This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d0fa683f-b54a-312d-a1bb-62021883e18a.roa File: d0fa683f-b54a-312d-a1bb-62021883e18a.roa (raw, json) Hash identifier: vc5WzN9Ix/e3/lWIeLyzH+PKZrpWJ5Koo1zIg8X/EIM= Subject key identifier: 7D:86:58:48:D1:CB:F4:D7:8B:36:8D:4C:75:44:5A:96:1F:75:F1:0D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C40114311144B139F3F9D0D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d0fa683f-b54a-312d-a1bb-62021883e18a.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 396982 IP address blocks: 108.170.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:43:11:14:4b:13:9f:3f:9d:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=5aa982dd-610a-4e1d-b5dd-5a1082cb87a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:72:2c:8c:b7:9f:12:ce:6a:e4:80:f5:84: 09:bf:cc:7d:5f:02:38:79:14:7c:f9:9e:f4:a0:7a: 55:5b:c1:d1:6a:f2:f5:c9:5d:29:92:0b:7a:21:a7: 2f:e5:f7:10:2a:65:04:44:e2:40:f1:1a:c7:05:17: 4f:b4:71:22:0b:46:69:24:b0:c4:b8:4f:68:69:13: 4e:25:9e:15:4c:b7:b9:52:af:85:37:de:2a:0b:e4: 19:79:5f:35:f9:e3:76:6a:03:8f:c7:81:d3:2d:c8: 89:be:e7:2d:7d:4a:21:b8:ff:2c:61:b3:54:78:54: 8c:cc:65:8b:82:4f:ce:df:ba:3d:53:6e:a0:c3:96: 5d:22:67:33:20:7a:1c:cf:f2:3f:ba:13:0c:9f:83: a0:2f:08:ac:a1:f6:7d:56:36:82:ce:a4:3e:da:0e: cb:e0:3b:2a:65:f8:54:2d:37:33:c2:e6:38:ac:49: 2f:4e:58:45:92:ae:46:e3:90:33:22:82:3f:f1:ae: 18:eb:53:b0:41:6d:34:13:16:15:6e:b9:7b:b2:ee: 4b:6e:8b:92:3f:56:da:2d:79:89:26:cc:23:f0:a1: ef:6c:08:d1:c6:af:06:ac:cd:be:8e:46:82:db:98: 4b:8b:2f:59:90:9a:21:d7:1b:6b:48:48:69:23:a7: 6e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:86:58:48:D1:CB:F4:D7:8B:36:8D:4C:75:44:5A:96:1F:75:F1:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d0fa683f-b54a-312d-a1bb-62021883e18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f3:61:11:c5:1b:c8:81:3c:2d:44:d5:c5:96:1b:b8:6c:22: 3a:2b:2f:03:59:4d:3b:29:c8:15:9a:61:c2:ea:b6:cd:97:6b: 98:26:e9:86:4b:2b:70:62:52:e5:8e:d4:1a:2d:5e:73:50:9b: 45:60:9d:49:a7:97:33:cf:eb:41:1b:f0:6d:61:6f:ce:52:ef: 8f:cd:21:63:08:62:f6:63:51:6c:b2:16:9d:2f:35:23:a0:cf: 08:1b:c3:7a:58:d1:1b:b2:29:c1:ee:23:93:c2:22:96:48:7a: 0e:a4:20:c8:58:ff:38:16:e0:2d:c8:11:5e:ae:bf:fd:54:49: 03:9c:12:cc:15:55:d4:2f:fc:96:8f:59:e5:3d:d8:5d:16:38: 04:d7:e0:40:91:54:50:e0:7a:c5:47:25:dc:94:5a:6f:3f:82: 7a:27:f7:e8:a8:99:48:f8:6d:de:90:12:4a:ab:38:fb:ec:1b: d4:42:c8:8a:3f:27:0f:52:60:9f:e0:f5:54:51:e4:1b:78:72: 39:1f:58:c2:f9:db:ac:83:92:27:33:0f:20:1a:46:f2:da:9a: 00:12:d4:a4:96:39:36:b5:24:0d:dd:37:5c:8f:92:1a:f9:30: 7d:36:75:3c:b7:34:97:bb:63:d6:47:67:c8:79:d0:56:8d:e8: a8:0c:31:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEUMRFEsTnz+dDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk NWFhOTgyZGQtNjEwYS00ZTFkLWI1ZGQtNWExMDgyY2I4N2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjplyLIy3nxLOauSA9YQJv8x9XwI4eRR8+Z70 oHpVW8HRavL1yV0pkgt6Iacv5fcQKmUEROJA8RrHBRdPtHEiC0ZpJLDEuE9oaRNO JZ4VTLe5Uq+FN94qC+QZeV81+eN2agOPx4HTLciJvuctfUohuP8sYbNUeFSMzGWL gk/O37o9U26gw5ZdImczIHocz/I/uhMMn4OgLwisofZ9VjaCzqQ+2g7L4DsqZfhU LTczwuY4rEkvTlhFkq5G45AzIoI/8a4Y61OwQW00ExYVbrl7su5LbouSP1baLXmJ Jswj8KHvbAjRxq8GrM2+jkaC25hLiy9ZkJoh1xtrSEhpI6duXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2GWEjRy/TXizaNTHVEWpYfdfENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDBmYTY4M2YtYjU0YS0z MTJkLWExYmItNjIwMjE4ODNlMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrzYRHFG8iBPC1E1cWWG7hsIjorLwNZTTspyBWaYcLqts2Xa5gm6YZL K3BiUuWO1BotXnNQm0VgnUmnlzPP60Eb8G1hb85S74/NIWMIYvZjUWyyFp0vNSOg zwgbw3pY0RuyKcHuI5PCIpZIeg6kIMhY/zgW4C3IEV6uv/1USQOcEswVVdQv/JaP WeU92F0WOATX4ECRVFDgesVHJdyUWm8/gnon9+iomUj4bd6QEkqrOPvsG9RCyIo/ Jw9SYJ/g9VRR5Bt4cjkfWML526yDkiczDyAaRvLamgAS1KSWOTa1JA3dN1yPkhr5 MH02dTy3NJe7Y9ZHZ8h50FaN6KgMMTs= -----END CERTIFICATE-----Generated at Sat Dec 20 19:45:55 2025 by rpki-client