This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a42880a1-b447-3c0e-acb2-9877d9ca7371.roa File: a42880a1-b447-3c0e-acb2-9877d9ca7371.roa (raw, json) Hash identifier: 2ZyU5w/4NVXVkfybGBGX/yqE7x8OSZZH2HFDQYxu7sI= Subject key identifier: 3C:4B:F9:1F:0E:43:0D:CC:38:C9:3E:F4:31:E6:7F:79:F0:C0:40:12 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C4011187A5D145962ED8B1380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a42880a1-b447-3c0e-acb2-9877d9ca7371.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 15169 IP address blocks: 108.170.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:18:7a:5d:14:59:62:ed:8b:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=0dc576e2-513b-4d79-af8a-0ce9045a2cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e9:ca:9e:4e:8b:02:28:35:cc:4e:82:8c:35: 77:9f:46:d6:fd:a7:6b:01:ca:d6:a4:de:d7:11:a8: 2c:aa:00:1c:3e:c3:1f:96:09:29:b7:17:b2:2a:e3: 2e:fa:e0:f7:6f:9a:40:fa:da:f9:cd:93:cd:3b:df: 59:f3:41:5b:a5:a2:3c:eb:bc:35:73:f4:8e:d4:e7: 4d:22:48:3c:cd:58:eb:e8:11:7a:fe:15:c0:35:b6: d9:61:02:e5:a5:d3:87:d3:5f:16:6d:4e:29:45:6b: 42:15:24:a8:f4:d9:59:b8:92:c6:ca:4e:16:28:11: e5:62:77:7e:80:7e:58:50:84:e0:d8:ab:d6:a1:45: d8:9b:24:57:3f:e1:aa:9d:f5:8a:0a:88:8f:cd:5f: 65:c3:1b:94:96:aa:17:c6:30:67:94:a1:e1:b4:5b: a5:03:9a:c0:7a:99:fa:e6:c6:2c:f0:5d:04:1e:0a: 83:78:9c:66:a2:15:1e:ec:4e:3a:ee:29:b0:19:48: 60:80:23:13:86:79:73:f9:24:fe:ac:ff:45:99:82: ed:46:09:ed:58:e3:08:e6:ee:a6:43:20:10:d0:70: 94:2e:a4:bd:fe:94:24:a6:77:92:48:5b:62:d8:a2: 5f:4c:5d:23:96:8a:ca:22:da:1c:8e:6b:a4:5f:63: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4B:F9:1F:0E:43:0D:CC:38:C9:3E:F4:31:E6:7F:79:F0:C0:40:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a42880a1-b447-3c0e-acb2-9877d9ca7371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:2e:9c:fd:e1:62:a3:0c:71:58:6c:62:c8:91:57:ea:cc:05: 96:ca:04:7d:b7:e3:fb:6c:65:86:a2:f6:88:82:1a:d1:ec:88: b5:d4:bd:5e:fb:9b:88:56:ab:fa:25:29:be:d5:f0:96:7b:f2: 22:4f:ae:ad:ec:e5:f6:b2:cd:69:74:05:75:e2:3b:35:d0:e9: 9e:79:ea:19:0f:3b:f5:a0:c0:27:d0:e7:57:46:50:6c:24:70: 3a:74:02:34:f1:88:b1:94:51:63:22:32:d9:d0:21:c9:61:9b: 5f:5a:f1:00:05:ed:5e:cd:8b:44:b7:e1:75:de:ab:01:ce:0f: cf:55:3e:7c:ea:71:4b:f2:0f:14:02:b0:23:5b:a0:24:e9:59: 7b:56:27:9a:92:dc:88:9b:14:31:5f:11:eb:f0:31:3d:54:87: a7:3a:01:41:b5:aa:ba:55:44:7b:0e:ff:59:45:ce:75:f8:c7: 28:6b:6f:e1:09:7b:ec:6d:81:08:fb:46:dc:20:d4:5d:60:10: e8:be:ac:2d:75:a1:f0:92:3d:a9:0e:4d:03:d7:fc:c7:80:6d: 16:dc:e9:e7:4a:37:96:d2:a5:36:fd:10:f9:92:72:d9:66:20: 3d:0b:40:99:d7:77:56:2c:cf:0a:c2:6f:82:5a:62:91:4f:51: 18:b1:dc:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAERh6XRRZYu2LE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk MGRjNTc2ZTItNTEzYi00ZDc5LWFmOGEtMGNlOTA0NWEyY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+nKnk6LAig1zE6CjDV3n0bW/adrAcrWpN7X EagsqgAcPsMflgkptxeyKuMu+uD3b5pA+tr5zZPNO99Z80FbpaI867w1c/SO1OdN Ikg8zVjr6BF6/hXANbbZYQLlpdOH018WbU4pRWtCFSSo9NlZuJLGyk4WKBHlYnd+ gH5YUITg2KvWoUXYmyRXP+GqnfWKCoiPzV9lwxuUlqoXxjBnlKHhtFulA5rAepn6 5sYs8F0EHgqDeJxmohUe7E467imwGUhggCMThnlz+ST+rP9FmYLtRgntWOMI5u6m QyAQ0HCULqS9/pQkpneSSFti2KJfTF0jlorKItocjmukX2MkswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxL+R8OQw3MOMk+9DHmf3nwwEASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQyODgwYTEtYjQ0Ny0z YzBlLWFjYjItOTg3N2Q5Y2E3MzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbKrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsunP3hYqMMcVhsYsiRV+rMBZbKBH234/tsZYai9oiCGtHsiLXUvV77 m4hWq/olKb7V8JZ78iJPrq3s5fayzWl0BXXiOzXQ6Z556hkPO/WgwCfQ51dGUGwk cDp0AjTxiLGUUWMiMtnQIclhm19a8QAF7V7Ni0S34XXeqwHOD89VPnzqcUvyDxQC sCNboCTpWXtWJ5qS3IibFDFfEevwMT1Uh6c6AUG1qrpVRHsO/1lFznX4xyhrb+EJ e+xtgQj7Rtwg1F1gEOi+rC11ofCSPakOTQPX/MeAbRbc6edKN5bSpTb9EPmSctlm ID0LQJnXd1YszwrCb4JaYpFPURix3E4= -----END CERTIFICATE-----Generated at Sat Dec 20 19:28:24 2025 by rpki-client