This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa File: 2ca1fafd-5784-383a-86a2-45ab028896d0.roa (raw, json) Hash identifier: 5aptca07+jbJi0wEvnQGjF6KTpF/Tr12S77+8KxBwkc= Subject key identifier: 1D:15:41:42:26:7B:31:AE:94:C0:6D:DC:E4:25:3E:D7:8C:6C:38:54 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584C4176559C5E75C2E855057CA0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 931 IP address blocks: 104.224.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:55:9c:5e:75:c2:e8:55:05:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=a152d342-5e40-4cd0-a812-ead073b2d4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:6e:3e:15:d1:a0:e9:5d:e9:17:2c:ca:da: 47:da:17:3d:27:6c:cc:7d:57:f0:0b:45:36:05:47: 97:6a:9d:29:39:b8:7c:6c:b5:fb:d0:ad:c3:2f:6c: 41:eb:3e:11:48:07:98:71:be:e0:4c:70:72:8e:e6: ce:e0:be:64:d3:f9:54:0e:83:52:b2:dd:99:82:02: e0:d7:ff:b9:c9:9f:bb:93:98:a3:d0:e5:7d:2a:bc: f6:d1:c9:eb:17:34:9f:f2:99:1e:26:17:32:22:22: c6:23:90:64:44:9f:09:11:5e:2c:bf:4a:a4:49:af: 83:e1:b8:9c:5e:b1:91:f2:7d:3b:12:79:3a:b2:ba: 57:10:63:cd:e9:a9:4c:ec:72:0c:5e:25:78:bc:0d: 8e:9f:2e:7c:74:52:7f:f8:5c:33:36:ca:fe:4a:ab: f0:92:9d:c5:29:f2:4b:73:42:1e:48:da:96:97:b6: 29:2a:59:9c:53:eb:59:a8:af:b1:39:2e:e3:4a:05: 7d:85:7e:46:b2:03:52:90:af:56:ec:30:97:6e:33: fe:ae:55:9c:e5:38:bf:a9:17:cd:3c:95:ee:c6:35: be:cb:57:26:89:b6:d7:73:c3:e3:75:7e:8f:a4:a0: 33:6b:52:84:8d:47:b2:67:35:0c:27:b7:80:b2:da: f9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:15:41:42:26:7B:31:AE:94:C0:6D:DC:E4:25:3E:D7:8C:6C:38:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:08:3a:72:39:1a:e3:fd:be:a1:6c:6e:2e:21:71:4a:c0:02: a5:54:b5:b5:2a:4f:67:5b:30:29:17:6b:75:7f:66:e8:62:bc: 46:80:c2:8e:0f:2d:fe:65:63:f0:da:5e:42:30:5c:34:46:3f: 99:c5:7b:c4:44:b8:8f:64:b0:21:d3:b9:ae:b7:94:f9:d7:70: 02:00:e4:40:5f:c2:25:80:ee:8a:c5:5e:48:79:b7:84:7e:6e: 19:b8:af:e3:ef:35:8a:35:d3:14:c6:f6:19:af:21:e0:b2:bf: db:da:62:27:04:20:7d:b3:fb:80:97:ac:0b:e4:0a:da:13:0d: 50:7e:bd:77:af:bf:e7:c9:91:fc:7a:ec:48:68:e5:4f:4a:27: ca:cb:a7:4e:3d:02:65:8f:2c:e2:5f:02:b9:94:45:4e:0d:e4: d5:ce:23:27:91:15:5b:9c:27:4d:35:74:94:e1:9f:56:39:b5: a4:80:5d:aa:86:44:88:ac:86:2c:25:15:ca:73:b2:03:2e:f9: ab:39:dc:2d:40:44:43:9a:fb:60:ae:a8:d1:b6:7f:c5:8e:29: c5:41:84:90:1b:9c:f9:9b:21:2a:8f:a8:eb:65:03:a8:3f:d8: 4a:b3:98:1e:72:af:c6:b1:8d:74:2f:ef:9a:54:c9:8a:5e:70: fb:69:d8:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdlWcXnXC6FUFfKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk YTE1MmQzNDItNWU0MC00Y2QwLWE4MTItZWFkMDczYjJkNGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOVuPhXRoOld6RcsytpH2hc9J2zMfVfwC0U2 BUeXap0pObh8bLX70K3DL2xB6z4RSAeYcb7gTHByjubO4L5k0/lUDoNSst2ZggLg 1/+5yZ+7k5ij0OV9Krz20cnrFzSf8pkeJhcyIiLGI5BkRJ8JEV4sv0qkSa+D4bic XrGR8n07Enk6srpXEGPN6alM7HIMXiV4vA2Ony58dFJ/+FwzNsr+Sqvwkp3FKfJL c0IeSNqWl7YpKlmcU+tZqK+xOS7jSgV9hX5GsgNSkK9W7DCXbjP+rlWc5Ti/qRfN PJXuxjW+y1cmibbXc8PjdX6PpKAza1KEjUeyZzUMJ7eAstr5ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0VQUImezGulMBt3OQlPteMbDhUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMmNhMWZhZmQtNTc4NC0z ODNhLTg2YTItNDVhYjAyODg5NmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcIOnI5GuP9vqFsbi4hcUrAAqVUtbUqT2dbMCkXa3V/ZuhivEaAwo4P Lf5lY/DaXkIwXDRGP5nFe8REuI9ksCHTua63lPnXcAIA5EBfwiWA7orFXkh5t4R+ bhm4r+PvNYo10xTG9hmvIeCyv9vaYicEIH2z+4CXrAvkCtoTDVB+vXevv+fJkfx6 7Eho5U9KJ8rLp049AmWPLOJfArmURU4N5NXOIyeRFVucJ001dJThn1Y5taSAXaqG RIishiwlFcpzsgMu+as53C1AREOa+2CuqNG2f8WOKcVBhJAbnPmbISqPqOtlA6g/ 2EqzmB5yr8axjXQv75pUyYpecPtp2OY= -----END CERTIFICATE-----Generated at Mon Jan 26 02:30:46 2026 by rpki-client