This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa File: 521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa (raw, json) Hash identifier: EnunZ5nYeaaoaT0aKCccS3BCKmoKSQwfXPKm4QuShyw= Subject key identifier: F2:66:CB:8D:37:E5:8C:1A:A2:00:67:DA:E0:D5:D6:71:FC:54:6C:AD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C40114DD0401E652769077000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 396982 IP address blocks: 108.170.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:4d:d0:40:1e:65:27:69:07:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=a999a761-5f8c-46cc-af43-c8164bb14d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:73:8c:40:76:3c:48:18:89:5b:4d:82:61:01: d4:7e:ef:e7:1e:23:63:5e:a4:04:1b:fb:c7:92:08: 69:99:52:15:18:2c:ff:80:cb:73:73:a2:dd:ab:3e: f7:81:e7:19:2c:35:df:27:43:f6:d5:cf:ea:16:5d: e0:fe:4d:09:67:ed:ae:fd:39:ea:d0:72:18:ac:d5: e0:cd:8f:1b:aa:3e:93:6b:47:41:e5:68:c0:6f:2a: 95:a8:21:1d:ff:bb:7a:30:47:ed:85:78:ca:6e:8c: e5:26:7e:ee:30:89:d5:ed:1d:7c:af:57:15:4c:ee: 4a:4f:c0:ad:12:c3:8c:44:8f:84:13:92:f7:84:1e: 07:98:87:0d:84:96:40:14:f4:c7:22:74:ad:06:15: 36:a0:dc:ea:2c:28:a9:1f:71:aa:74:42:58:83:f4: c6:e5:a5:74:cd:b5:97:ea:41:3f:31:ac:01:22:55: bd:4d:0d:e4:6e:fb:57:48:38:4e:50:f3:2a:80:39: d8:34:41:bf:4c:01:0a:eb:20:d2:28:37:9c:6c:60: 45:58:d1:c2:86:b6:e9:6a:41:42:da:d2:5e:b6:91: 20:33:fb:ee:15:a1:f8:b5:45:e0:04:61:25:1e:0e: 3f:88:4a:38:ca:27:21:f4:20:16:3d:88:89:2a:60: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:66:CB:8D:37:E5:8C:1A:A2:00:67:DA:E0:D5:D6:71:FC:54:6C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/521a3e97-1a5c-3fc4-993b-5521ff12d94c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2e:7a:44:a6:66:83:a7:cc:3d:fa:08:5d:33:de:74:9f:57: dd:6e:2a:73:09:48:79:42:f8:6e:ee:b8:ab:ce:3e:b5:06:b7: 5a:90:54:c2:60:4c:e6:0a:bb:32:fa:ed:b1:92:02:27:6c:ef: 74:e2:d3:e6:03:10:e4:54:d6:ff:39:75:3c:a6:b0:58:75:88: 15:da:2d:1a:e4:f5:11:94:e9:36:ac:38:69:6e:a0:95:49:6a: 62:93:35:3b:aa:f6:20:98:ac:cf:3a:a9:0c:da:a0:d3:da:9a: 82:6f:8b:29:ef:e0:cb:f3:e6:84:50:b0:7d:91:91:6c:9f:7a: f5:e6:dd:51:e8:e1:78:d6:45:59:66:95:bb:96:79:af:bf:c9: c3:06:ea:0f:2b:b7:73:90:13:8f:ce:4b:ad:5a:34:a2:28:a3: 5b:8a:6a:43:5c:5f:8e:4a:85:f1:fc:53:04:b1:21:7c:9f:e4: 88:ac:84:9e:2e:c8:05:4b:d3:41:2b:e7:0e:9a:9a:d4:43:ee: 1c:5e:eb:c3:2b:c9:74:63:91:ef:87:55:40:c6:5b:a5:06:a0: 2f:38:e0:bb:37:61:3e:3a:16:20:78:f2:1a:dc:3d:91:1b:24: 74:ab:5c:b1:ce:63:ce:ba:58:6c:a9:7c:37:13:2f:ed:03:2c: 91:9c:f0:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEU3QQB5lJ2kHcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk YTk5OWE3NjEtNWY4Yy00NmNjLWFmNDMtYzgxNjRiYjE0ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHOMQHY8SBiJW02CYQHUfu/nHiNjXqQEG/vH kghpmVIVGCz/gMtzc6Ldqz73gecZLDXfJ0P21c/qFl3g/k0JZ+2u/Tnq0HIYrNXg zY8bqj6Ta0dB5WjAbyqVqCEd/7t6MEfthXjKbozlJn7uMInV7R18r1cVTO5KT8Ct EsOMRI+EE5L3hB4HmIcNhJZAFPTHInStBhU2oNzqLCipH3GqdEJYg/TG5aV0zbWX 6kE/MawBIlW9TQ3kbvtXSDhOUPMqgDnYNEG/TAEK6yDSKDecbGBFWNHChrbpakFC 2tJetpEgM/vuFaH4tUXgBGElHg4/iEo4yich9CAWPYiJKmBh/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJmy4035YwaogBn2uDV1nH8VGytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTIxYTNlOTctMWE1Yy0z ZmM0LTk5M2ItNTUyMWZmMTJkOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIuekSmZoOnzD36CF0z3nSfV91uKnMJSHlC+G7uuKvOPrUGt1qQVMJg TOYKuzL67bGSAids73Ti0+YDEORU1v85dTymsFh1iBXaLRrk9RGU6TasOGluoJVJ amKTNTuq9iCYrM86qQzaoNPamoJviynv4Mvz5oRQsH2RkWyfevXm3VHo4XjWRVlm lbuWea+/ycMG6g8rt3OQE4/OS61aNKIoo1uKakNcX45KhfH8UwSxIXyf5IishJ4u yAVL00Er5w6amtRD7hxe68MryXRjke+HVUDGW6UGoC844Ls3YT46FiB48hrcPZEb JHSrXLHOY866WGypfDcTL+0DLJGc8Mo= -----END CERTIFICATE-----Generated at Sat Dec 20 17:47:27 2025 by rpki-client