This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efde367e-fbe3-3022-bdd1-231ee6c6a6bf.roa File: efde367e-fbe3-3022-bdd1-231ee6c6a6bf.roa (raw, json) Hash identifier: m48ar5o0yS/2LTu6cW6Wuz5YAaka6REfh118S4nDlOE= Subject key identifier: 3E:6B:87:D2:D3:F9:D9:14:32:D9:2E:FE:9D:41:9B:8F:C2:02:4D:80 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BFFDC081E732696E4FFBB1A80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efde367e-fbe3-3022-bdd1-231ee6c6a6bf.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 401783 IP address blocks: 209.101.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:dc:08:1e:73:26:96:e4:ff:bb:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=5800c96d-481f-4916-a1a0-7ef7c76fbe50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:77:ad:4f:ec:24:23:9f:79:28:2d:03:2c:56: 3a:7a:a8:6a:f2:bb:33:df:a6:72:cc:fa:8b:64:85: cd:01:df:3b:7f:9d:34:ce:9f:5f:ef:be:65:59:7a: e5:9e:36:74:c0:23:1d:ce:6e:35:98:73:1b:bd:7f: a2:87:41:25:c8:66:6b:e8:f5:3e:1c:6a:06:eb:e8: c5:48:65:37:58:e2:82:3c:19:0b:27:8b:14:2f:55: c2:a0:1c:a9:3b:43:ef:59:f0:25:6e:88:67:18:5a: ae:90:0b:a3:b1:a3:82:9f:d6:43:45:8e:95:cc:80: c0:6f:1f:ac:f6:ba:51:5f:07:d3:30:7a:0c:cc:6e: 63:ae:97:97:00:1e:ee:0a:a3:8c:9b:a1:d2:87:d0: 57:29:53:40:9c:44:00:d2:ec:96:73:f3:b1:fe:bb: 17:2b:ff:26:f4:0e:b6:f4:d4:1f:64:f8:40:13:95: e7:a6:43:8f:44:74:d6:61:58:b5:b1:40:33:a6:98: 02:52:e5:f7:5b:9c:22:3b:6d:d2:5f:43:2e:6c:ca: 90:0d:96:73:20:1a:4c:12:2d:8a:75:08:6a:d2:5d: 52:d9:69:ee:dd:d5:ea:8d:88:6a:af:c0:5f:33:34: 3c:4e:e7:7d:e8:57:c4:05:d7:c4:a6:7b:1b:f6:53: a2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6B:87:D2:D3:F9:D9:14:32:D9:2E:FE:9D:41:9B:8F:C2:02:4D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/efde367e-fbe3-3022-bdd1-231ee6c6a6bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.101.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:86:7b:3e:35:a2:50:df:17:e2:eb:1e:59:96:cf:f5:67:56: 81:00:03:04:8e:c7:fe:78:ee:40:5a:0b:dd:7c:f7:c7:14:2f: 2c:ba:e6:fe:d3:83:03:ff:33:03:e9:95:34:e2:94:09:00:80: 83:aa:84:1d:ff:05:ab:2e:8b:ab:63:10:7e:66:31:27:25:46: 8b:6c:71:86:bb:8b:3c:37:e9:86:5d:e1:f3:54:18:18:9a:9f: 4d:a9:60:31:59:ad:f3:1a:f0:b4:4f:2c:eb:4c:69:29:d0:74: 8b:48:b6:8b:4a:06:65:eb:fa:99:af:e4:e3:e8:35:56:25:26: c1:88:c0:57:a5:f4:fd:20:ec:68:f6:40:17:6e:3e:4c:8f:79: b8:99:29:54:13:c1:c5:f3:88:7f:ee:e4:3b:36:bf:bd:e8:57: 41:6f:4b:d8:11:73:89:9f:33:ea:a0:dd:90:47:66:e5:e9:38: d0:1f:8e:ad:af:4d:25:57:b9:15:ca:52:9c:23:33:f0:05:04: b5:4a:ed:a6:0c:a2:22:09:66:b6:e6:d2:9f:2b:0c:a1:35:7f: d6:70:3e:27:7d:d2:02:84:c2:2c:ce:91:a5:74:a5:c1:53:1e: 86:b9:d3:bf:65:a1:22:f0:c0:bd:9f:8f:30:6e:e3:51:b4:c5: c2:14:0e:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/3AgecyaW5P+7GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk NTgwMGM5NmQtNDgxZi00OTE2LWExYTAtN2VmN2M3NmZiZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3etT+wkI595KC0DLFY6eqhq8rsz36ZyzPqL ZIXNAd87f500zp9f775lWXrlnjZ0wCMdzm41mHMbvX+ih0ElyGZr6PU+HGoG6+jF SGU3WOKCPBkLJ4sUL1XCoBypO0PvWfAlbohnGFqukAujsaOCn9ZDRY6VzIDAbx+s 9rpRXwfTMHoMzG5jrpeXAB7uCqOMm6HSh9BXKVNAnEQA0uyWc/Ox/rsXK/8m9A62 9NQfZPhAE5XnpkOPRHTWYVi1sUAzppgCUuX3W5wiO23SX0MubMqQDZZzIBpMEi2K dQhq0l1S2Wnu3dXqjYhqr8BfMzQ8Tud96FfEBdfEpnsb9lOiGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5rh9LT+dkUMtku/p1Bm4/CAk2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZWZkZTM2N2UtZmJlMy0z MDIyLWJkZDEtMjMxZWU2YzZhNmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6Gez41olDfF+LrHlmWz/VnVoEAAwSOx/547kBaC91898cULyy65v7T gwP/MwPplTTilAkAgIOqhB3/Basui6tjEH5mMSclRotscYa7izw36YZd4fNUGBia n02pYDFZrfMa8LRPLOtMaSnQdItItotKBmXr+pmv5OPoNVYlJsGIwFel9P0g7Gj2 QBduPkyPebiZKVQTwcXziH/u5Ds2v73oV0FvS9gRc4mfM+qg3ZBHZuXpONAfjq2v TSVXuRXKUpwjM/AFBLVK7aYMoiIJZrbm0p8rDKE1f9ZwPid90gKEwizOkaV0pcFT Hoa5079loSLwwL2fjzBu41G0xcIUDq4= -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:04 2025 by rpki-client