This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c0895b7-5b87-3c4f-aa17-bf07666ce11b.roa File: 8c0895b7-5b87-3c4f-aa17-bf07666ce11b.roa (raw, json) Hash identifier: nZARNYQ4DWKOY1kpklqzDwbzed1xwUfee3aOwdF0BMQ= Subject key identifier: 72:7F:B2:DA:B9:CE:86:93:8C:50:7D:38:E0:38:FE:F0:B4:B5:47:A3 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BFFDC05AAAFAFED541FBB9A00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c0895b7-5b87-3c4f-aa17-bf07666ce11b.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 9304 IP address blocks: 209.101.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:dc:05:aa:af:af:ed:54:1f:bb:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=2ad21a6a-7fd4-4862-8c71-a35b63d9bfd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6a:b3:c0:b4:53:51:b9:99:5e:f7:ae:49:35: 62:4d:d4:91:3e:a6:ed:60:37:ce:18:37:55:42:92: bf:19:0d:1f:ba:78:7b:ac:ed:f5:fa:30:a0:b4:50: 41:42:64:09:d3:9a:f9:d7:d9:1e:b7:b7:0a:7b:e0: 12:91:e6:89:fd:34:26:38:d9:62:d4:4b:ee:1b:95: e7:75:fa:00:e9:1d:28:c7:f7:ca:d6:16:b7:04:4f: b1:17:0b:f2:cc:52:7c:28:a4:ff:38:68:7b:d0:8c: b4:6f:55:6e:a2:cf:23:49:49:42:15:0c:2f:e3:9e: 47:1a:74:67:62:42:b6:ac:35:3f:76:2b:85:c4:c1: 50:86:84:fa:58:17:bc:46:f4:94:09:e8:59:0e:6e: f7:e1:69:db:22:bc:df:27:9c:83:5d:c9:b0:4b:b7: 68:e9:1a:13:50:ce:eb:37:db:d6:51:fd:12:a6:83: 1a:42:8d:1d:17:27:44:4e:21:3e:84:80:fb:84:59: 98:11:96:3f:2a:1b:a6:e7:a8:66:5b:01:ed:8e:70: 57:ca:7d:1c:b8:b0:ad:31:8e:1d:81:4b:39:42:d0: 14:e1:84:57:62:8a:b6:b2:e4:13:46:3c:14:d1:69: e8:16:1e:64:39:63:d9:fe:a4:51:02:6c:24:34:41: 8e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7F:B2:DA:B9:CE:86:93:8C:50:7D:38:E0:38:FE:F0:B4:B5:47:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8c0895b7-5b87-3c4f-aa17-bf07666ce11b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:ff:b2:87:74:f3:eb:b9:97:0b:2a:39:68:f6:90:2b:6d:28: 13:84:53:94:5d:bd:a0:87:e3:0d:eb:55:21:c7:5f:c5:11:82: ec:fb:1d:9a:bd:99:43:f9:e8:54:d5:f2:f9:24:14:4c:b2:3d: 80:37:f0:85:27:aa:ab:ed:5e:85:47:86:30:bb:20:86:e1:fb: 14:89:91:80:0a:bb:c1:a6:a4:8b:f7:c6:82:77:5b:d8:c7:09: c8:38:43:9d:67:8c:ea:82:17:d6:0e:3f:dd:f6:ff:c3:78:89: 6d:ca:d5:96:78:48:4e:c3:7a:40:23:90:72:76:16:95:04:ba: 36:20:cb:e6:3d:19:99:07:89:81:76:6c:88:9e:70:54:f8:9d: 9e:52:a8:e2:14:14:36:4e:c0:6f:0a:a0:7d:0c:7a:9c:69:b6: 0a:a3:95:e1:85:09:9b:bd:9e:2c:02:f8:50:b2:30:3b:7f:69: 46:b6:38:99:5d:d2:ba:8f:3d:85:63:81:59:f0:96:19:64:9d: 6f:d9:a1:1f:70:e1:0e:94:66:82:ca:67:a7:54:09:8d:0f:bb: 6c:7b:ca:61:38:00:15:87:ef:8e:5f:d1:b9:d0:87:64:f0:75: 6c:56:80:f6:04:e1:43:81:72:33:76:8f:6c:3b:62:7e:a4:97: 4d:62:71:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/3AWqr6/tVB+7mgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MmFkMjFhNmEtN2ZkNC00ODYyLThjNzEtYTM1YjYzZDliZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2qzwLRTUbmZXveuSTViTdSRPqbtYDfOGDdV QpK/GQ0funh7rO31+jCgtFBBQmQJ05r519ket7cKe+ASkeaJ/TQmONli1EvuG5Xn dfoA6R0ox/fK1ha3BE+xFwvyzFJ8KKT/OGh70Iy0b1Vuos8jSUlCFQwv455HGnRn YkK2rDU/diuFxMFQhoT6WBe8RvSUCehZDm734WnbIrzfJ5yDXcmwS7do6RoTUM7r N9vWUf0SpoMaQo0dFydETiE+hID7hFmYEZY/Khum56hmWwHtjnBXyn0cuLCtMY4d gUs5QtAU4YRXYoq2suQTRjwU0WnoFh5kOWPZ/qRRAmwkNEGOaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJ/stq5zoaTjFB9OOA4/vC0tUejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGMwODk1YjctNWI4Ny0z YzRmLWFhMTctYmYwNzY2NmNlMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALf/sod08+u5lwsqOWj2kCttKBOEU5RdvaCH4w3rVSHHX8URguz7HZq9 mUP56FTV8vkkFEyyPYA38IUnqqvtXoVHhjC7IIbh+xSJkYAKu8GmpIv3xoJ3W9jH Ccg4Q51njOqCF9YOP932/8N4iW3K1ZZ4SE7DekAjkHJ2FpUEujYgy+Y9GZkHiYF2 bIiecFT4nZ5SqOIUFDZOwG8KoH0MepxptgqjleGFCZu9niwC+FCyMDt/aUa2OJld 0rqPPYVjgVnwlhlknW/ZoR9w4Q6UZoLKZ6dUCY0Pu2x7ymE4ABWH745f0bnQh2Tw dWxWgPYE4UOBcjN2j2w7Yn6kl01icT0= -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:38 2025 by rpki-client