This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1f7c097-2609-34f4-9974-84a6578cac71.roa File: a1f7c097-2609-34f4-9974-84a6578cac71.roa (raw, json) Hash identifier: PzykW2TfSed6ATBJri9/SA2W+oBMH8K4Uq9gqXXCdhE= Subject key identifier: C8:35:FC:C9:B5:4A:DB:C4:4F:7E:3D:E0:78:BB:40:98:B7:77:51:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BD5FB448EA7A7860CC3DC6100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1f7c097-2609-34f4-9974-84a6578cac71.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 20940 IP address blocks: 104.97.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:44:8e:a7:a7:86:0c:c3:dc:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=62c03558-9f5d-4e5c-b542-75c99fc13f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:e9:22:72:ef:a8:0a:b9:1f:72:85:77:91: ef:ee:11:82:c2:8d:13:37:77:59:8a:89:cb:9d:68: 30:f1:f7:ff:44:39:e5:9c:a1:cd:1d:2f:cd:3e:22: 8e:3c:11:15:66:6d:93:45:03:95:8d:69:42:7b:c7: 90:ec:21:0d:bd:49:22:e8:19:b0:8e:93:7f:de:d1: c5:b3:dd:4d:eb:1e:27:db:06:75:84:23:5e:2b:85: 8e:4a:32:74:b2:85:cf:d7:e9:45:c1:ef:47:62:4d: 36:bc:a2:a4:57:90:3c:0d:08:1c:8b:64:3b:2f:d1: ee:82:55:bc:1c:59:a8:c6:8f:8d:7b:b6:e8:7f:2c: 8f:22:30:3a:40:a9:68:c3:18:87:5a:c7:4b:3a:0e: d2:de:01:0a:2a:1c:1a:d5:a1:54:d1:2f:51:7a:9f: 1b:c3:2c:7d:df:ae:85:1f:0c:41:ba:87:f8:d8:0f: c9:70:63:68:59:7c:bd:6d:34:d0:71:72:4b:b5:27: ab:1b:79:94:01:ae:aa:35:7c:46:59:28:ba:15:d0: e9:2e:bc:9a:60:f4:1d:22:a7:9b:40:6c:2c:7d:3c: a2:c0:18:b7:87:46:8b:68:b5:df:02:f4:10:e6:14: c9:21:21:7f:8e:b7:c9:1c:95:46:e9:f0:6b:44:0d: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:35:FC:C9:B5:4A:DB:C4:4F:7E:3D:E0:78:BB:40:98:B7:77:51:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1f7c097-2609-34f4-9974-84a6578cac71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.97.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:4a:4e:0d:9a:53:43:92:77:3a:a4:55:82:cd:97:fa:a9:d4: b1:02:3d:de:39:f6:1a:ec:16:54:70:b2:74:fa:cc:f3:68:d7: 7f:87:17:71:49:4c:5e:05:e1:49:c0:7b:f3:72:32:c4:e5:90: 6d:4b:6f:3e:86:67:d8:75:3b:71:c0:9d:5f:74:e8:b9:3e:90: 68:11:cb:a8:df:dc:9d:8b:4d:61:1c:70:ad:70:ef:59:9c:6a: 5a:b4:6e:d2:79:2e:ec:11:6e:d9:56:0c:44:41:0f:d5:13:90: b2:0d:74:3d:fa:0d:e6:21:57:27:fc:39:6b:66:30:e6:74:98: fc:ee:9d:ea:ad:22:94:f1:ad:1b:e0:6b:0f:e4:f4:ea:80:2a: 7d:54:ab:5a:04:31:74:81:4d:9b:61:89:94:57:43:53:44:49: 2f:35:02:cb:41:bf:16:09:d1:00:94:3f:b2:78:09:2f:c2:25: 4d:d2:b0:b9:d9:74:83:a3:c9:a2:38:c9:0c:10:13:9a:b2:11: bb:da:e9:39:f9:05:22:f7:33:7a:1f:82:9d:30:5f:59:93:19: 91:dc:7d:16:4c:3e:c8:13:65:17:01:54:7d:df:54:5a:65:ec: 31:d3:eb:7d:a9:46:15:a9:03:eb:ad:bc:d7:ed:e4:7f:ec:ad: f5:d6:43:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+0SOp6eGDMPcYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk NjJjMDM1NTgtOWY1ZC00ZTVjLWI1NDItNzVjOTlmYzEzZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkzpInLvqAq5H3KFd5Hv7hGCwo0TN3dZionL nWgw8ff/RDnlnKHNHS/NPiKOPBEVZm2TRQOVjWlCe8eQ7CENvUki6BmwjpN/3tHF s91N6x4n2wZ1hCNeK4WOSjJ0soXP1+lFwe9HYk02vKKkV5A8DQgci2Q7L9HuglW8 HFmoxo+Ne7bofyyPIjA6QKlowxiHWsdLOg7S3gEKKhwa1aFU0S9Rep8bwyx9366F HwxBuof42A/JcGNoWXy9bTTQcXJLtSerG3mUAa6qNXxGWSi6FdDpLryaYPQdIqeb QGwsfTyiwBi3h0aLaLXfAvQQ5hTJISF/jrfJHJVG6fBrRA3TzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMg1/Mm1StvET3494Hi7QJi3d1FSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFmN2MwOTctMjYwOS0z NGY0LTk5NzQtODRhNjU3OGNhYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlKTg2aU0OSdzqkVYLNl/qp1LECPd459hrsFlRwsnT6zPNo13+HF3FJ TF4F4UnAe/NyMsTlkG1Lbz6GZ9h1O3HAnV906Lk+kGgRy6jf3J2LTWEccK1w71mc alq0btJ5LuwRbtlWDERBD9UTkLINdD36DeYhVyf8OWtmMOZ0mPzuneqtIpTxrRvg aw/k9OqAKn1Uq1oEMXSBTZthiZRXQ1NESS81AstBvxYJ0QCUP7J4CS/CJU3SsLnZ dIOjyaI4yQwQE5qyEbva6Tn5BSL3M3ofgp0wX1mTGZHcfRZMPsgTZRcBVH3fVFpl 7DHT632pRhWpA+utvNft5H/srfXWQ8o= -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:06 2025 by rpki-client