This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd976902-e7cf-34c8-bfe1-573559021609.roa File: cd976902-e7cf-34c8-bfe1-573559021609.roa (raw, json) Hash identifier: 0948OuR19VdIrSyNYc/16ZnISHwrFz0F+axEB4c3XHU= Subject key identifier: 35:D1:A2:E6:2C:A2:70:49:41:34:54:E1:6F:AB:D9:BB:64:D1:4F:E9 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BFFDC0688F9FFE5E06E817580 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd976902-e7cf-34c8-bfe1-573559021609.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 401783 IP address blocks: 209.101.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:dc:06:88:f9:ff:e5:e0:6e:81:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=e10d7e76-37a8-4001-ab71-4fd07a692c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:28:b9:f6:fa:50:79:7b:d1:e4:c8:11:59:d3: 7b:83:08:90:02:10:7d:75:25:d3:ab:ad:ab:e7:89: 09:43:d5:0d:52:fe:49:80:71:ae:10:ce:75:9f:13: ea:5e:c7:b2:ff:88:87:11:42:41:8c:0c:b8:50:4f: 35:dc:7e:83:93:23:19:6b:6e:87:06:74:16:bf:76: cf:f8:6f:bd:34:57:6d:5e:b8:56:bb:99:88:3b:49: 38:f2:6f:70:49:27:5a:25:a5:54:68:c5:9f:43:d9: c1:2e:cf:2b:90:97:d0:73:89:be:cf:5f:0a:51:81: 01:83:be:fe:65:78:2c:7e:b9:67:e1:30:36:db:30: ee:d8:88:e2:2f:53:2f:3c:a6:0a:c3:6d:62:a5:c7: 0e:36:98:22:6b:17:36:0c:64:7e:06:99:36:7e:e7: c6:9a:2e:a8:5f:b0:19:b8:7d:26:f8:82:18:6e:bd: c1:c8:f5:a7:be:48:0b:b3:04:60:3a:23:5c:2c:70: fe:bb:70:2c:86:d2:0e:be:14:4a:88:c5:49:02:8a: 08:b0:7c:a0:ea:b8:cf:ac:fd:7c:8f:0c:8e:6d:b0: 68:5c:32:69:6f:a3:5c:7a:77:54:cc:28:9f:c1:8d: 95:6d:f9:9f:7a:51:b0:25:2c:8c:b9:33:14:7a:1a: 3b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D1:A2:E6:2C:A2:70:49:41:34:54:E1:6F:AB:D9:BB:64:D1:4F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cd976902-e7cf-34c8-bfe1-573559021609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:7c:50:6f:e9:69:97:44:df:0b:1f:05:c6:a7:08:61:a2:b3: c1:93:3a:cc:62:41:40:a2:42:e0:23:92:90:04:a3:31:86:81: 6d:90:c4:e1:7d:ee:32:15:7a:11:f3:52:98:ee:f4:65:f3:5b: f2:8c:f8:7f:ab:70:6b:0c:d8:56:cc:22:36:ba:6d:d9:bc:c8: f6:39:e0:6f:92:59:d3:c1:98:b2:9b:f7:c3:53:4d:81:53:c6: d2:d5:a3:a9:54:6f:57:fb:c9:49:d1:08:65:7e:a3:3e:36:12: a7:19:20:a3:85:96:6e:8b:b3:51:45:09:a1:6c:8a:10:f4:9a: 0f:5d:d1:d2:ae:ac:9a:58:9b:39:40:2a:2a:b8:b5:47:0e:8c: a8:61:60:d1:17:89:92:ee:6c:34:ff:0b:56:b6:0f:06:d0:2e: 69:27:a5:88:7c:88:f5:2c:03:d2:e0:ba:22:4c:c7:9b:0a:d8: 77:d2:6f:1e:5d:81:cb:6c:3c:2a:2b:f5:ad:81:7c:42:b1:be: bd:d8:7e:64:2f:06:e6:11:6a:d5:d1:80:1d:77:6c:a1:6a:b7: d6:b7:4e:e7:fc:1d:56:83:db:4a:76:02:e1:52:3c:30:6e:e1: 6c:ba:b4:b1:f5:16:55:0b:e4:a3:cd:f7:f1:ab:83:7c:43:28: 77:d5:94:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/3AaI+f/l4G6BdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk ZTEwZDdlNzYtMzdhOC00MDAxLWFiNzEtNGZkMDdhNjkyYzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiii59vpQeXvR5MgRWdN7gwiQAhB9dSXTq62r 54kJQ9UNUv5JgHGuEM51nxPqXsey/4iHEUJBjAy4UE813H6DkyMZa26HBnQWv3bP +G+9NFdtXrhWu5mIO0k48m9wSSdaJaVUaMWfQ9nBLs8rkJfQc4m+z18KUYEBg77+ ZXgsfrln4TA22zDu2IjiL1MvPKYKw21ipccONpgiaxc2DGR+Bpk2fufGmi6oX7AZ uH0m+IIYbr3ByPWnvkgLswRgOiNcLHD+u3AshtIOvhRKiMVJAooIsHyg6rjPrP18 jwyObbBoXDJpb6NcendUzCifwY2VbfmfelGwJSyMuTMUeho7pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXRouYsonBJQTRU4W+r2btk0U/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvY2Q5NzY5MDItZTdjZi0z NGM4LWJmZTEtNTczNTU5MDIxNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ8UG/paZdE3wsfBcanCGGis8GTOsxiQUCiQuAjkpAEozGGgW2QxOF9 7jIVehHzUpju9GXzW/KM+H+rcGsM2FbMIja6bdm8yPY54G+SWdPBmLKb98NTTYFT xtLVo6lUb1f7yUnRCGV+oz42EqcZIKOFlm6Ls1FFCaFsihD0mg9d0dKurJpYmzlA Kiq4tUcOjKhhYNEXiZLubDT/C1a2DwbQLmknpYh8iPUsA9LguiJMx5sK2HfSbx5d gctsPCor9a2BfEKxvr3YfmQvBuYRatXRgB13bKFqt9a3Tuf8HVaD20p2AuFSPDBu 4Wy6tLH1FlUL5KPN9/Grg3xDKHfVlDk= -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:41 2025 by rpki-client