This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/cd4fd3cf-f44a-34d3-9cf9-b4d328d19fbb.roa File: cd4fd3cf-f44a-34d3-9cf9-b4d328d19fbb.roa (raw, json) Hash identifier: XoKgjeM5MFB3t1PVa33LQqsfLAlgLVbmL6YkpvLlw/4= Subject key identifier: 28:84:81:CE:4B:AC:B0:FE:5F:7C:1B:47:7F:1E:99:B3:40:C8:36:F7 Certificate issuer: /CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Certificate serial: 010D0C9F4328584C8476F3C35401E8628913CA00 Authority key identifier: 85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/cd4fd3cf-f44a-34d3-9cf9-b4d328d19fbb.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 104.243.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:f3:c3:54:01:e8:62:89:13:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657b5e5f-0699-429f-8c83-a39c9a7a0322 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=404ab6e6-c516-4a53-888b-1abe3837c837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9d:a0:ae:7c:69:85:90:1a:4d:5f:28:5d:37: a3:f3:e1:b4:57:c9:fb:4f:81:44:7a:82:e2:ea:51: 43:ba:e7:12:f6:e0:8b:6a:c0:67:95:bc:4c:6c:23: 0a:ea:b3:83:13:2d:8f:9c:54:7a:b7:ad:53:77:ad: 67:95:55:26:4d:7b:f0:2e:9b:5a:e5:41:d6:84:ac: 16:d2:3b:ca:05:7f:4c:28:de:8d:8c:b3:a1:88:b7: d4:c3:71:83:46:b2:71:57:54:24:25:ca:92:2b:65: e5:ba:83:1b:08:d1:16:57:46:16:84:bd:da:6b:2e: 10:d5:c9:ce:3c:76:79:a3:fa:1f:03:57:83:bf:3e: 29:27:ec:76:b6:35:0f:de:26:10:a3:e0:ec:90:75: 34:ff:a5:22:63:e3:df:eb:7f:b6:ed:50:ba:08:20: 4e:a7:67:43:f4:ad:52:de:fc:a6:53:b4:8b:96:44: 8a:6b:e0:a5:64:d2:50:4f:01:a0:75:95:87:46:7d: d1:d1:8b:47:b1:01:fb:a0:f5:79:bc:17:64:3c:1c: 14:50:e1:9b:78:3e:be:11:35:a6:f1:e3:d7:1b:88: e9:fa:38:08:a6:da:28:2f:6c:ab:32:a9:51:85:02: 4a:97:24:08:e7:7a:a8:89:a9:f7:74:c4:af:2d:b7: a0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:84:81:CE:4B:AC:B0:FE:5F:7C:1B:47:7F:1E:99:B3:40:C8:36:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/cd4fd3cf-f44a-34d3-9cf9-b4d328d19fbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322/657b5e5f-0699-429f-8c83-a39c9a7a0322.crl X509v3 Authority Key Identifier: keyid:85:26:FC:AD:03:6A:32:2F:82:8F:5E:3C:18:00:BF:59:B9:88:0E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/657b5e5f-0699-429f-8c83-a39c9a7a0322.cer sbgp-ipAddrBlock: critical IPv4: 104.243.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e9:c9:0c:e1:6c:2a:2e:6f:1b:92:5e:f9:5b:6c:73:63:82:ae: 55:f4:35:40:6d:21:a8:bb:c4:00:91:9f:5c:6b:78:da:3e:c3: e8:2d:70:c7:b7:e6:e9:c2:74:0a:99:34:b9:fa:43:4d:f1:93: 9f:6a:93:67:13:9f:88:db:e5:16:ef:46:c5:f9:bf:13:d0:76: 8a:c9:83:6b:c5:82:b8:a3:c2:e2:71:21:85:bd:e7:96:4a:9f: 16:7b:2e:e6:0c:1a:0a:90:b1:9f:82:82:75:1a:b7:e9:df:3f: a2:2c:a1:d3:7e:03:d3:1b:3b:31:c3:4d:0b:fa:de:dd:ca:1a: dc:de:25:e6:a8:11:a3:21:e3:d4:b8:f4:47:4e:b6:dd:ac:93: 3c:3e:b3:92:8f:ea:3d:f6:7f:80:7c:04:bd:a8:90:77:d5:be: 5d:90:06:8c:c1:e5:88:9a:02:d0:4b:77:af:bc:3e:ab:b7:03: c1:1f:55:6a:59:41:f5:28:ae:22:d9:2b:38:e3:41:17:02:cb: bb:bc:30:f4:a0:27:7c:74:be:f2:92:64:bb:00:b9:08:79:0c: a3:cf:10:66:14:6b:9a:7f:94:28:ce:c9:e2:bc:7c:be:e6:e4: 06:92:f4:30:60:2a:d5:99:5f:53:dc:ec:ad:9b:61:b1:94:e2: 14:37:17:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdvPDVAHoYokTygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU3YjVlNWYtMDY5OS00MjlmLThjODMtYTM5YzlhN2Ew MzIyMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk NDA0YWI2ZTYtYzUxNi00YTUzLTg4OGItMWFiZTM4MzdjODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ2grnxphZAaTV8oXTej8+G0V8n7T4FEeoLi 6lFDuucS9uCLasBnlbxMbCMK6rODEy2PnFR6t61Td61nlVUmTXvwLpta5UHWhKwW 0jvKBX9MKN6NjLOhiLfUw3GDRrJxV1QkJcqSK2XluoMbCNEWV0YWhL3aay4Q1cnO PHZ5o/ofA1eDvz4pJ+x2tjUP3iYQo+DskHU0/6UiY+Pf63+27VC6CCBOp2dD9K1S 3vymU7SLlkSKa+ClZNJQTwGgdZWHRn3R0YtHsQH7oPV5vBdkPBwUUOGbeD6+ETWm 8ePXG4jp+jgIptooL2yrMqlRhQJKlyQI53qoian3dMSvLbegDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiEgc5LrLD+X3wbR38embNAyDb3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTdi NWU1Zi0wNjk5LTQyOWYtOGM4My1hMzljOWE3YTAzMjIvY2Q0ZmQzY2YtZjQ0YS0z NGQzLTljZjktYjRkMzI4ZDE5ZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjU3YjVlNWYtMDY5OS00MjlmLThj ODMtYTM5YzlhN2EwMzIyLzY1N2I1ZTVmLTA2OTktNDI5Zi04YzgzLWEzOWM5YTdh MDMyMi5jcmwwHwYDVR0jBBgwFoAUhSb8rQNqMi+Cj148GAC/WbmIDswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTdiNWU1Zi0wNjk5LTQyOWYtOGM4My1hMzlj OWE3YTAzMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOnJDOFsKi5vG5Je+Vtsc2OCrlX0NUBtIai7xACRn1xreNo+w+gtcMe3 5unCdAqZNLn6Q03xk59qk2cTn4jb5RbvRsX5vxPQdorJg2vFgrijwuJxIYW955ZK nxZ7LuYMGgqQsZ+CgnUat+nfP6IsodN+A9MbOzHDTQv63t3KGtzeJeaoEaMh49S4 9EdOtt2skzw+s5KP6j32f4B8BL2okHfVvl2QBozB5YiaAtBLd6+8Pqu3A8EfVWpZ QfUoriLZKzjjQRcCy7u8MPSgJ3x0vvKSZLsAuQh5DKPPEGYUa5p/lCjOyeK8fL7m 5AaS9DBgKtWZX1Pc7K2bYbGU4hQ3F/k= -----END CERTIFICATE-----Generated at Sun Jan 25 09:45:04 2026 by rpki-client