This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd2b58a0-834f-3f49-a584-add18f708880.roa File: bd2b58a0-834f-3f49-a584-add18f708880.roa (raw, json) Hash identifier: F/9eANYbdkdwxBanYBuk/l1+aEDMLB4DJKI7kiHikZI= Subject key identifier: 76:6F:95:77:29:84:AA:89:ED:2C:A9:C6:A0:36:C3:9D:D9:6F:9C:44 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C7A3E363926AB88FB8A783340 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd2b58a0-834f-3f49-a584-add18f708880.roa Signing time: Sat 10 Jan 2026 10:08:36 +0000 ROA not before: Sat 10 Jan 2026 10:08:36 +0000 ROA not after: Fri 10 Apr 2026 09:08:36 +0000 asID: 834 IP address blocks: 209.101.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7a:3e:36:39:26:ab:88:fb:8a:78:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 10 10:08:36 2026 GMT Not After : Apr 10 09:08:36 2026 GMT Subject: CN=18639f09-1a8b-47e6-8f36-a87cd32b39fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:20:35:10:9f:7e:91:b0:f4:b8:12:35:22:7c: d9:f0:ef:4b:8a:79:f1:ae:d5:40:8b:64:62:54:e2: 51:a5:bd:a2:9f:1a:9f:d3:58:70:ef:f0:c8:17:af: 2c:ac:50:c3:30:33:7b:3c:71:22:3a:cb:b3:8e:c8: 90:ea:c3:ae:02:85:fb:ad:8f:3f:46:e9:1a:d5:b1: fe:de:08:08:94:82:d3:8d:6d:f2:7c:d8:64:7e:73: 5f:9a:03:45:34:3a:38:36:4d:7d:73:d7:ae:d5:38: e2:4c:90:c1:d7:f2:24:bc:c1:92:0e:d3:01:ec:e4: 27:48:cd:92:68:5d:4f:dd:b6:1b:a0:20:dd:08:22: 6d:1c:eb:33:76:f5:f6:1a:66:f4:56:63:71:99:7b: d9:aa:a6:77:02:23:46:20:84:f7:b3:3a:10:04:f0: 94:52:79:17:ed:53:85:e3:74:26:fe:29:3e:7f:d0: b6:48:5c:68:48:38:65:0f:4f:24:f5:4e:09:13:75: 59:31:e1:6d:5f:8e:4c:7a:a2:7a:cc:e3:dd:20:d0: 4e:88:9d:88:cc:3f:a3:06:45:89:42:54:8a:c3:b4: bd:a9:fa:f9:36:b1:d3:5d:b3:5f:93:e2:cb:f8:0e: 92:ab:6a:8b:e1:86:23:01:ef:99:cc:9d:cd:0e:6f: 57:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6F:95:77:29:84:AA:89:ED:2C:A9:C6:A0:36:C3:9D:D9:6F:9C:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bd2b58a0-834f-3f49-a584-add18f708880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:61:43:da:9f:97:f0:85:6f:03:06:7a:d1:37:09:b6:10:44: 97:15:b9:e5:a6:d2:cd:1a:dc:5c:44:18:ff:64:7d:77:8f:db: 24:52:ac:69:a9:6d:8a:a2:a8:0c:72:4e:33:20:ec:27:f5:36: cb:a1:e8:8e:27:a2:fc:ab:53:e4:62:e0:ab:68:68:6b:69:3d: 11:6e:03:fd:c1:70:04:bc:fa:d9:83:5a:8c:a9:d5:ac:f3:dc: 2a:53:66:0e:68:59:18:37:af:42:0e:47:be:46:49:17:69:1e: af:7d:dc:fd:34:2e:8e:f9:ef:8f:4b:7c:5e:49:52:5d:2d:89: c3:cc:a8:58:a5:46:69:c7:c9:83:95:91:28:ca:7b:72:a7:cf: c6:90:60:36:51:94:81:dd:e8:fb:be:d8:7e:47:60:22:97:5a: 65:37:26:27:8a:05:c6:87:cc:72:82:89:94:80:0e:79:c9:f1: 30:23:84:41:3e:c7:f2:88:08:c3:95:eb:5a:c8:14:13:b4:33: a3:da:8e:fd:7d:99:cc:92:13:15:e1:c6:62:4f:65:7a:70:fa: 0a:67:19:5e:b9:5c:58:a2:a4:7d:a7:64:29:88:2b:03:5c:53: bb:7d:46:d1:9d:84:bb:c6:b7:41:de:ab:93:1b:76:b8:88:26: 32:ea:53:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx6PjY5JquI+4p4M0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDExMDEwMDgzNloXDTI2MDQxMDA5MDgzNlowLzEtMCsGA1UEAxMk MTg2MzlmMDktMWE4Yi00N2U2LThmMzYtYTg3Y2QzMmIzOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiA1EJ9+kbD0uBI1InzZ8O9LinnxrtVAi2Ri VOJRpb2inxqf01hw7/DIF68srFDDMDN7PHEiOsuzjsiQ6sOuAoX7rY8/Ruka1bH+ 3ggIlILTjW3yfNhkfnNfmgNFNDo4Nk19c9eu1TjiTJDB1/IkvMGSDtMB7OQnSM2S aF1P3bYboCDdCCJtHOszdvX2Gmb0VmNxmXvZqqZ3AiNGIIT3szoQBPCUUnkX7VOF 43Qm/ik+f9C2SFxoSDhlD08k9U4JE3VZMeFtX45MeqJ6zOPdINBOiJ2IzD+jBkWJ QlSKw7S9qfr5NrHTXbNfk+LL+A6Sq2qL4YYjAe+ZzJ3NDm9XrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZvlXcphKqJ7SypxqA2w53Zb5xEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmQyYjU4YTAtODM0Zi0z ZjQ5LWE1ODQtYWRkMThmNzA4ODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WWrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExhQ9qfl/CFbwMGetE3CbYQRJcVueWm0s0a3FxEGP9kfXeP2yRSrGmp bYqiqAxyTjMg7Cf1Nsuh6I4novyrU+Ri4KtoaGtpPRFuA/3BcAS8+tmDWoyp1azz 3CpTZg5oWRg3r0IOR75GSRdpHq993P00Lo75749LfF5JUl0ticPMqFilRmnHyYOV kSjKe3Knz8aQYDZRlIHd6Pu+2H5HYCKXWmU3JieKBcaHzHKCiZSADnnJ8TAjhEE+ x/KICMOV61rIFBO0M6Pajv19mcySExXhxmJPZXpw+gpnGV65XFiipH2nZCmIKwNc U7t9RtGdhLvGt0Heq5MbdriIJjLqUwg= -----END CERTIFICATE-----Generated at Sun Jan 25 10:11:39 2026 by rpki-client