This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43813c75-4656-3ed0-b4a0-0259909856dd.roa File: 43813c75-4656-3ed0-b4a0-0259909856dd.roa (raw, json) Hash identifier: 344NHLJUOWeDIthCmnEE6rvAPEgKTg32QopPh0LKnc8= Subject key identifier: E9:D8:86:8A:77:6D:64:6F:54:1D:6D:6A:10:C0:C9:F6:F2:DB:3B:A7 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584C593140186FFDC63AA4589780 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43813c75-4656-3ed0-b4a0-0259909856dd.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 401152 IP address blocks: 108.165.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:40:18:6f:fd:c6:3a:a4:58:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=995ceb83-e48b-4bba-93fb-af51187a7468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:69:53:0c:eb:e3:d7:18:c4:68:d6:77:9d:14: d6:56:56:67:80:c8:5d:39:e0:b4:f6:5e:6d:e0:7f: 86:4a:cd:43:23:a9:90:fb:f7:d4:1f:0a:a6:d5:0b: 9f:bc:9a:1b:1e:3a:d2:cb:c0:e0:d5:dc:aa:98:90: 93:06:80:43:cd:1c:86:d2:42:17:40:e7:0e:71:3f: 61:de:b6:76:72:3e:ff:22:5e:02:11:29:21:b3:75: 40:e7:6f:27:d6:1e:2c:fc:f2:c9:aa:df:e4:47:d6: e0:96:a3:1e:30:06:88:bb:ce:f3:44:45:9f:ae:4d: f8:f0:f7:c3:f6:23:fd:d3:42:78:bb:2d:3b:f3:a0: bf:8c:91:b6:4c:b6:a3:6d:ca:ba:bd:f8:51:7e:f0: 39:3b:f0:86:b0:ed:36:1e:65:30:12:c6:f1:15:43: 0b:a6:c4:c6:45:bc:c3:14:95:a5:5c:52:4e:1c:a0: 91:45:f2:99:74:76:5b:7e:35:5c:e3:8f:1e:93:41: 9b:0e:fd:03:f7:5b:07:d1:be:3c:25:78:95:56:42: d4:26:44:f3:b3:4d:26:43:4d:2a:68:12:4f:91:ee: 8d:e3:79:b2:a7:53:be:b8:1c:c9:fa:45:47:53:b9: 75:00:1e:01:67:82:c7:f5:3b:88:aa:c4:49:9d:a5: e0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D8:86:8A:77:6D:64:6F:54:1D:6D:6A:10:C0:C9:F6:F2:DB:3B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43813c75-4656-3ed0-b4a0-0259909856dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a7:a0:b2:d5:aa:b1:5e:3c:ea:08:ed:6a:a6:91:2c:a4:51: a2:8a:98:22:7f:c0:3c:5b:9c:d4:5c:33:d5:bc:97:32:95:08: 74:4a:7d:fa:90:13:4a:fe:8a:e9:8d:ee:1a:ee:e2:3d:49:e1: 1c:1e:90:1d:41:3a:7e:8b:43:fb:72:8d:27:e9:f4:88:e5:2e: 8e:bd:77:e1:20:1c:40:ca:c2:9d:1d:d1:23:1e:40:f0:33:0b: 10:d3:e8:0f:da:12:a4:ac:95:bd:72:a7:2c:25:8c:9c:e0:86: a2:de:ea:86:12:02:98:9a:d7:e1:ad:c9:51:5c:6a:33:22:a3: 04:92:c8:35:ca:a0:ba:8f:7b:33:1b:71:92:7e:63:38:8a:7c: 93:0e:c4:6d:e2:6d:ce:40:7d:50:0f:81:a7:23:82:ca:dd:24: 4d:3f:34:09:b1:73:80:b0:97:01:31:ec:12:3d:76:ef:7a:2a: e3:a7:0d:5d:00:19:2c:58:c5:67:62:6d:13:8d:09:e2:92:48: 41:2c:22:5d:89:4e:d6:7d:ca:79:a7:64:d8:ec:8a:35:3e:0c: ec:aa:8d:9c:35:a6:df:ee:fd:a9:3f:f6:d0:fd:71:a5:10:e5: c2:4a:d0:bd:cc:8c:21:c3:8e:57:07:e4:8d:3b:c1:b0:8c:55: c2:16:e0:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMUAYb/3GOqRYl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk OTk1Y2ViODMtZTQ4Yi00YmJhLTkzZmItYWY1MTE4N2E3NDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGlTDOvj1xjEaNZ3nRTWVlZngMhdOeC09l5t 4H+GSs1DI6mQ+/fUHwqm1QufvJobHjrSy8Dg1dyqmJCTBoBDzRyG0kIXQOcOcT9h 3rZ2cj7/Il4CESkhs3VA528n1h4s/PLJqt/kR9bglqMeMAaIu87zREWfrk348PfD 9iP900J4uy0786C/jJG2TLajbcq6vfhRfvA5O/CGsO02HmUwEsbxFUMLpsTGRbzD FJWlXFJOHKCRRfKZdHZbfjVc448ek0GbDv0D91sH0b48JXiVVkLUJkTzs00mQ00q aBJPke6N43myp1O+uBzJ+kVHU7l1AB4BZ4LH9TuIqsRJnaXgTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnYhop3bWRvVB1tahDAyfby2zunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDM4MTNjNzUtNDY1Ni0z ZWQwLWI0YTAtMDI1OTkwOTg1NmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+noLLVqrFePOoI7WqmkSykUaKKmCJ/wDxbnNRcM9W8lzKVCHRKffqQ E0r+iumN7hru4j1J4RwekB1BOn6LQ/tyjSfp9IjlLo69d+EgHEDKwp0d0SMeQPAz CxDT6A/aEqSslb1ypywljJzghqLe6oYSApia1+GtyVFcajMiowSSyDXKoLqPezMb cZJ+YziKfJMOxG3ibc5AfVAPgacjgsrdJE0/NAmxc4CwlwEx7BI9du96KuOnDV0A GSxYxWdibRONCeKSSEEsIl2JTtZ9ynmnZNjsijU+DOyqjZw1pt/u/ak/9tD9caUQ 5cJK0L3MjCHDjlcH5I07wbCMVcIW4Io= -----END CERTIFICATE-----Generated at Sun Jan 25 10:58:05 2026 by rpki-client