This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa File: 4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa (raw, json) Hash identifier: xQGxF7Lgv034pbN/RDFFd1f/0vjXN3eO4A1HLgxBNj0= Subject key identifier: 3F:E4:9B:6A:84:D3:0A:59:E6:0B:78:F8:8A:32:75:D1:5F:11:61:7E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C401140E4E729C873FD693200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 396982 IP address blocks: 108.170.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:40:e4:e7:29:c8:73:fd:69:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=027a35c2-e8f9-4690-aaa2-04380df06b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a8:79:25:c6:df:bb:f3:58:92:eb:cd:97:6f: 93:8b:72:db:12:c3:42:ae:4c:dc:6c:4e:d8:7b:bd: 6c:9b:9b:33:59:65:84:0c:dc:c8:11:6a:d6:24:50: a8:b1:00:57:30:4f:fa:c3:a6:52:32:e1:bc:a1:b8: 3f:7f:f1:a1:51:61:26:93:c4:44:13:8f:2b:94:3a: e7:e3:f3:3f:b8:c3:24:5e:75:35:1a:6c:b4:f4:ad: db:2e:f6:56:35:bd:6d:fc:47:48:b2:e6:11:dd:ac: 68:af:c8:d6:a5:53:10:91:bd:8a:7c:05:af:a8:97: 82:b9:93:9b:ae:22:43:a1:cf:91:f2:de:25:75:f8: c4:ae:37:7d:30:ad:5a:f5:ce:41:45:34:f3:8f:c6: 44:53:fe:3e:b3:d9:43:e3:61:e3:13:4e:ff:17:92: 69:92:1c:b1:c5:eb:3b:ca:f2:db:03:d9:0f:91:ba: 7f:e3:e1:c7:4b:a4:2c:f0:a3:fe:68:a9:ba:09:c0: 2f:92:1e:88:c7:91:6e:fa:0b:f8:80:55:56:a5:21: f3:72:d8:de:4c:34:af:06:a9:cf:bf:86:4f:87:26: 4d:e7:2b:53:19:fe:da:d4:2e:c8:e6:0e:34:46:d3: e2:fb:ba:57:b2:1b:49:18:08:09:2e:df:ac:e8:7f: 90:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E4:9B:6A:84:D3:0A:59:E6:0B:78:F8:8A:32:75:D1:5F:11:61:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:61:50:4f:1e:fd:00:5c:43:93:f1:e1:07:2d:38:2c:a2:58: 44:73:54:ba:91:8c:61:f8:0b:39:7a:5b:5d:28:c0:75:fa:01: 1f:6a:b1:86:ae:b6:c3:21:b5:0d:92:87:5e:96:37:64:e3:92: fa:b9:1c:8a:b6:2b:eb:20:96:57:3f:a4:0c:06:07:bb:53:7f: 8c:ec:4a:e4:28:f6:48:b3:35:1e:7f:70:cd:c1:7d:1b:4c:b8: 50:26:5f:d9:4f:9e:ed:2e:d9:0b:54:70:46:07:32:2f:e2:cf: b3:b6:c9:1c:38:b4:c3:ab:e6:d3:5b:5c:01:52:15:d4:4e:bc: 2f:f2:28:89:8b:25:a9:08:d6:fe:74:be:3a:5b:e5:30:42:28: 0c:c3:d8:5d:b0:45:0b:ee:f6:a6:f6:71:12:c5:ef:9b:db:95: 6b:e9:eb:5d:5b:10:26:03:bb:c2:e3:c2:44:ae:b8:c7:33:85: 8d:50:b6:24:cc:8f:e3:8d:d7:5f:b6:88:ad:a3:38:04:9f:1d: 6f:83:30:17:4f:13:b3:6f:34:ff:eb:a1:b4:cd:54:1c:26:e9: f0:fd:ab:0a:83:26:f3:b2:d1:18:e3:ca:bb:07:f1:ee:79:c1: 7b:48:c2:9b:9b:16:52:97:78:55:04:51:40:e3:da:91:a3:ef: e2:b0:63:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEUDk5ynIc/1pMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk MDI3YTM1YzItZThmOS00NjkwLWFhYTItMDQzODBkZjA2YjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6h5Jcbfu/NYkuvNl2+Ti3LbEsNCrkzcbE7Y e71sm5szWWWEDNzIEWrWJFCosQBXME/6w6ZSMuG8obg/f/GhUWEmk8REE48rlDrn 4/M/uMMkXnU1Gmy09K3bLvZWNb1t/EdIsuYR3axor8jWpVMQkb2KfAWvqJeCuZOb riJDoc+R8t4ldfjErjd9MK1a9c5BRTTzj8ZEU/4+s9lD42HjE07/F5Jpkhyxxes7 yvLbA9kPkbp/4+HHS6Qs8KP+aKm6CcAvkh6Ix5Fu+gv4gFVWpSHzctjeTDSvBqnP v4ZPhyZN5ytTGf7a1C7I5g40RtPi+7pXshtJGAgJLt+s6H+QSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/km2qE0wpZ5gt4+IoyddFfEWF+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGQ1ZmIyMzQtNGIwZC0z NzViLTg4MzAtZjZhNTUwYmExYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBhUE8e/QBcQ5Px4QctOCyiWERzVLqRjGH4Czl6W10owHX6AR9qsYau tsMhtQ2Sh16WN2Tjkvq5HIq2K+sgllc/pAwGB7tTf4zsSuQo9kizNR5/cM3BfRtM uFAmX9lPnu0u2QtUcEYHMi/iz7O2yRw4tMOr5tNbXAFSFdROvC/yKImLJakI1v50 vjpb5TBCKAzD2F2wRQvu9qb2cRLF75vblWvp611bECYDu8LjwkSuuMczhY1QtiTM j+ON11+2iK2jOASfHW+DMBdPE7NvNP/robTNVBwm6fD9qwqDJvOy0RjjyrsH8e55 wXtIwpubFlKXeFUEUUDj2pGj7+KwY8Q= -----END CERTIFICATE-----Generated at Sat Dec 20 17:51:01 2025 by rpki-client