This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f40e3404-1977-3a54-969a-a97a0b2ce547.roa File: f40e3404-1977-3a54-969a-a97a0b2ce547.roa (raw, json) Hash identifier: mjf7Ul36bD8Bzizs71KU5edFlSocfgjZIUZh+4LVO8Q= Subject key identifier: AF:9B:A3:8A:5C:62:08:99:D8:0A:2C:38:E6:DB:3A:56:C5:E4:6B:09 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C23B6AB742FB6012D45868780 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f40e3404-1977-3a54-969a-a97a0b2ce547.roa Signing time: Wed 10 Dec 2025 10:15:59 +0000 ROA not before: Wed 10 Dec 2025 10:15:59 +0000 ROA not after: Tue 10 Mar 2026 09:15:59 +0000 asID: 834 IP address blocks: 68.167.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:23:b6:ab:74:2f:b6:01:2d:45:86:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 10 10:15:59 2025 GMT Not After : Mar 10 09:15:59 2026 GMT Subject: CN=d851b07d-287e-4ac4-bf57-e1b87c34e56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:0b:c3:cf:ba:90:18:5f:55:4d:96:a8:fd: 90:41:5c:59:e0:23:1d:bf:f2:83:73:28:a3:52:7d: aa:55:b6:08:aa:d8:43:66:a4:7f:90:f7:7c:cb:79: a2:d2:1e:89:62:3d:b4:8f:99:c6:c2:3e:d8:0d:c6: 92:c4:a8:8f:cc:42:c2:ae:33:22:ac:94:72:86:8d: 90:ff:ec:9a:e4:0d:0f:c2:c6:97:ea:a3:e1:43:6c: 67:15:a6:f2:81:55:34:37:c8:f3:36:42:86:14:6a: 4e:17:bb:3f:0a:27:5f:a5:ee:56:dd:3a:ac:68:5e: a1:97:aa:68:f9:4d:cf:db:4a:dc:8a:2b:e3:96:7c: 35:ab:dd:9f:26:9e:b1:82:0b:59:6f:6a:15:98:3c: dd:9f:8b:2f:f4:c2:12:f2:39:74:1f:c9:c4:4d:af: 57:f3:81:31:d4:4c:88:09:99:30:c4:4a:7b:29:6a: c0:8f:24:e8:a9:c2:e9:aa:5c:68:2a:4a:d5:60:f9: ce:d2:29:a5:81:a7:f2:e3:47:1b:a2:7e:0e:e5:de: 58:10:fb:7e:ad:a9:15:bb:8d:68:f2:5e:46:a6:0d: 98:f4:68:75:10:68:8e:fe:c3:25:ad:ed:a3:e2:10: ca:37:1e:d9:b7:dd:0c:ab:7d:28:1f:c4:d7:fc:f3: 1f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9B:A3:8A:5C:62:08:99:D8:0A:2C:38:E6:DB:3A:56:C5:E4:6B:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f40e3404-1977-3a54-969a-a97a0b2ce547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 68.167.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:a3:7f:f1:6e:17:b1:87:e9:4a:8f:51:72:64:c3:dc:b1:20: 69:c7:94:f3:ff:67:66:6a:6b:7d:2a:37:f4:c7:0a:22:6e:d1: 57:e3:4a:8f:59:1c:ca:dd:72:c8:54:46:77:a8:df:c0:86:d5: 0b:ce:1b:5a:22:7d:67:b5:c2:4a:d9:90:64:af:35:23:d3:6b: c2:60:dd:a0:24:14:19:eb:05:e2:e0:31:30:22:0d:4c:f4:a2: da:38:a6:15:a7:9d:a8:45:3e:28:2c:86:1a:99:34:1a:7c:c9: 9d:53:b3:19:15:f5:e5:55:76:22:5c:96:c8:39:64:16:07:b4: 2c:86:4c:92:50:60:de:4a:cd:bb:89:a0:99:95:7d:63:92:40: b3:32:6c:0c:ac:cd:07:1a:a5:a7:15:48:8f:86:7f:b2:22:c0: bd:19:15:ac:9f:a9:cd:e5:18:e8:1c:c9:d5:56:19:07:0b:68: fd:37:06:52:49:4c:e4:6c:ca:c1:c0:0b:eb:3e:0a:d7:e3:1b: ec:f2:37:74:17:22:ba:c5:ba:7b:b1:f7:5b:52:d9:7e:b1:f9: 18:d9:0d:7f:d8:82:d4:cf:61:a5:fc:21:b1:df:3d:7f:7e:bd: da:17:2a:9c:fd:66:82:ff:2e:0a:f7:a8:7e:34:81:df:57:18: 5a:39:83:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwjtqt0L7YBLUWGh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIxMDEwMTU1OVoXDTI2MDMxMDA5MTU1OVowLzEtMCsGA1UEAxMk ZDg1MWIwN2QtMjg3ZS00YWM0LWJmNTctZTFiODdjMzRlNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZoLw8+6kBhfVU2WqP2QQVxZ4CMdv/KDcyij Un2qVbYIqthDZqR/kPd8y3mi0h6JYj20j5nGwj7YDcaSxKiPzELCrjMirJRyho2Q /+ya5A0PwsaX6qPhQ2xnFabygVU0N8jzNkKGFGpOF7s/Cidfpe5W3TqsaF6hl6po +U3P20rciivjlnw1q92fJp6xggtZb2oVmDzdn4sv9MIS8jl0H8nETa9X84Ex1EyI CZkwxEp7KWrAjyToqcLpqlxoKkrVYPnO0imlgafy40cbon4O5d5YEPt+rakVu41o 8l5Gpg2Y9Gh1EGiO/sMlre2j4hDKNx7Zt90Mq30oH8TX/PMfuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+bo4pcYgiZ2AosOObbOlbF5GsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjQwZTM0MDQtMTk3Ny0z YTU0LTk2OWEtYTk3YTBiMmNlNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKchMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmjf/FuF7GH6UqPUXJkw9yxIGnHlPP/Z2Zqa30qN/THCiJu0VfjSo9Z HMrdcshURneo38CG1QvOG1oifWe1wkrZkGSvNSPTa8Jg3aAkFBnrBeLgMTAiDUz0 oto4phWnnahFPigshhqZNBp8yZ1TsxkV9eVVdiJclsg5ZBYHtCyGTJJQYN5KzbuJ oJmVfWOSQLMybAyszQcapacVSI+Gf7IiwL0ZFayfqc3lGOgcydVWGQcLaP03BlJJ TORsysHAC+s+CtfjG+zyN3QXIrrFunux91tS2X6x+RjZDX/YgtTPYaX8IbHfPX9+ vdoXKpz9ZoL/Lgr3qH40gd9XGFo5g9g= -----END CERTIFICATE-----Generated at Mon Dec 15 17:22:00 2025 by rpki-client