This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db631a39-547d-3b24-99ed-6a656f2cc701.roa File: db631a39-547d-3b24-99ed-6a656f2cc701.roa (raw, json) Hash identifier: A8XC0jGBCgMMOQMOMYRyEGpe6m5bZTiPjktJBCGB7IU= Subject key identifier: 85:1F:A2:66:1A:0D:98:EB:78:B3:75:F9:A3:02:19:A6:A7:62:8A:34 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C0B06468A57127D18C4D7CD82 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db631a39-547d-3b24-99ed-6a656f2cc701.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 53397 IP address blocks: 68.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:46:8a:57:12:7d:18:c4:d7:cd:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=5683eea9-8d80-4b51-8c99-6930ff05893c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9e:7a:77:79:d1:fe:a4:e5:76:9c:cf:5a:16: 37:33:77:41:02:1e:0d:94:9a:73:e0:38:29:b2:39: e4:c1:77:40:6e:c6:30:e7:70:fb:ae:30:68:ef:9e: 75:47:01:ac:a5:ee:53:3e:87:8d:11:c0:62:fb:e2: 29:20:1c:df:b2:74:57:cb:40:c5:de:8f:e6:26:84: fe:e1:d1:28:28:4a:79:b2:5b:4f:ce:db:61:10:89: 58:5a:18:23:62:73:37:7f:85:da:28:a9:f6:30:56: 58:3e:9a:b7:12:51:76:06:44:4d:3c:5e:e9:12:90: d1:47:4a:b6:b6:55:22:44:ea:b1:78:01:91:dc:a1: e6:1f:9c:fa:ee:99:b3:c2:45:ca:7d:d0:fa:79:c5: 72:57:5f:d1:3c:ca:08:94:65:eb:b8:f0:b7:8f:5e: 21:e0:e2:56:3d:60:45:eb:b8:7a:90:da:d5:a2:1d: 64:63:c8:e0:11:74:08:2f:f9:3b:e6:45:70:f6:1f: 41:ff:9a:dc:b9:3b:7b:0f:52:c7:76:09:62:b1:00: fc:b2:4c:cf:dd:9d:85:58:c7:cd:76:66:b3:e8:cc: 6b:6d:1d:b5:0e:75:be:43:ad:42:31:3e:d2:da:b4: 13:ef:4a:16:f0:61:41:ec:10:a6:39:28:99:9a:08: 5e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1F:A2:66:1A:0D:98:EB:78:B3:75:F9:A3:02:19:A6:A7:62:8A:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db631a39-547d-3b24-99ed-6a656f2cc701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c2:e3:3a:9e:44:9f:c9:a0:cb:9d:66:35:b2:ea:f0:3d:63: cf:49:3a:85:55:48:e2:a7:56:d1:6a:84:c7:a4:ed:65:81:7a: 50:20:53:49:20:99:61:bb:61:80:75:00:65:e1:61:57:62:e6: 0a:87:7f:ce:42:1c:51:95:e4:de:a9:91:5b:59:35:24:a6:a2: d5:82:67:80:58:0d:ac:37:ab:d7:67:f2:35:5b:ad:77:ab:27: 57:ed:cd:17:f0:b9:ec:ef:a9:27:91:86:cd:58:1b:8a:ad:f7: 11:01:8c:20:af:ef:18:c4:aa:19:c9:99:5c:62:a5:5e:a9:d8: e4:5e:5c:00:15:75:45:89:a3:7f:2b:2d:69:fb:f5:74:78:28: e7:62:ba:13:64:66:7b:c6:d4:f2:cd:ec:44:43:ee:00:ba:d5: 53:e1:84:41:0f:5c:8f:91:11:bf:96:bd:1b:c4:69:60:44:d6: 96:4c:6a:32:fb:52:23:4c:e1:8b:fb:96:70:a3:0b:ad:2f:78: 87:b9:25:f5:c7:34:99:c7:b7:78:a0:c1:b6:3f:80:08:c4:ed: f2:ac:3c:44:d1:8f:18:bd:67:9a:bd:d8:76:71:5e:19:a7:92: a2:20:4f:be:6f:8d:fe:de:c6:01:1a:d1:92:72:1a:73:56:db: 2f:33:a3:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBkaKVxJ9GMTXzYIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk NTY4M2VlYTktOGQ4MC00YjUxLThjOTktNjkzMGZmMDU4OTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ56d3nR/qTldpzPWhY3M3dBAh4NlJpz4Dgp sjnkwXdAbsYw53D7rjBo7551RwGspe5TPoeNEcBi++IpIBzfsnRXy0DF3o/mJoT+ 4dEoKEp5sltPztthEIlYWhgjYnM3f4XaKKn2MFZYPpq3ElF2BkRNPF7pEpDRR0q2 tlUiROqxeAGR3KHmH5z67pmzwkXKfdD6ecVyV1/RPMoIlGXruPC3j14h4OJWPWBF 67h6kNrVoh1kY8jgEXQIL/k75kVw9h9B/5rcuTt7D1LHdglisQD8skzP3Z2FWMfN dmaz6MxrbR21DnW+Q61CMT7S2rQT70oW8GFB7BCmOSiZmghezwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUfomYaDZjreLN1+aMCGaanYoo0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZGI2MzFhMzktNTQ3ZC0z YjI0LTk5ZWQtNmE2NTZmMmNjNzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRKaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHC4zqeRJ/JoMudZjWy6vA9Y89JOoVVSOKnVtFqhMek7WWBelAgU0kg mWG7YYB1AGXhYVdi5gqHf85CHFGV5N6pkVtZNSSmotWCZ4BYDaw3q9dn8jVbrXer J1ftzRfwuezvqSeRhs1YG4qt9xEBjCCv7xjEqhnJmVxipV6p2OReXAAVdUWJo38r LWn79XR4KOdiuhNkZnvG1PLN7ERD7gC61VPhhEEPXI+REb+WvRvEaWBE1pZMajL7 UiNM4Yv7lnCjC60veIe5JfXHNJnHt3igwbY/gAjE7fKsPETRjxi9Z5q92HZxXhmn kqIgT75vjf7exgEa0ZJyGnNW2y8zo1A= -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:39 2025 by rpki-client