This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdd14a8f-42ea-380e-a503-b6c5eeea95c2.roa
File: fdd14a8f-42ea-380e-a503-b6c5eeea95c2.roa (raw, json)
Hash identifier: +C1FIfg6rsdonxFi7krGIU5HST+miGYQM40YGX0KDAw=
Subject key identifier: 27:F9:65:D4:AA:05:B0:A1:40:26:8A:4D:29:D2:9B:80:1D:EF:6F:73
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584C718569A06142C0175E8FA680
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdd14a8f-42ea-380e-a503-b6c5eeea95c2.roa
Signing time: Mon 01 Dec 2025 02:00:30 +0000
ROA not before: Mon 01 Dec 2025 02:00:30 +0000
ROA not after: Sun 01 Mar 2026 02:00:30 +0000
asID: 401951
IP address blocks: 66.167.8.0/22 maxlen: 22
66.167.170.0/23 maxlen: 23
66.167.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:71:85:69:a0:61:42:c0:17:5e:8f:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Dec 1 02:00:30 2025 GMT
Not After : Mar 1 02:00:30 2026 GMT
Subject: CN=52812175-af9b-4513-a24d-6cf469a7788e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:29:47:db:c9:05:2e:b8:93:91:19:f7:87:
65:83:ee:53:2a:85:24:53:c5:fc:04:ee:8d:47:29:
ca:fd:47:4a:f2:87:70:be:c8:8a:21:f3:6d:1e:ff:
a3:ce:41:26:d8:78:bb:e9:7f:20:82:a1:5b:ab:17:
79:c6:79:7c:15:e3:ff:f8:3f:f9:c3:ed:f9:08:e2:
12:73:8a:d3:bf:98:1a:6b:ee:96:d4:f3:16:5b:f8:
fb:15:ce:51:0f:88:c0:a1:e3:b9:73:e5:5c:ec:51:
1c:c1:24:99:d8:d8:9d:14:23:b0:96:42:97:d0:96:
96:c7:22:85:1e:d6:ef:9d:91:f4:bd:0e:69:df:a7:
ed:e8:d3:1f:28:26:a0:28:11:76:d8:30:c3:94:96:
4c:50:a2:1d:7f:be:10:b9:21:f1:d0:99:47:60:e4:
0e:ff:f8:ff:75:21:8b:8b:cc:55:48:79:68:a7:84:
b7:7b:8c:f9:a8:bc:13:bc:5c:8c:00:02:ae:fd:71:
a3:bd:a7:d9:79:41:e9:b2:e1:50:6c:29:0e:6f:09:
a9:a0:30:db:ab:3e:0f:dd:07:3c:73:89:3a:aa:76:
dc:a9:cc:6a:f3:5a:0a:77:18:16:21:da:c7:a5:af:
b5:ca:5e:b3:4b:5d:c4:f2:6d:d0:b8:33:28:c5:25:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:65:D4:AA:05:B0:A1:40:26:8A:4D:29:D2:9B:80:1D:EF:6F:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fdd14a8f-42ea-380e-a503-b6c5eeea95c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.167.8.0/22
66.167.170.0-66.167.175.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:26:07:a5:a1:81:e6:f4:18:4c:1f:1c:1e:cc:e4:e7:34:06:
0d:3f:82:d2:5e:ec:e3:4b:7a:20:4f:3e:0a:dd:86:70:7b:b5:
9f:9f:63:f3:cf:66:27:ce:9d:48:f6:f1:ff:3f:3f:00:2a:cd:
63:5c:6d:7d:7a:1a:3b:96:2e:a2:71:01:41:a5:bb:9c:cf:51:
7e:08:25:2e:55:ef:51:fe:8d:d7:4d:93:30:03:77:c0:c0:0b:
ae:a5:84:8e:c4:ca:49:c8:5a:5f:fd:3f:d2:4e:51:71:44:4b:
d2:97:2d:9b:db:2f:0c:b2:99:a2:fc:75:68:1c:c8:f6:a6:df:
bc:4c:d8:90:f9:3a:ec:e6:b1:59:70:3b:ce:5a:14:6d:09:0f:
0d:ff:a4:fc:e7:79:04:3f:64:21:d1:3e:12:ab:10:d2:df:64:
e6:b7:47:ce:06:24:25:3e:ce:cf:28:71:bb:60:f3:9e:bf:8c:
c1:e7:3d:bc:59:df:62:4f:8d:9f:16:93:ce:f6:bf:6b:8e:6b:
9a:dd:f9:e0:e1:e4:45:85:79:85:6e:f2:3d:5e:97:3e:d8:f4:
47:ae:e4:76:a6:61:09:16:23:a3:b4:51:b4:4b:9c:e7:d2:4a:
16:69:78:79:4b:24:46:67:8d:f1:3d:ca:d2:a6:43:ed:e3:34:
27:18:03:ec
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWExxhWmgYULAF16PpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MTIwMTAyMDAzMFoXDTI2MDMwMTAyMDAzMFowLzEtMCsGA1UEAxMk
NTI4MTIxNzUtYWY5Yi00NTEzLWEyNGQtNmNmNDY5YTc3ODhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW8pR9vJBS64k5EZ94dlg+5TKoUkU8X8BO6N
RynK/UdK8odwvsiKIfNtHv+jzkEm2Hi76X8ggqFbqxd5xnl8FeP/+D/5w+35COIS
c4rTv5gaa+6W1PMWW/j7Fc5RD4jAoeO5c+Vc7FEcwSSZ2NidFCOwlkKX0JaWxyKF
HtbvnZH0vQ5p36ft6NMfKCagKBF22DDDlJZMUKIdf74QuSHx0JlHYOQO//j/dSGL
i8xVSHlop4S3e4z5qLwTvFyMAAKu/XGjvafZeUHpsuFQbCkObwmpoDDbqz4P3Qc8
c4k6qnbcqcxq81oKdxgWIdrHpa+1yl6zS13E8m3QuDMoxSXsOQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFCf5ZdSqBbChQCaKTSnSm4Ad729zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmRkMTRhOGYtNDJlYS0z
ODBlLWE1MDMtYjZjNWVlZWE5NWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCQqcIMAwD
BAFCp6oDBARCp6AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAICYHpaGB5vQYTB8cHszk5zQGDT+C0l7s40t6
IE8+Ct2GcHu1n59j889mJ86dSPbx/z8/ACrNY1xtfXoaO5YuonEBQaW7nM9Rfggl
LlXvUf6N102TMAN3wMALrqWEjsTKSchaX/0/0k5RcURL0pctm9svDLKZovx1aBzI
9qbfvEzYkPk67OaxWXA7zloUbQkPDf+k/Od5BD9kIdE+EqsQ0t9k5rdHzgYkJT7O
zyhxu2Dznr+Mwec9vFnfYk+NnxaTzva/a45rmt354OHkRYV5hW7yPV6XPtj0R67k
dqZhCRYjo7RRtEuc59JKFml4eUskRmeN8T3K0qZD7eM0JxgD7A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:59:28 2026 by rpki-client