This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa File: 2088ad0e-df10-303d-a609-0636c73f7c1d.roa (raw, json) Hash identifier: Np8Hj6L48S2vBmbT4Pd9G90RgUhN6bDCtftyJfHEAjU= Subject key identifier: 71:38:AB:02:A0:F4:85:66:C6:01:FB:9D:BA:9F:8D:C9:10:D1:44:8F Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F4328584C5666DE5DA85158F03BFA6300 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 38047 IP address blocks: 103.123.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:de:5d:a8:51:58:f0:3b:fa:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=c06e64cb-41a7-46c3-b7b9-20673e929acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:d2:42:5a:ff:fb:d8:95:bc:a3:85:01:46: 0e:cc:ed:fc:be:18:78:32:a5:63:b3:78:78:d2:8b: 1c:15:a5:38:5a:ad:0c:d6:63:b1:f3:03:8f:32:67: 3c:fa:7f:2d:1b:d9:c2:e9:c9:e7:05:09:1f:43:df: 57:37:b2:78:47:e6:56:e9:7e:2f:db:da:8d:e0:8f: fd:50:f2:ae:d3:f5:3f:05:21:9e:cb:0d:0a:13:a1: 2a:1e:df:65:25:9d:2a:a5:19:57:19:cb:85:4f:10: 00:61:ca:93:d2:6f:02:c3:6b:b6:c0:0a:9f:eb:b8: 70:30:8b:7d:83:c3:55:5b:6c:24:59:c5:de:83:50: ae:8d:c4:13:36:07:6b:46:a9:a0:c9:f7:e7:86:59: 47:5a:e6:01:37:c7:0b:54:8a:b3:3c:f1:80:8e:db: 01:3f:ee:67:10:63:6f:5f:e4:7e:be:10:00:73:93: 9b:15:38:f1:39:70:65:91:13:5a:fe:49:9a:97:d1: 89:ac:58:3b:76:01:34:15:44:6e:3d:b6:fa:10:34: 24:5e:98:06:1f:cc:14:e7:d6:b4:5a:00:db:bf:76: 75:87:e4:45:0d:03:66:b4:2e:38:51:0d:58:ca:69: e1:90:66:8e:23:a6:84:58:0d:4b:8c:20:f6:15:3a: 6c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:38:AB:02:A0:F4:85:66:C6:01:FB:9D:BA:9F:8D:C9:10:D1:44:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv4: 103.123.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f7:6a:1a:88:33:42:7e:49:e0:d7:5e:ec:7e:ba:32:ba:64: a6:1d:68:f7:d8:64:75:7a:1b:07:00:ce:bb:c0:3e:f5:7d:53: 69:c5:3b:39:65:76:e1:86:ba:d0:26:c8:32:f8:b1:bc:86:be: 1c:db:b8:99:3d:65:5f:d9:e2:49:ae:0e:79:70:71:5e:b6:f8: 81:c0:96:f6:e4:88:78:39:8d:ae:2d:e6:90:18:97:73:0f:f6: d8:8d:1d:3e:30:4f:5d:06:d7:48:10:15:b2:ff:c6:0e:71:75: 12:33:36:51:07:e8:3a:e4:ef:47:64:e2:92:bb:03:ef:3b:89: 6a:ac:5d:2a:54:36:ab:da:04:fb:6c:3a:2c:d4:66:77:85:b3: 61:a0:3b:6a:68:61:73:7e:5e:11:c3:c1:7a:74:e4:64:4f:24: 02:65:c3:f6:69:08:46:9e:54:e3:bc:51:b8:de:72:d9:56:49: a2:89:96:b7:b3:48:a7:55:35:6c:bf:6f:14:a3:23:e1:bb:36: 8b:7b:01:0e:21:f9:4b:8e:5f:83:1a:e2:ff:31:96:fc:de:d9: da:0c:ea:e1:70:62:b5:4c:97:65:fd:d6:7f:31:d9:62:ea:e5: f7:31:fc:97:d3:f2:a1:3d:bc:ee:1d:b5:a7:5f:d8:c2:c5:d4: c1:57:19:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZt5dqFFY8Dv6YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YzA2ZTY0Y2ItNDFhNy00NmMzLWI3YjktMjA2NzNlOTI5YWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRLSQlr/+9iVvKOFAUYOzO38vhh4MqVjs3h4 0oscFaU4Wq0M1mOx8wOPMmc8+n8tG9nC6cnnBQkfQ99XN7J4R+ZW6X4v29qN4I/9 UPKu0/U/BSGeyw0KE6EqHt9lJZ0qpRlXGcuFTxAAYcqT0m8Cw2u2wAqf67hwMIt9 g8NVW2wkWcXeg1CujcQTNgdrRqmgyffnhllHWuYBN8cLVIqzPPGAjtsBP+5nEGNv X+R+vhAAc5ObFTjxOXBlkRNa/kmal9GJrFg7dgE0FURuPbb6EDQkXpgGH8wU59a0 WgDbv3Z1h+RFDQNmtC44UQ1YymnhkGaOI6aEWA1LjCD2FTpshQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE4qwKg9IVmxgH7nbqfjckQ0USPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvMjA4OGFkMGUtZGYxMC0z MDNkLWE2MDktMDYzNmM3M2Y3YzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3tkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/3ahqIM0J+SeDXXux+ujK6ZKYdaPfYZHV6GwcAzrvAPvV9U2nFOzll duGGutAmyDL4sbyGvhzbuJk9ZV/Z4kmuDnlwcV62+IHAlvbkiHg5ja4t5pAYl3MP 9tiNHT4wT10G10gQFbL/xg5xdRIzNlEH6Drk70dk4pK7A+87iWqsXSpUNqvaBPts OizUZneFs2GgO2poYXN+XhHDwXp05GRPJAJlw/ZpCEaeVOO8UbjectlWSaKJlrez SKdVNWy/bxSjI+G7Not7AQ4h+UuOX4Ma4v8xlvze2doM6uFwYrVMl2X91n8x2WLq 5fcx/JfT8qE9vO4dtadf2MLF1MFXGfg= -----END CERTIFICATE-----Generated at Sun Jan 25 16:47:31 2026 by rpki-client