This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/635e6db7-1362-30a2-8977-7a31641bbb6c.roa File: 635e6db7-1362-30a2-8977-7a31641bbb6c.roa (raw, json) Hash identifier: 8YYGkqeVoKW4Ii+q04eyoJAw9tiGJW1Dn0WSeeSiTwg= Subject key identifier: 7D:3D:98:2C:BA:C2:69:53:DB:1B:28:B8:92:83:7E:66:DE:52:3D:9C Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584C417655DAC0688B23965D1500 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/635e6db7-1362-30a2-8977-7a31641bbb6c.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 931 IP address blocks: 104.224.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:55:da:c0:68:8b:23:96:5d:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=ae2c7187-2ca5-44e7-9f3c-7f4ebb7abcda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:c8:6f:6e:14:0f:0e:c9:69:5e:17:f9:28: a9:b6:f8:98:de:74:f4:8f:3c:63:61:27:a3:21:f7: ec:29:47:3f:d3:f4:de:5b:ce:89:b2:da:cd:ba:aa: ba:fd:70:c1:f6:07:c3:34:55:33:e3:35:49:05:83: 32:26:30:c3:37:25:03:c9:72:93:71:84:a8:0a:d2: e8:42:3e:2d:29:e2:56:b3:0a:6f:ce:16:a5:d3:49: 6f:27:10:ea:c1:43:a9:ba:02:ce:9b:7c:9d:f4:03: 9a:1c:a8:50:bc:14:b4:83:6f:f9:65:ca:4a:61:02: 14:60:85:39:5e:b9:2e:15:3a:23:7e:e5:81:35:b8: 07:57:48:66:46:44:1c:7b:28:e1:4e:31:75:d7:7f: 7e:4c:45:11:94:13:a8:bb:8e:26:6a:32:09:e0:8c: 20:50:3c:22:26:29:26:25:bc:d6:4f:fc:a3:8d:c7: 66:15:35:e2:9b:aa:fc:ad:eb:40:b4:54:7f:ca:5e: c7:79:e8:17:ba:4e:54:c3:8d:20:e0:d2:a2:68:6c: 2b:80:57:59:f2:05:ce:98:8a:42:8c:f4:16:59:7c: d5:ee:3f:dc:01:a8:d2:11:b5:0d:64:b2:b8:4d:4c: 9e:a0:eb:e0:22:be:48:8c:6d:7f:66:19:6f:00:f9: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3D:98:2C:BA:C2:69:53:DB:1B:28:B8:92:83:7E:66:DE:52:3D:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/635e6db7-1362-30a2-8977-7a31641bbb6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:4d:63:a6:b5:97:d9:66:66:be:07:d1:80:a7:db:4a:6d:4e: 41:e2:2f:67:cb:a0:b9:17:16:5b:77:7c:85:ce:45:7d:eb:08: be:9c:f6:bb:58:db:a3:bc:76:0f:b2:b9:8d:fa:53:a7:77:08: d5:60:be:73:10:6e:a3:3c:d7:3b:c5:a7:54:63:8b:60:c1:37: bd:2d:78:5b:4a:a5:6f:b2:19:e4:dc:2c:76:a1:5d:c7:d8:3b: 78:07:a8:33:c1:61:10:07:a6:da:39:84:6f:a6:84:ba:e0:48: 28:16:50:3a:fb:79:b9:f3:f0:c1:b4:0e:7e:0f:c3:57:3d:71: 51:9d:75:c5:8d:ae:6e:53:9b:f0:6b:10:f3:a0:fb:75:4d:5e: 04:17:27:7d:23:d8:e1:c1:11:6c:54:1b:32:47:7e:e7:8c:e9: aa:60:a6:30:81:92:31:89:94:a3:0b:53:08:58:54:3d:9f:f9: d4:0d:d7:48:c5:4f:51:cf:b3:50:32:0a:0a:98:a4:e1:69:d1: 39:6e:d8:1a:c5:ec:b7:13:a6:fa:57:ab:4c:88:1f:1a:d9:4c: 89:28:35:9b:ea:ff:40:44:d5:0a:4d:84:af:0c:f6:ff:cb:b8: 1c:78:47:d4:0f:8c:82:fe:48:90:36:ae:5a:0a:00:2a:b3:09: ca:da:0f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdlXawGiLI5ZdFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk YWUyYzcxODctMmNhNS00NGU3LTlmM2MtN2Y0ZWJiN2FiY2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUnIb24UDw7JaV4X+SiptviY3nT0jzxjYSej IffsKUc/0/TeW86JstrNuqq6/XDB9gfDNFUz4zVJBYMyJjDDNyUDyXKTcYSoCtLo Qj4tKeJWswpvzhal00lvJxDqwUOpugLOm3yd9AOaHKhQvBS0g2/5ZcpKYQIUYIU5 XrkuFTojfuWBNbgHV0hmRkQceyjhTjF1139+TEURlBOou44majIJ4IwgUDwiJikm JbzWT/yjjcdmFTXim6r8retAtFR/yl7HeegXuk5Uw40g4NKiaGwrgFdZ8gXOmIpC jPQWWXzV7j/cAajSEbUNZLK4TUyeoOvgIr5IjG1/ZhlvAPnNmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH09mCy6wmlT2xsouJKDfmbeUj2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjM1ZTZkYjctMTM2Mi0z MGEyLTg5NzctN2EzMTY0MWJiYjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlNY6a1l9lmZr4H0YCn20ptTkHiL2fLoLkXFlt3fIXORX3rCL6c9rtY 26O8dg+yuY36U6d3CNVgvnMQbqM81zvFp1Rji2DBN70teFtKpW+yGeTcLHahXcfY O3gHqDPBYRAHpto5hG+mhLrgSCgWUDr7ebnz8MG0Dn4Pw1c9cVGddcWNrm5Tm/Br EPOg+3VNXgQXJ30j2OHBEWxUGzJHfueM6apgpjCBkjGJlKMLUwhYVD2f+dQN10jF T1HPs1AyCgqYpOFp0Tlu2BrF7LcTpvpXq0yIHxrZTIkoNZvq/0BE1QpNhK8M9v/L uBx4R9QPjIL+SJA2rloKACqzCcraD9k= -----END CERTIFICATE-----Generated at Mon Jan 26 02:35:22 2026 by rpki-client