MDQtNDEzNC00YzViLWI5N2UtYjM2NGI4YjI5YWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLcDN/148GtDan3hQLVjGSQtFtm1ml0VIDrP v4GeMmpIQlNOmlXNhLut8ZTWbJWtxYLyCJcLp6Nnn4pXEbFZrVjooYeS3FNlnDDw cnrHIz2Dt20LQ9tm0U4ObTNRv1hkY+/l0h54z5RIiQoeUJn1F0SQMC5TBwRAgJeh 2hVLFlWZU9aABcqYfWBLvG81JrWxEw/UGIRwKD/2VFr+cxiTCcmvoU0AogZ1AjxS EJI2+rPk+J076DTkQ1jcSCtlNv/1sDFqzf5LiRatFBgIzFDHxQkBj62KL5hLv4Z2 OgvkbVA/Bx0KT1ff0pdgBiJWs4zAPGBUahhISWKNuDwq+fB4JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLz/BZF05So7Bh5Mt9IA0xc5kCBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvODcwM2ZjZTItNzFmMi0z YWI0LTk2MmYtYjEyZTMzNGY5MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUDbFw3LO5/dqpDOVSg3qRsoEHXKxT8rtLHRyxORGM5oPLUGAY3qipW bhc3LJfqpm3jSxPx1AQuoca+U80nysPDWu7/F5VeJfoH8oiJsEBamHiprn3FUvtZ 4T+HVVK8t9nRQQJUq+KZwJaktYAgIQ2f6XtN0v9yRXqI2OYYaj3L+0fNYMsSQ7N5 VQnFuf7nnmOYbhimnNrDHQoCjvCNQ/pHftOvo2WEWqMIw83tF5UUS/m9yuUyZzpa HD0Bfm1I/6qDOYUV51eDQyODXmKKvOG1yioRx2HmdG35qU4qarYGF8IocZ+HitNG YDJkSPBLtHSd7+hYvt3vubj0+p4wpxw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:16 2025 by rpki-client