This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9a7de9b5-f4e9-34dc-932e-3f179396b4f4.roa File: 9a7de9b5-f4e9-34dc-932e-3f179396b4f4.roa (raw, json) Hash identifier: yfaNgYFaR989QckO/0XBcUFpwiIrXzJCXnR+ZR4kwUA= Subject key identifier: 16:81:03:76:4C:79:42:74:1B:0D:1B:F6:F4:96:E1:F3:06:AA:F0:BA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C88A6CD16FCD99CB0F824F280 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9a7de9b5-f4e9-34dc-932e-3f179396b4f4.roa Signing time: Thu 15 Jan 2026 14:00:38 +0000 ROA not before: Thu 15 Jan 2026 14:00:38 +0000 ROA not after: Wed 15 Apr 2026 13:00:38 +0000 asID: 9304 IP address blocks: 209.101.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:88:a6:cd:16:fc:d9:9c:b0:f8:24:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 15 14:00:38 2026 GMT Not After : Apr 15 13:00:38 2026 GMT Subject: CN=820b8ddb-00cd-4df1-b7de-335f88bd43eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9e:a9:ef:dd:3e:3f:13:0d:db:18:1f:e8:4e: 68:09:4a:6d:99:8c:77:08:e8:95:a7:08:59:d4:1b: 24:1f:ba:5f:34:40:6b:f0:f0:14:07:84:68:df:45: 47:d6:ec:41:a4:de:c1:8f:f4:70:d6:b8:4e:86:ad: 7c:c7:42:79:ad:15:b3:88:b0:60:59:66:b0:14:98: fe:d5:92:31:df:a6:be:b9:ba:1e:37:9f:c1:3c:bf: 5d:d6:d4:ab:f8:9a:bc:1d:bb:23:53:c4:b4:26:81: e0:62:83:c6:52:2b:ca:53:77:ba:02:3a:69:c5:83: 7d:b9:94:ce:1a:ad:96:0a:6e:a6:d6:7f:4a:7b:8b: 9c:b5:74:7d:4d:e8:f7:6a:19:b7:7e:30:48:e3:2a: cf:e9:0e:c5:0d:91:b0:18:bc:98:68:4c:8b:41:41: ba:cd:a0:61:25:7d:8d:dc:96:fa:cf:cd:72:69:d8: be:56:01:16:6f:08:08:65:e0:1a:49:82:3c:86:4e: 6c:a1:bb:96:03:b1:25:4d:ca:0c:c0:e7:fd:88:5f: 5f:4b:33:a7:b3:fd:d4:db:80:14:2f:36:10:fa:d6: 10:a9:04:dd:b4:bf:2c:24:60:a1:96:83:fe:44:3e: 75:5d:82:5d:89:ae:cd:36:d4:bd:c5:66:b1:31:5e: ef:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:81:03:76:4C:79:42:74:1B:0D:1B:F6:F4:96:E1:F3:06:AA:F0:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9a7de9b5-f4e9-34dc-932e-3f179396b4f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:53:8c:9a:94:c8:e0:a0:f3:32:a0:74:f0:32:d1:4b:31:c2: ce:75:bd:44:b2:e6:81:a0:0a:39:07:93:50:fa:b1:d0:3d:5d: a5:38:c0:9b:b8:44:68:83:0d:19:5e:9e:9a:9a:4f:16:ac:15: 61:9f:b9:ec:da:d8:6a:f1:61:84:ad:55:f6:59:ec:a2:62:f3: 72:d1:48:82:97:08:4c:b8:68:bf:88:91:21:4b:39:a6:5d:88: f5:e9:86:12:87:a2:e0:fa:ec:ae:ce:8a:1d:73:9d:09:a8:54: a0:d6:e3:ae:28:3c:fa:07:a1:9f:12:15:71:2e:42:50:51:26: e8:0a:c9:cf:ea:f0:a2:d7:d9:7c:8e:8f:6a:53:17:a8:9e:ea: a4:93:a6:eb:71:43:85:88:57:02:e5:b7:50:35:11:f5:e8:1f: 0f:2a:eb:2b:bd:bd:54:bb:08:b2:63:ed:bb:3e:06:53:44:a0: 6c:67:4b:b7:6b:0a:85:8b:ba:43:2f:3b:ee:8f:1e:1d:5a:95: 0d:9a:a5:cd:45:1a:48:ba:d6:e6:46:eb:3f:c3:58:37:e9:ac: f5:2b:48:b7:0c:e3:95:5b:97:88:fd:6a:8e:e0:16:33:a5:65: bb:4d:f6:32:4e:dc:29:86:bb:aa:71:45:ad:f1:83:22:12:77: 9b:1d:36:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyIps0W/NmcsPgk8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDExNTE0MDAzOFoXDTI2MDQxNTEzMDAzOFowLzEtMCsGA1UEAxMk ODIwYjhkZGItMDBjZC00ZGYxLWI3ZGUtMzM1Zjg4YmQ0M2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw56p790+PxMN2xgf6E5oCUptmYx3COiVpwhZ 1BskH7pfNEBr8PAUB4Ro30VH1uxBpN7Bj/Rw1rhOhq18x0J5rRWziLBgWWawFJj+ 1ZIx36a+uboeN5/BPL9d1tSr+Jq8HbsjU8S0JoHgYoPGUivKU3e6AjppxYN9uZTO Gq2WCm6m1n9Ke4uctXR9Tej3ahm3fjBI4yrP6Q7FDZGwGLyYaEyLQUG6zaBhJX2N 3Jb6z81yadi+VgEWbwgIZeAaSYI8hk5sobuWA7ElTcoMwOf9iF9fSzOns/3U24AU LzYQ+tYQqQTdtL8sJGChloP+RD51XYJdia7NNtS9xWaxMV7vxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaBA3ZMeUJ0Gw0b9vSW4fMGqvC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWE3ZGU5YjUtZjRlOS0z NGRjLTkzMmUtM2YxNzkzOTZiNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABTjJqUyOCg8zKgdPAy0Usxws51vUSy5oGgCjkHk1D6sdA9XaU4wJu4 RGiDDRlenpqaTxasFWGfueza2GrxYYStVfZZ7KJi83LRSIKXCEy4aL+IkSFLOaZd iPXphhKHouD67K7Oih1znQmoVKDW464oPPoHoZ8SFXEuQlBRJugKyc/q8KLX2XyO j2pTF6ie6qSTputxQ4WIVwLlt1A1EfXoHw8q6yu9vVS7CLJj7bs+BlNEoGxnS7dr CoWLukMvO+6PHh1alQ2apc1FGki61uZG6z/DWDfprPUrSLcM45Vbl4j9ao7gFjOl ZbtN9jJO3CmGu6pxRa3xgyISd5sdNlo= -----END CERTIFICATE-----Generated at Sun Jan 25 09:17:53 2026 by rpki-client