This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9e9e968f-f8f2-3d1e-8bf5-91f4b899c553.roa File: 9e9e968f-f8f2-3d1e-8bf5-91f4b899c553.roa (raw, json) Hash identifier: Ju39clDX/OdksaTeDVFeVh9NyJYP+sevlaAWtwxPAH4= Subject key identifier: 37:C8:A4:A6:1E:7E:DB:A9:8C:05:32:2C:56:08:11:8D:E5:56:23:37 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BFFDC08D8EF05F1D4041B5000 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9e9e968f-f8f2-3d1e-8bf5-91f4b899c553.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 401783 IP address blocks: 209.101.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:dc:08:d8:ef:05:f1:d4:04:1b:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=7f8c622e-cc27-458a-87a5-0a791960b0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:23:b6:8a:10:6e:69:4f:d6:cb:3d:fe:2e:0d: 6f:32:7a:09:3f:fd:9a:ed:99:1f:a6:f1:53:23:73: 26:85:d8:62:ba:f5:5d:90:02:3a:76:62:03:8c:4a: e1:30:ef:31:0f:2a:c5:9b:5f:1f:65:61:5e:41:fb: 5a:48:70:9c:68:52:28:2c:44:bd:44:3a:5c:7e:3a: 7e:35:f3:47:e9:2f:4f:c6:44:f3:45:bc:53:cb:c7: 7b:9a:3a:33:bd:43:1c:ff:d4:d3:04:68:7c:d2:e2: 1e:07:c5:50:e5:60:72:a9:3a:af:cf:85:2e:61:e6: 48:28:6d:b1:bb:21:58:44:b9:d0:15:59:b4:8f:17: be:54:a4:91:51:ff:59:7e:de:c6:8d:bf:30:57:cc: 34:8b:72:cf:8f:d5:7e:af:4d:85:bb:8f:b9:3b:cf: ea:5a:d4:d2:d3:34:69:af:85:90:75:50:72:95:bd: f0:c1:89:80:65:17:60:b4:35:0b:e6:b1:58:5e:43: e4:83:d2:da:69:1b:0e:e0:e2:cb:92:52:9b:4c:0d: d0:90:44:d8:ac:ef:68:60:62:2b:27:94:9d:32:d1: 5a:15:73:7d:01:6d:e1:90:9a:7a:89:13:6b:cc:80: e7:3a:19:6b:91:1c:64:34:c3:65:ab:ee:ec:ff:17: a2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C8:A4:A6:1E:7E:DB:A9:8C:05:32:2C:56:08:11:8D:E5:56:23:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/9e9e968f-f8f2-3d1e-8bf5-91f4b899c553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:39:71:1a:30:d7:f1:e7:e8:af:76:5d:5c:7b:3a:89:e2:cd: f5:c1:51:f8:ea:c1:48:2f:68:64:c4:87:f2:70:5d:b6:e3:11: 65:9c:85:7d:e9:38:24:50:c6:c4:ae:45:f1:04:b9:18:90:16: 1d:e8:e2:56:b2:f8:e3:2b:44:c1:c7:a7:01:d1:56:d6:ec:4c: 8b:c8:82:5d:b3:47:0d:09:bc:94:a2:18:10:3a:8d:dd:90:ce: b8:52:71:00:3f:23:c3:10:68:3b:f2:f4:c2:98:6a:c5:b7:20: 29:ab:75:cb:dc:86:72:c6:74:5a:77:00:86:9d:19:47:52:26: 31:af:ef:d4:ab:e5:f4:9d:3f:72:1f:44:16:e6:7e:42:c9:47: b4:35:ad:f8:8a:4f:a6:9e:81:81:18:6f:2e:d6:f1:aa:0c:a7: ce:d0:84:f2:5a:48:a2:07:11:aa:c1:68:9f:52:e1:90:a2:df: 66:04:10:49:cc:c4:6d:4f:0c:89:f1:67:7c:13:ad:75:da:ea: 2e:02:07:2d:b2:7b:42:99:a8:af:c7:45:90:c2:48:e5:0d:a7: 21:3e:cf:77:78:c0:8d:f9:f6:a0:d3:25:77:06:2e:16:25:be: a7:99:59:94:40:cc:37:e1:58:dd:78:b1:ac:2b:26:ee:9a:f3: d6:e9:44:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/3AjY7wXx1AQbUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk N2Y4YzYyMmUtY2MyNy00NThhLTg3YTUtMGE3OTE5NjBiMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiO2ihBuaU/Wyz3+Lg1vMnoJP/2a7ZkfpvFT I3MmhdhiuvVdkAI6dmIDjErhMO8xDyrFm18fZWFeQftaSHCcaFIoLES9RDpcfjp+ NfNH6S9PxkTzRbxTy8d7mjozvUMc/9TTBGh80uIeB8VQ5WByqTqvz4UuYeZIKG2x uyFYRLnQFVm0jxe+VKSRUf9Zft7Gjb8wV8w0i3LPj9V+r02Fu4+5O8/qWtTS0zRp r4WQdVBylb3wwYmAZRdgtDUL5rFYXkPkg9LaaRsO4OLLklKbTA3QkETYrO9oYGIr J5SdMtFaFXN9AW3hkJp6iRNrzIDnOhlrkRxkNMNlq+7s/xeiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfIpKYeftupjAUyLFYIEY3lViM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOWU5ZTk2OGYtZjhmMi0z ZDFlLThiZjUtOTFmNGI4OTljNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo5cRow1/Hn6K92XVx7OonizfXBUfjqwUgvaGTEh/JwXbbjEWWchX3p OCRQxsSuRfEEuRiQFh3o4lay+OMrRMHHpwHRVtbsTIvIgl2zRw0JvJSiGBA6jd2Q zrhScQA/I8MQaDvy9MKYasW3ICmrdcvchnLGdFp3AIadGUdSJjGv79Sr5fSdP3If RBbmfkLJR7Q1rfiKT6aegYEYby7W8aoMp87QhPJaSKIHEarBaJ9S4ZCi32YEEEnM xG1PDInxZ3wTrXXa6i4CBy2ye0KZqK/HRZDCSOUNpyE+z3d4wI359qDTJXcGLhYl vqeZWZRAzDfhWN14sawrJu6a89bpRP8= -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:09 2025 by rpki-client