This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa File: 3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa (raw, json) Hash identifier: AWp9yGFwQaw4Z+JZKrjB+vxEzpimwzSTgks4rtnI8rI= Subject key identifier: 71:C9:7B:F5:0D:A4:B4:2E:10:00:15:BE:83:99:A1:A2:23:31:D0:09 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C40111A1C46C47D7A7A164FD0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 15169 IP address blocks: 108.177.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:1a:1c:46:c4:7d:7a:7a:16:4f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=2d005735-ba70-46a8-8533-5523ee60c7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:98:1f:ac:1a:21:f6:cb:fc:97:4f:77:fc: 3a:33:00:1b:41:19:2b:4a:89:b3:fc:31:d8:69:e7: f0:3e:c3:3c:41:3e:bb:fa:1a:3b:d3:1e:4d:52:13: a3:7d:06:af:19:5e:43:4b:76:20:16:0a:fc:9b:64: bf:0d:b9:6c:ec:f2:f3:ff:cb:5f:a0:04:b1:be:2a: 4f:77:1f:fe:08:fd:1b:21:44:ad:81:0d:d0:4c:98: f2:5a:c1:18:6a:37:81:2a:a3:b3:94:7a:e5:82:61: 4d:de:27:18:d5:81:66:2e:a3:78:71:8c:0c:af:71: 5e:d5:21:83:0c:bd:9a:41:8d:2b:d3:9b:ed:a3:91: e0:01:fc:fb:11:52:7c:16:49:0e:1a:43:a6:ae:0f: 23:d1:12:31:e5:44:e0:09:0a:b6:d6:c3:31:c1:d2: ef:01:d7:39:20:73:a0:da:bc:9f:ee:27:20:79:83: cf:08:70:b8:66:0d:d7:38:46:55:99:c7:66:55:81: fa:c3:cc:e1:4a:ab:01:b3:a2:a7:b3:45:eb:7f:0b: 8e:ff:c4:08:03:1b:73:2c:a8:5f:bf:c3:11:ec:bd: c1:12:26:90:7d:1b:df:d8:f6:51:5f:a4:65:1c:56: 32:4e:5b:e6:4e:a1:fb:b1:de:37:7a:00:bb:e7:c0: 65:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C9:7B:F5:0D:A4:B4:2E:10:00:15:BE:83:99:A1:A2:23:31:D0:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3907a4c1-2aab-3ab9-b3ae-9d1f704ee593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:54:1b:58:da:4f:c4:96:ce:43:14:ee:69:e9:98:51:1d:c1: b5:bb:16:f7:e8:1b:d9:30:9f:de:af:55:f7:07:1d:bf:bd:39: 19:4e:4c:41:20:40:6a:66:fe:53:b5:f6:0b:52:34:ab:cd:fb: f8:c0:41:1f:08:2e:ef:83:a9:17:3d:7d:65:ca:86:e6:54:b5: 2f:dc:01:bd:0d:f7:7a:5e:06:03:02:fb:ea:2e:5b:4a:a4:f7: 3a:56:de:1b:d8:7a:cb:a7:b2:b6:ae:12:75:70:50:3f:0d:7a: 0c:e6:74:40:c8:eb:ad:33:35:b2:84:8d:7f:4c:a0:83:1d:fd: 29:c6:7e:93:0d:af:03:50:2f:61:52:e1:be:c6:15:88:c6:58: 3b:91:2f:e0:da:13:0c:92:60:df:3c:72:a1:3b:6b:14:9a:a3: 93:b1:4f:26:2f:db:7c:00:0e:5c:3d:55:52:db:f6:56:c7:b3: a4:f7:a1:49:9a:3b:75:f2:bc:53:ea:2a:e1:b9:1b:14:af:00: fb:6a:fd:10:21:3b:52:30:22:32:1b:38:93:22:16:cf:2b:7a: fc:03:89:20:55:2d:88:17:16:cc:56:c3:56:7a:49:92:93:0c: 34:70:af:9c:32:62:95:16:09:4a:47:f5:74:7f:f9:f8:20:37: 35:bb:fb:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAERocRsR9enoWT9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk MmQwMDU3MzUtYmE3MC00NmE4LTg1MzMtNTUyM2VlNjBjN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaqYH6waIfbL/JdPd/w6MwAbQRkrSomz/DHY aefwPsM8QT67+ho70x5NUhOjfQavGV5DS3YgFgr8m2S/Dbls7PLz/8tfoASxvipP dx/+CP0bIUStgQ3QTJjyWsEYajeBKqOzlHrlgmFN3icY1YFmLqN4cYwMr3Fe1SGD DL2aQY0r05vto5HgAfz7EVJ8FkkOGkOmrg8j0RIx5UTgCQq21sMxwdLvAdc5IHOg 2ryf7icgeYPPCHC4Zg3XOEZVmcdmVYH6w8zhSqsBs6Kns0XrfwuO/8QIAxtzLKhf v8MR7L3BEiaQfRvf2PZRX6RlHFYyTlvmTqH7sd43egC758BluQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHJe/UNpLQuEAAVvoOZoaIjMdAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzkwN2E0YzEtMmFhYi0z YWI5LWIzYWUtOWQxZjcwNGVlNTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbLEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENUG1jaT8SWzkMU7mnpmFEdwbW7FvfoG9kwn96vVfcHHb+9ORlOTEEg QGpm/lO19gtSNKvN+/jAQR8ILu+DqRc9fWXKhuZUtS/cAb0N93peBgMC++ouW0qk 9zpW3hvYesunsrauEnVwUD8NegzmdEDI660zNbKEjX9MoIMd/SnGfpMNrwNQL2FS 4b7GFYjGWDuRL+DaEwySYN88cqE7axSao5OxTyYv23wADlw9VVLb9lbHs6T3oUma O3XyvFPqKuG5GxSvAPtq/RAhO1IwIjIbOJMiFs8revwDiSBVLYgXFsxWw1Z6SZKT DDRwr5wyYpUWCUpH9XR/+fggNzW7+/s= -----END CERTIFICATE-----Generated at Tue Dec 23 17:18:14 2025 by rpki-client