This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa File: 4fa1c770-c015-3149-af43-e2902ca5a962.roa (raw, json) Hash identifier: 743PLGLRWF3AmMnmf0qzfbkjDVVQB4ywc5YsAnP/708= Subject key identifier: A6:BA:4E:5D:4E:F7:06:84:2F:6A:92:43:25:43:19:D8:D5:04:BA:AD Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584C5666B2139AB970902F143780 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 13768 IP address blocks: 108.165.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:b2:13:9a:b9:70:90:2f:14:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=2d5cbff4-1f19-4b5b-b601-561cebc3080b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:82:7e:bb:5f:86:d3:e0:67:39:38:9a:c4:bc: 10:50:35:b5:c5:63:31:77:93:21:9b:82:1f:bb:fa: cf:6b:75:cb:31:8b:f8:11:5b:87:f5:03:a7:cd:cc: ee:78:a4:b6:84:10:5e:d7:32:21:0e:cc:09:5c:3f: c7:ab:a6:b5:15:58:17:84:9a:33:8c:dc:54:a0:b6: 14:38:45:ed:90:2e:5e:c3:97:6e:4f:22:ec:c7:50: 57:47:d7:34:58:ef:a1:80:88:0d:ea:a7:31:b6:d4: ae:9b:02:ee:e9:86:4f:11:dd:56:9f:5c:5c:66:3c: 45:e2:42:85:10:bd:b8:d1:2a:ce:9a:79:e8:00:d2: ed:cd:43:b0:c0:28:74:77:59:db:0c:26:be:bb:1d: c8:4a:fa:7e:c7:79:7b:02:93:96:7b:6e:16:d5:b7: 70:9c:a1:b9:c8:d8:ef:32:3b:f1:4f:82:9a:2d:b7: 50:8d:f6:c9:bf:5c:5c:7b:e3:2a:a9:25:57:d3:7b: 2e:30:94:a8:5d:01:f2:99:eb:14:76:ec:66:59:6e: 19:9f:a6:61:3f:7c:46:91:b5:66:4e:78:f9:b9:20: 69:09:31:93:4f:fd:4a:da:2a:eb:ac:03:60:14:3c: 89:2b:62:b3:e0:33:4f:f6:59:c5:df:e5:e3:9f:79: d9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BA:4E:5D:4E:F7:06:84:2F:6A:92:43:25:43:19:D8:D5:04:BA:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4fa1c770-c015-3149-af43-e2902ca5a962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f1:f1:71:b0:12:77:38:b9:04:f1:99:c8:23:b7:b6:85:d4: 8b:53:ea:21:18:ff:4e:19:c9:f6:bc:7b:66:47:d2:ef:aa:b3: 53:8e:55:97:b1:d9:8a:97:07:2a:35:e8:84:e9:cd:60:75:e0: fc:ff:d7:24:27:a1:6b:20:1a:32:60:8e:8a:51:fd:63:e0:f2: 4c:a9:28:91:42:7d:3f:e8:6b:75:a0:3e:7d:ac:84:72:e7:de: c6:8c:2d:37:28:c9:ec:95:02:4b:ca:5d:7c:80:9f:fe:b9:c3: 23:13:3b:fb:4f:90:71:79:f5:45:56:78:7d:86:ae:24:a8:3c: 3e:58:92:a8:88:f9:5f:10:30:ba:35:ff:bb:b1:2e:c2:59:f4: 91:7d:75:71:c3:82:21:69:91:56:f8:72:18:9d:52:bb:24:18: e2:6c:ae:85:17:73:3d:44:92:17:92:d5:93:85:2d:3e:f6:e7: f0:dc:fb:f3:b5:01:37:0a:a6:f9:6f:21:e9:53:cc:54:d8:37: 1b:fc:d2:8b:d4:33:eb:20:09:7d:24:ef:aa:a7:9a:fc:55:19: 42:7f:87:ec:d1:cb:db:98:bc:a2:ec:56:4b:ee:13:52:83:2f: ae:2a:15:97:f9:35:68:ea:ea:84:bf:30:4a:0e:d2:bc:74:e9: 22:f2:12:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZrITmrlwkC8UN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk MmQ1Y2JmZjQtMWYxOS00YjViLWI2MDEtNTYxY2ViYzMwODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoJ+u1+G0+BnOTiaxLwQUDW1xWMxd5Mhm4If u/rPa3XLMYv4EVuH9QOnzczueKS2hBBe1zIhDswJXD/Hq6a1FVgXhJozjNxUoLYU OEXtkC5ew5duTyLsx1BXR9c0WO+hgIgN6qcxttSumwLu6YZPEd1Wn1xcZjxF4kKF EL240SrOmnnoANLtzUOwwCh0d1nbDCa+ux3ISvp+x3l7ApOWe24W1bdwnKG5yNjv MjvxT4KaLbdQjfbJv1xce+MqqSVX03suMJSoXQHymesUduxmWW4Zn6ZhP3xGkbVm Tnj5uSBpCTGTT/1K2irrrANgFDyJK2Kz4DNP9lnF3+Xjn3nZTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa6Tl1O9waEL2qSQyVDGdjVBLqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNGZhMWM3NzAtYzAxNS0z MTQ5LWFmNDMtZTI5MDJjYTVhOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbKXCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/x8XGwEnc4uQTxmcgjt7aF1ItT6iEY/04Zyfa8e2ZH0u+qs1OOVZex 2YqXByo16ITpzWB14Pz/1yQnoWsgGjJgjopR/WPg8kypKJFCfT/oa3WgPn2shHLn 3saMLTcoyeyVAkvKXXyAn/65wyMTO/tPkHF59UVWeH2GriSoPD5YkqiI+V8QMLo1 /7uxLsJZ9JF9dXHDgiFpkVb4chidUrskGOJsroUXcz1EkheS1ZOFLT725/Dc+/O1 ATcKpvlvIelTzFTYNxv80ovUM+sgCX0k76qnmvxVGUJ/h+zRy9uYvKLsVkvuE1KD L64qFZf5NWjq6oS/MEoO0rx06SLyEpM= -----END CERTIFICATE-----Generated at Sun Jan 25 07:18:51 2026 by rpki-client