This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa File: b040a988-fc2f-3b79-b962-453ddd2ae85a.roa (raw, json) Hash identifier: rMAtBBe/ZnBhcDevCmZeKMh3vNk0g4qsOc5ux80Yo6c= Subject key identifier: C9:29:1F:F7:35:B0:7B:03:D5:6D:93:56:48:3A:A0:B1:46:63:68:90 Certificate issuer: /CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Certificate serial: 010D0C9F4328584C8476F3B165467E29C2F64A58 Authority key identifier: 85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 16676 IP address blocks: 104.243.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:f3:b1:65:46:7e:29:c2:f6:4a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=70af9f70-ca53-45fd-88ba-469592d53584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:4e:4b:4e:17:c6:2d:27:c5:26:2c:b8:7d: 7f:2e:29:89:b3:61:40:21:f9:78:ba:d8:54:2d:6a: f5:98:9e:db:72:c0:6f:31:b5:47:79:b2:2d:25:e3: 46:1c:60:bd:b9:60:63:3a:9d:53:49:16:aa:57:ad: a4:34:d5:f7:3e:61:30:21:47:2f:db:b6:10:f6:f8: 07:41:52:18:95:ca:9c:0b:9a:11:01:a4:67:f4:89: e3:83:8b:a1:c1:38:0a:1a:3e:02:00:b3:18:74:82: a8:35:57:1d:b7:cf:2c:66:40:2a:90:39:d0:f4:cd: 0b:32:28:34:8e:94:2e:df:97:6b:09:46:c4:5a:88: eb:ab:63:82:eb:71:fa:70:54:06:8d:fa:96:3a:e3: 03:b9:e9:6b:4e:50:33:33:f8:8e:f1:af:72:67:08: 5b:0c:bc:91:a8:17:0b:4b:83:8d:70:f5:77:b8:11: 45:de:f9:48:fd:59:50:05:4e:51:d1:b9:40:af:77: 71:57:c5:42:39:25:cf:65:7a:19:00:a0:f4:6a:b6: 0c:52:4a:a4:ea:a9:6d:66:ae:23:26:6e:72:56:47: 2d:7b:3e:2e:67:56:da:d1:e7:db:5b:a5:ca:19:50: ec:1c:e5:bd:8f:2f:4c:42:fe:5d:53:3d:a1:27:75: 85:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:29:1F:F7:35:B0:7B:03:D5:6D:93:56:48:3A:A0:B1:46:63:68:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/b040a988-fc2f-3b79-b962-453ddd2ae85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl X509v3 Authority Key Identifier: keyid:85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer sbgp-ipAddrBlock: critical IPv4: 104.243.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1f:c1:95:75:83:2e:77:95:f3:a4:cc:76:e1:fa:0a:b0:44: 80:c3:2f:28:63:3c:bf:12:a0:6c:96:92:0e:08:2e:a1:1a:e8: b7:30:35:04:e2:75:f5:e1:9c:99:30:01:20:80:34:4f:7f:ff: 24:96:38:e5:6e:41:cd:bb:e9:f4:0a:92:92:58:79:86:45:0e: 10:65:d3:2d:39:b8:25:b5:9e:20:19:69:0e:24:d5:7d:e1:a1: b3:e6:6a:f3:26:88:9c:a5:b0:c4:73:3a:12:66:b8:8a:c9:98: 8c:ce:41:92:68:47:ae:a9:65:e7:5d:8b:39:5b:48:09:5c:67: 22:b9:28:64:dc:66:e4:b9:a0:93:43:a2:2d:51:3f:48:d7:83: 8a:03:eb:58:ea:f9:60:68:dc:1d:4e:31:14:ff:b7:bb:fc:6b: af:a8:6f:98:4b:8a:30:a7:84:1a:15:0c:eb:66:ca:5d:29:e8: 58:27:4b:42:30:fa:0d:bf:14:40:38:14:67:4f:ef:cc:81:e8: 90:26:8d:de:bd:f6:c0:73:f7:fb:9e:09:49:99:4c:1a:0b:4d: 86:4e:66:bd:99:88:eb:ac:9f:e7:69:07:fe:49:b1:07:bf:fe: 1f:c5:28:47:59:b1:31:e0:c0:b1:69:ca:d0:d1:9e:5b:be:51: f2:c1:35:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdvOxZUZ+KcL2SlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU3YjVlNWYtMDY5OS00MjlmLThjODMtYTM5YzlhN2Ew MzIyMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk NzBhZjlmNzAtY2E1My00NWZkLTg4YmEtNDY5NTkyZDUzNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUdOS04Xxi0nxSYsuH1/LimJs2FAIfl4uthU LWr1mJ7bcsBvMbVHebItJeNGHGC9uWBjOp1TSRaqV62kNNX3PmEwIUcv27YQ9vgH QVIYlcqcC5oRAaRn9Injg4uhwTgKGj4CALMYdIKoNVcdt88sZkAqkDnQ9M0LMig0 jpQu35drCUbEWojrq2OC63H6cFQGjfqWOuMDuelrTlAzM/iO8a9yZwhbDLyRqBcL S4ONcPV3uBFF3vlI/VlQBU5R0blAr3dxV8VCOSXPZXoZAKD0arYMUkqk6qltZq4j Jm5yVkctez4uZ1ba0efbW6XKGVDsHOW9jy9MQv5dUz2hJ3WFVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkpH/c1sHsD1W2TVkg6oLFGY2iQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTdi NWU1Zi0wNjk5LTQyOWYtOGM4My1hMzljOWE3YTAzMjIvYjA0MGE5ODgtZmMyZi0z Yjc5LWI5NjItNDUzZGRkMmFlODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjU3YjVlNWYtMDY5OS00MjlmLThj ODMtYTM5YzlhN2EwMzIyLzY1N2I1ZTVmLTA2OTktNDI5Zi04YzgzLWEzOWM5YTdh MDMyMi5jcmwwHwYDVR0jBBgwFoAUhSb8rQNqMi+Cj148GAC/WbmIDswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTdiNWU1Zi0wNjk5LTQyOWYtOGM4My1hMzlj OWE3YTAzMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAfwZV1gy53lfOkzHbh+gqwRIDDLyhjPL8SoGyWkg4ILqEa6LcwNQTi dfXhnJkwASCANE9//ySWOOVuQc276fQKkpJYeYZFDhBl0y05uCW1niAZaQ4k1X3h obPmavMmiJylsMRzOhJmuIrJmIzOQZJoR66pZeddizlbSAlcZyK5KGTcZuS5oJND oi1RP0jXg4oD61jq+WBo3B1OMRT/t7v8a6+ob5hLijCnhBoVDOtmyl0p6FgnS0Iw +g2/FEA4FGdP78yB6JAmjd699sBz9/ueCUmZTBoLTYZOZr2ZiOusn+dpB/5JsQe/ /h/FKEdZsTHgwLFpytDRnlu+UfLBNU8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:06 2026 by rpki-client