This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9cdaae71-7d9a-38b2-8668-be92d54c47c0.roa File: 9cdaae71-7d9a-38b2-8668-be92d54c47c0.roa (raw, json) Hash identifier: Z4QbW39qEw6f4lX5G1Hgd4RVNOEqiLAMken+/Im6z0g= Subject key identifier: 12:5B:0F:07:38:08:9F:F3:8E:BA:FA:E2:14:BF:F5:FA:04:A8:B4:DF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BFFDC05550E92B1150BD98E80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9cdaae71-7d9a-38b2-8668-be92d54c47c0.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 9304 IP address blocks: 209.101.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:dc:05:55:0e:92:b1:15:0b:d9:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=96010c9b-05a4-414f-b57e-004eee4eb542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a3:da:ea:c0:a7:4c:21:7f:e2:24:1c:32:01: b9:6d:91:47:c9:9a:94:01:0f:6f:ff:13:28:29:70: 67:47:9b:8b:fa:aa:57:be:a3:ae:2f:4f:df:50:40: 1f:f8:c7:2b:89:3f:da:84:6d:fd:0e:6a:46:26:8d: b1:91:82:9a:98:3d:e6:82:94:de:cc:13:31:40:ec: 8e:1a:3f:80:aa:9c:1a:33:43:e9:ae:0c:87:6b:50: 90:99:46:27:99:91:a7:7f:4d:a4:c6:bf:1b:d1:45: a7:3e:a1:6c:64:3b:cc:90:53:e2:2c:79:db:15:bd: 98:56:74:e3:1d:63:20:da:28:df:11:ef:b6:ca:e7: 15:b2:4b:fa:31:16:de:3a:57:48:6f:ee:74:cb:a8: b1:a7:4c:4e:8a:8c:b4:52:26:bc:0d:7b:86:8e:99: 8c:84:b2:29:4f:97:5f:6b:4f:a2:00:44:01:c0:d1: 9c:97:94:c1:ee:31:b3:f9:1d:69:67:84:9c:ec:7e: 2e:e1:c1:75:a0:af:5c:1d:95:5e:aa:9f:97:e7:1b: 08:2e:0c:69:48:01:a6:6d:88:66:d7:21:c4:7c:98: bd:82:71:e7:71:c0:4d:79:40:2f:0c:1a:2f:6c:8d: 37:91:60:98:02:a3:af:01:8c:b2:3b:88:22:b9:23: 82:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5B:0F:07:38:08:9F:F3:8E:BA:FA:E2:14:BF:F5:FA:04:A8:B4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9cdaae71-7d9a-38b2-8668-be92d54c47c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f1:75:0f:e6:56:69:2d:db:4c:26:da:0a:08:6c:09:1b:fe: 21:f9:94:b0:f8:58:ea:ee:58:25:72:f2:37:33:ea:66:fa:1d: 20:47:7b:94:8d:19:f3:67:40:10:4c:59:4b:b2:0c:8c:07:2d: d4:c4:e0:b4:e0:e3:09:7b:87:8f:cb:d2:ad:18:3a:68:37:9b: c9:01:ee:2c:53:3e:67:54:ac:af:63:0a:29:58:b5:04:00:c0: ea:98:bb:f4:62:51:c0:53:48:c3:f6:d1:56:2c:20:6a:46:7b: d3:d2:76:fc:7a:ec:46:a6:32:0d:dc:2a:4e:7d:34:3d:18:5e: 7c:61:2b:af:41:ae:b8:bb:56:23:82:8e:14:40:61:98:4b:69: 15:74:66:c7:46:0c:a0:fd:8d:3d:e6:bb:47:29:a6:87:fd:db: 4e:fc:84:06:2a:7f:d1:93:78:51:cb:72:94:9f:d1:28:65:a0: cc:9c:99:73:bc:74:51:0f:4e:50:c9:31:fd:1a:a7:8a:43:ce: 58:f1:02:ca:86:95:f2:59:dd:d6:da:c0:7e:08:00:e1:f3:7e: 1f:43:c3:3d:66:2e:ec:1d:dd:e1:4e:81:47:16:39:33:b9:b4: 32:7e:41:50:33:1d:f6:cd:ab:cd:8f:ed:cd:41:4a:86:a3:5f: a6:e6:ff:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/3AVVDpKxFQvZjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk OTYwMTBjOWItMDVhNC00MTRmLWI1N2UtMDA0ZWVlNGViNTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaPa6sCnTCF/4iQcMgG5bZFHyZqUAQ9v/xMo KXBnR5uL+qpXvqOuL0/fUEAf+McriT/ahG39DmpGJo2xkYKamD3mgpTezBMxQOyO Gj+AqpwaM0PprgyHa1CQmUYnmZGnf02kxr8b0UWnPqFsZDvMkFPiLHnbFb2YVnTj HWMg2ijfEe+2yucVskv6MRbeOldIb+50y6ixp0xOioy0Uia8DXuGjpmMhLIpT5df a0+iAEQBwNGcl5TB7jGz+R1pZ4Sc7H4u4cF1oK9cHZVeqp+X5xsILgxpSAGmbYhm 1yHEfJi9gnHnccBNeUAvDBovbI03kWCYAqOvAYyyO4giuSOCLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJbDwc4CJ/zjrr64hS/9foEqLTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWNkYWFlNzEtN2Q5YS0z OGIyLTg2NjgtYmU5MmQ1NGM0N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvxdQ/mVmkt20wm2goIbAkb/iH5lLD4WOruWCVy8jcz6mb6HSBHe5SN GfNnQBBMWUuyDIwHLdTE4LTg4wl7h4/L0q0YOmg3m8kB7ixTPmdUrK9jCilYtQQA wOqYu/RiUcBTSMP20VYsIGpGe9PSdvx67EamMg3cKk59ND0YXnxhK69Brri7ViOC jhRAYZhLaRV0ZsdGDKD9jT3mu0cppof92078hAYqf9GTeFHLcpSf0ShloMycmXO8 dFEPTlDJMf0ap4pDzljxAsqGlfJZ3dbawH4IAOHzfh9Dwz1mLuwd3eFOgUcWOTO5 tDJ+QVAzHfbNq82P7c1BSoajX6bm//U= -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:36 2025 by rpki-client