This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa File: db5733de-d9ee-315a-b4ee-49bb473ee114.roa (raw, json) Hash identifier: IYTaAMO7HPqeeOD2NET5nuBhyfXLdjW9DsgjxX6vozM= Subject key identifier: F1:AA:08:32:91:AD:2D:B9:71:A2:7D:70:9F:00:5C:57:52:A8:91:43 Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F4328584BEDB5CC1A157A92E27E1B1820 Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 21803 IP address blocks: 209.140.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:cc:1a:15:7a:92:e2:7e:1b:18:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=3078ac2c-b648-4ab7-984b-b002a8338325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:c3:ab:7a:64:d0:20:d3:8c:e6:14:9f:08: 17:d4:cc:d3:53:da:f7:d9:b4:4f:4d:a3:c3:0f:db: f3:54:2e:5b:ae:f1:2b:af:b6:09:75:e0:dc:0d:b7: 2a:3a:b8:07:88:ea:ff:f6:fc:95:f3:4d:48:33:23: dd:bf:8b:93:7c:ef:9b:a3:5c:68:9a:b8:32:a6:cc: 0e:99:f2:7f:74:99:03:6f:06:3d:39:16:33:81:45: f6:07:2e:63:dc:10:77:ed:20:11:b5:e8:15:26:0a: 14:8a:f7:67:30:3b:0f:99:82:3b:61:94:00:09:0e: 1e:6a:e5:f8:10:61:52:e9:fd:28:9c:71:bf:50:c9: 72:de:69:1c:e0:5f:8f:88:e9:bd:28:d9:3d:e1:16: e4:61:95:04:05:c8:2c:aa:06:36:68:b0:de:9a:6d: ec:97:f5:4d:90:fc:01:7a:1e:5b:b4:88:c5:5c:5c: 91:3a:7c:eb:8c:92:12:cd:b8:64:62:04:67:9e:40: 0f:fc:60:ef:eb:51:00:b1:da:30:e4:56:41:ed:7f: 64:c9:6a:90:0f:42:6e:16:1b:ad:79:4a:b1:74:a9: d8:af:3a:1e:5b:02:48:e1:f3:24:9e:1c:60:7b:0d: cf:c1:97:68:1f:0e:38:29:ad:69:aa:70:f9:3d:55: b2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AA:08:32:91:AD:2D:B9:71:A2:7D:70:9F:00:5C:57:52:A8:91:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/db5733de-d9ee-315a-b4ee-49bb473ee114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: 209.140.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:62:95:9f:55:e1:94:ce:ec:62:90:3a:3b:a1:83:83:ce:11: 15:fc:88:52:dc:82:28:12:2b:bf:53:40:71:c7:b4:63:fa:39: 4d:45:10:14:49:b7:54:c6:53:63:9c:cd:b4:f1:73:6a:34:81: b6:e4:98:cc:74:68:c0:6b:33:94:91:27:21:50:aa:d7:62:74: 51:df:89:89:3a:a8:6c:ad:d9:13:88:4e:e0:85:e6:ad:7b:98: 3c:2a:fb:12:aa:d9:48:4d:7d:62:b6:06:68:47:ec:42:cd:2d: ce:f8:b4:78:03:b3:c1:e3:58:bc:85:2b:72:10:44:32:5a:2c: 29:51:72:fa:93:00:22:9b:63:db:14:d0:32:18:86:14:fb:ee: 58:85:5d:5d:53:84:b8:f3:2b:7a:dc:73:23:23:ed:d4:25:41: 5a:e7:1b:df:dd:bd:eb:e0:c4:b1:e7:3d:d6:58:6a:df:ce:7b: 59:35:a9:b3:ce:f5:f4:be:02:c5:0d:42:78:ac:b0:2c:49:d6: d5:66:52:ed:5b:cb:27:06:2f:61:9a:67:a7:d8:f4:da:fe:94: fa:11:06:65:aa:2e:50:39:58:56:42:0a:1b:c1:f5:d1:94:07: 09:44:63:44:f7:a0:c2:db:83:67:ee:28:77:f9:3c:ed:f2:a6: 81:0a:42:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvttcwaFXqS4n4bGCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk MzA3OGFjMmMtYjY0OC00YWI3LTk4NGItYjAwMmE4MzM4MzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeHDq3pk0CDTjOYUnwgX1MzTU9r32bRPTaPD D9vzVC5brvErr7YJdeDcDbcqOrgHiOr/9vyV801IMyPdv4uTfO+bo1xomrgypswO mfJ/dJkDbwY9ORYzgUX2By5j3BB37SARtegVJgoUivdnMDsPmYI7YZQACQ4eauX4 EGFS6f0onHG/UMly3mkc4F+PiOm9KNk94RbkYZUEBcgsqgY2aLDemm3sl/VNkPwB eh5btIjFXFyROnzrjJISzbhkYgRnnkAP/GDv61EAsdow5FZB7X9kyWqQD0JuFhut eUqxdKnYrzoeWwJI4fMknhxgew3PwZdoHw44Ka1pqnD5PVWyuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGqCDKRrS25caJ9cJ8AXFdSqJFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvZGI1NzMzZGUtZDllZS0z MTVhLWI0ZWUtNDliYjQ3M2VlMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0YwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRilZ9V4ZTO7GKQOjuhg4POERX8iFLcgigSK79TQHHHtGP6OU1FEBRJ t1TGU2OczbTxc2o0gbbkmMx0aMBrM5SRJyFQqtdidFHfiYk6qGyt2ROITuCF5q17 mDwq+xKq2UhNfWK2BmhH7ELNLc74tHgDs8HjWLyFK3IQRDJaLClRcvqTACKbY9sU 0DIYhhT77liFXV1ThLjzK3rccyMj7dQlQVrnG9/dvevgxLHnPdZYat/Oe1k1qbPO 9fS+AsUNQnissCxJ1tVmUu1byycGL2GaZ6fY9Nr+lPoRBmWqLlA5WFZCChvB9dGU BwlEY0T3oMLbg2fuKHf5PO3ypoEKQm4= -----END CERTIFICATE-----Generated at Sat Dec 6 23:36:42 2025 by rpki-client