This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa File: 48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa (raw, json) Hash identifier: 9jhJBTOp0ypiywAD7mJYAe4tRm4QVWUVX1kHtDgUSU0= Subject key identifier: 23:1B:5B:29:91:F5:E4:71:24:2D:A6:64:5A:B4:DB:AB:0B:1D:7B:3D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C40112CC3A9AE4CF4FA26A540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 396982 IP address blocks: 108.170.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:2c:c3:a9:ae:4c:f4:fa:26:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=1ee19140-bd29-4b3f-a7c7-499c8ab4da09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:4c:f8:2a:ba:07:21:7d:e3:2a:4b:dc:f0: 19:ad:6f:17:d4:61:37:ea:d9:af:6f:36:88:80:59: 31:f8:93:94:35:85:11:89:b4:f6:fe:bc:05:76:28: 2b:d1:af:bc:e5:c3:22:f8:69:47:82:16:db:80:61: 1b:7d:3b:e6:fd:f7:f2:31:05:5d:27:cb:da:6b:ae: a8:2a:9d:6f:3c:c6:c1:65:1f:50:09:63:41:5f:3e: 39:fc:59:f8:7e:b4:5d:c1:7b:4b:30:7c:f8:55:ad: af:41:04:9e:b6:2f:36:9e:80:16:39:8e:85:f6:4d: ff:ae:22:af:cd:dd:04:4b:f0:b6:69:b4:e8:79:6b: 75:28:b1:38:df:85:d6:39:03:3a:0f:84:c0:1e:6b: a6:65:0b:af:8e:14:7b:ee:4a:8f:de:f8:6c:f0:d6: f8:79:b5:16:79:3a:e3:70:48:59:b6:d8:20:d3:0e: 2a:06:fb:ec:a6:86:f0:b8:a0:ac:14:16:c2:e6:f2: c5:76:09:d5:1c:6b:c4:29:1e:ad:97:90:64:1a:ec: 93:81:d9:c2:85:ca:c0:d5:32:7d:10:bc:ee:90:39: 8b:b3:38:b1:e6:f2:61:3c:5e:c3:91:a6:79:0b:23: 5a:ed:4b:60:44:c8:97:d6:2e:9b:45:63:fa:93:75: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1B:5B:29:91:F5:E4:71:24:2D:A6:64:5A:B4:DB:AB:0B:1D:7B:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48cea4f9-e08d-385c-9542-f4ec8f6227d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ca:de:f1:9f:5a:6f:c3:57:25:8f:7d:9e:b7:79:ea:39:c5: e4:fc:a3:64:82:ed:3b:bc:2c:e2:dc:85:2d:00:be:59:23:90: 5e:7c:3c:bb:2c:e4:c5:b9:a4:6b:10:1e:cc:64:36:a1:9c:5e: df:be:e6:bd:19:69:4f:3a:2e:8c:12:58:4d:a2:69:2e:b6:11: 15:0f:b1:eb:0c:9b:e9:00:1f:ca:3a:ae:8d:47:a9:e9:e4:16: 3e:60:7a:20:0a:0f:55:08:36:57:5b:35:31:4c:60:cc:bd:61: f5:e5:15:70:9b:75:42:5b:d4:48:9c:68:05:07:34:00:dc:d5: cf:a5:86:0d:72:97:79:79:d1:0c:fe:6b:e4:6a:f7:da:54:82: 8b:13:00:69:26:f1:fb:3f:36:72:be:b8:15:c8:f0:11:e3:e0: 19:8c:16:52:87:b6:8b:e5:18:01:30:d8:f3:3e:09:b7:f6:f4: d2:15:d4:6c:ce:bf:dd:5e:15:94:0b:b9:c3:dc:7b:e0:9e:b5: 6d:c8:e2:b7:8c:1b:f9:26:f3:a6:c5:e2:ce:fe:58:53:92:da: 6d:11:05:c9:ad:2a:d7:c2:a3:2b:0b:9d:42:7f:1d:1f:91:df: 4d:63:8a:f0:aa:8c:87:8d:1b:73:54:0f:cd:6b:53:3a:c3:a8: 84:18:40:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAESzDqa5M9PompUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk MWVlMTkxNDAtYmQyOS00YjNmLWE3YzctNDk5YzhhYjRkYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod5M+Cq6ByF94ypL3PAZrW8X1GE36tmvbzaI gFkx+JOUNYURibT2/rwFdigr0a+85cMi+GlHghbbgGEbfTvm/ffyMQVdJ8vaa66o Kp1vPMbBZR9QCWNBXz45/Fn4frRdwXtLMHz4Va2vQQSeti82noAWOY6F9k3/riKv zd0ES/C2abToeWt1KLE434XWOQM6D4TAHmumZQuvjhR77kqP3vhs8Nb4ebUWeTrj cEhZttgg0w4qBvvspobwuKCsFBbC5vLFdgnVHGvEKR6tl5BkGuyTgdnChcrA1TJ9 ELzukDmLszix5vJhPF7DkaZ5CyNa7UtgRMiX1i6bRWP6k3UfdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMbWymR9eRxJC2mZFq026sLHXs9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDhjZWE0ZjktZTA4ZC0z ODVjLTk1NDItZjRlYzhmNjIyN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPK3vGfWm/DVyWPfZ63eeo5xeT8o2SC7Tu8LOLchS0AvlkjkF58PLss 5MW5pGsQHsxkNqGcXt++5r0ZaU86LowSWE2iaS62ERUPsesMm+kAH8o6ro1Hqenk Fj5geiAKD1UINldbNTFMYMy9YfXlFXCbdUJb1EicaAUHNADc1c+lhg1yl3l50Qz+ a+Rq99pUgosTAGkm8fs/NnK+uBXI8BHj4BmMFlKHtovlGAEw2PM+Cbf29NIV1GzO v91eFZQLucPce+CetW3I4reMG/km86bF4s7+WFOS2m0RBcmtKtfCoysLnUJ/HR+R 301jivCqjIeNG3NUD81rUzrDqIQYQCM= -----END CERTIFICATE-----Generated at Sat Dec 20 17:48:45 2025 by rpki-client