This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3935f1a-2f8f-3d8c-b0be-4e025e6e63a2.roa File: f3935f1a-2f8f-3d8c-b0be-4e025e6e63a2.roa (raw, json) Hash identifier: Ov84NiRb/pE56uTFNRQiKGu3nvYClfgTGNbscEsCG5A= Subject key identifier: EA:65:3E:3D:21:C4:20:BF:92:15:A0:51:38:48:5C:1B:B2:B5:70:BF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C06D60E5B494F80016EB22B00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3935f1a-2f8f-3d8c-b0be-4e025e6e63a2.roa Signing time: Sun 30 Nov 2025 02:00:31 +0000 ROA not before: Sun 30 Nov 2025 02:00:31 +0000 ROA not after: Sat 28 Feb 2026 02:00:31 +0000 asID: 32620 IP address blocks: 66.253.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:06:d6:0e:5b:49:4f:80:01:6e:b2:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 30 02:00:31 2025 GMT Not After : Feb 28 02:00:31 2026 GMT Subject: CN=bebcf754-5702-4960-9a6a-837a4b49707e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:ad:5f:6d:09:6d:59:3e:ca:fd:71:23:2a: 98:69:42:e8:fa:aa:5a:0e:70:83:45:46:80:b7:7e: 11:83:45:ef:23:44:9a:75:5f:f7:cf:20:38:84:58: ca:85:47:99:55:1e:8b:59:fb:97:db:74:93:83:33: cd:53:de:ee:1d:cb:53:94:93:c4:a4:26:74:06:8c: 29:d3:c3:ce:ad:be:8e:74:e8:b6:e3:c6:74:4a:6f: d2:dc:c4:de:17:50:1e:8e:eb:40:96:71:e1:38:f6: f5:03:b1:df:6b:8c:c8:fe:d7:7e:1f:66:ff:7c:a6: d1:4c:a6:f5:2c:65:43:b9:2d:40:b1:9c:c3:41:6b: a0:68:0d:b7:c8:df:4d:c4:39:78:ac:9f:f8:84:65: 41:8b:1b:6c:88:18:30:3d:30:40:e6:ca:06:93:a6: 50:3b:9f:91:59:ed:f5:6d:88:18:5b:76:bb:64:d3: 50:d5:4d:5e:94:28:ff:4c:a1:ac:58:32:21:83:64: 80:7c:89:68:b8:69:23:af:cc:25:d6:7f:47:5f:2b: c9:01:98:94:7f:0c:3d:5e:42:6f:26:9e:60:6c:db: 60:4e:d2:8b:6c:13:53:20:10:0d:be:3f:43:0c:39: 2c:b8:aa:aa:49:e5:bb:11:c7:8f:39:9c:5e:66:16: e3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:65:3E:3D:21:C4:20:BF:92:15:A0:51:38:48:5C:1B:B2:B5:70:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f3935f1a-2f8f-3d8c-b0be-4e025e6e63a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d1:bc:7b:6d:05:92:dd:60:21:be:e0:16:e3:e3:8b:ce:4f: 2e:d6:0a:05:76:1d:b0:95:1f:65:34:88:b2:95:e2:17:6a:fc: fb:5f:61:02:49:89:90:c9:97:f3:29:e0:f6:31:24:bc:c3:45: 3e:3b:76:64:15:d5:0a:dd:9c:a2:cb:32:e4:fb:f3:a6:7d:7e: 87:dd:fd:8b:5f:03:3c:f2:f8:c3:35:4d:c0:69:d3:2b:94:a2: ac:ef:99:1a:06:ac:9d:20:d4:25:34:87:74:b8:35:02:02:07: be:e5:37:e4:66:6b:f1:d1:20:9b:69:d8:1d:79:85:68:dc:fe: 05:bb:ca:ce:39:42:4d:fb:31:9b:75:85:b5:23:67:64:b8:3e: 20:f4:3a:2d:0f:6e:8c:13:4d:71:c1:d1:b8:e5:a1:4e:98:6c: 37:ec:20:85:2d:38:84:0d:71:e4:ac:37:c3:d1:ba:2b:63:d6: f3:2f:3c:c4:8e:5b:c1:a6:50:98:80:54:b4:2d:1c:f9:54:f1: a6:c2:fc:80:1a:00:7c:d8:0e:1d:6f:8e:48:5d:b1:ae:d7:8b: e9:77:a6:84:36:b3:48:d6:6d:2e:7e:50:94:9c:b0:3e:6d:27: 00:5c:49:06:7f:5d:ef:58:be:07:42:dc:62:8c:bf:02:c0:8a: ba:39:f3:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwG1g5bSU+AAW6yKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEzMDAyMDAzMVoXDTI2MDIyODAyMDAzMVowLzEtMCsGA1UEAxMk YmViY2Y3NTQtNTcwMi00OTYwLTlhNmEtODM3YTRiNDk3MDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvitX20JbVk+yv1xIyqYaULo+qpaDnCDRUaA t34Rg0XvI0SadV/3zyA4hFjKhUeZVR6LWfuX23STgzPNU97uHctTlJPEpCZ0Bowp 08POrb6OdOi248Z0Sm/S3MTeF1AejutAlnHhOPb1A7Hfa4zI/td+H2b/fKbRTKb1 LGVDuS1AsZzDQWugaA23yN9NxDl4rJ/4hGVBixtsiBgwPTBA5soGk6ZQO5+RWe31 bYgYW3a7ZNNQ1U1elCj/TKGsWDIhg2SAfIlouGkjr8wl1n9HXyvJAZiUfww9XkJv Jp5gbNtgTtKLbBNTIBANvj9DDDksuKqqSeW7EcePOZxeZhbjrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOplPj0hxCC/khWgUThIXBuytXC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjM5MzVmMWEtMmY4Zi0z ZDhjLWIwYmUtNGUwMjVlNmU2M2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQv1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3RvHttBZLdYCG+4Bbj44vOTy7WCgV2HbCVH2U0iLKV4hdq/PtfYQJJ iZDJl/Mp4PYxJLzDRT47dmQV1QrdnKLLMuT786Z9fofd/YtfAzzy+MM1TcBp0yuU oqzvmRoGrJ0g1CU0h3S4NQICB77lN+Rma/HRIJtp2B15hWjc/gW7ys45Qk37MZt1 hbUjZ2S4PiD0Oi0PbowTTXHB0bjloU6YbDfsIIUtOIQNceSsN8PRuitj1vMvPMSO W8GmUJiAVLQtHPlU8abC/IAaAHzYDh1vjkhdsa7Xi+l3poQ2s0jWbS5+UJScsD5t JwBcSQZ/Xe9YvgdC3GKMvwLAiro5884= -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:34 2025 by rpki-client