This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb7dbaf1-4a08-35ac-838c-d52e1cc18301.roa File: cb7dbaf1-4a08-35ac-838c-d52e1cc18301.roa (raw, json) Hash identifier: RH8XY+OTN7wuyjfLXLoXEoGcbrRDpXGYm6OZfYQuYH0= Subject key identifier: EF:00:10:18:0C:8A:43:6E:1F:E5:3F:EC:FF:A1:31:77:CB:0A:F2:4E Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584C42DBF3AE31EF6C25CE5FC780 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb7dbaf1-4a08-35ac-838c-d52e1cc18301.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 399114 IP address blocks: 66.118.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:f3:ae:31:ef:6c:25:ce:5f:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=06f4cb6d-85ee-4287-ae27-5d2439f22921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:bf:41:2b:bb:3e:12:e8:30:0f:fa:fe:67: b8:08:3d:92:da:88:2a:a7:c6:1f:56:e5:a8:e9:79: 22:dc:f3:52:43:5c:43:18:75:90:11:c4:d0:7b:f2: 3f:af:76:6d:e7:c4:a3:72:85:cf:a5:a0:ca:7a:f2: 48:19:14:4c:3f:66:39:3b:f3:96:4a:c4:e7:34:e3: be:c2:95:51:96:a2:f4:4e:ad:8e:35:32:27:8a:76: 21:ec:e9:47:0d:3c:23:a9:f3:62:75:bc:35:70:f5: 46:0b:b8:0d:06:51:c5:5d:5a:5a:c6:6d:9e:2d:1a: ec:54:dc:4a:0a:59:a8:d1:1b:4e:6b:6f:89:71:92: 2a:92:31:ad:d0:ab:01:13:e1:25:dc:24:fa:46:6e: 71:e0:9b:94:a1:44:82:9e:20:3c:33:6b:f3:30:45: c6:7e:4a:88:85:2d:b5:a7:08:18:e7:20:23:78:58: cb:ce:28:c8:30:28:30:8d:4d:e9:48:14:92:50:d1: 6b:6e:d2:8e:5d:66:ca:4e:69:87:68:ea:b0:b2:a4: ed:a3:9b:e4:8e:54:c5:46:e4:15:bf:81:5e:87:1c: 2c:04:66:81:d8:e9:f3:7c:7f:dc:c3:c4:df:0e:42: b5:d4:da:f7:7a:23:b7:24:8f:fb:8c:6f:13:c8:b6: 05:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:00:10:18:0C:8A:43:6E:1F:E5:3F:EC:FF:A1:31:77:CB:0A:F2:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb7dbaf1-4a08-35ac-838c-d52e1cc18301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 66.118.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a6:7e:4f:6e:e4:73:ad:24:ff:4b:b4:78:a4:9f:22:8c:9b: 9c:14:a0:56:cf:47:a8:07:0f:db:d7:4b:e3:ab:b4:dc:47:a2: db:0e:b5:8d:24:a8:2b:9c:82:99:e3:11:af:ba:2b:ef:c8:8e: 1e:de:e4:61:d0:67:b6:98:78:a9:22:db:84:e3:23:b8:37:fa: b0:c5:e8:7b:cf:57:44:c2:43:83:c3:98:37:4c:10:5d:72:2b: 90:ed:23:be:34:52:fa:e9:20:a4:b4:a3:43:e1:8a:ae:3d:5e: d4:de:ea:de:0c:8e:ac:b9:ca:61:b5:f9:11:46:c4:6f:87:b1: 30:3f:e9:74:f7:5d:cd:f1:89:d0:3f:db:0f:13:aa:14:19:4f: 70:b6:52:7b:5f:db:d1:a6:89:91:37:05:bf:52:eb:97:26:60: 40:2d:65:f8:e7:60:62:49:c7:b8:23:7b:27:c5:8e:56:31:4d: 17:8b:e2:39:14:ac:3f:13:b4:d5:c7:76:88:7f:87:f9:7a:8d: fd:9a:ce:27:56:ef:5d:d3:ff:fb:0f:3e:27:fb:6a:e7:ff:09: 94:ea:3a:f0:60:68:3b:e1:f3:2e:b7:b8:64:57:b5:fd:99:6a: f0:0f:71:ea:ac:0b:0d:95:c9:09:ea:e0:e1:d6:92:e1:b8:e4: 3c:0f:d5:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2/OuMe9sJc5fx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MDZmNGNiNmQtODVlZS00Mjg3LWFlMjctNWQyNDM5ZjIyOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV+/QSu7PhLoMA/6/me4CD2S2ogqp8YfVuWo 6Xki3PNSQ1xDGHWQEcTQe/I/r3Zt58SjcoXPpaDKevJIGRRMP2Y5O/OWSsTnNOO+ wpVRlqL0Tq2ONTIninYh7OlHDTwjqfNidbw1cPVGC7gNBlHFXVpaxm2eLRrsVNxK Clmo0RtOa2+JcZIqkjGt0KsBE+El3CT6Rm5x4JuUoUSCniA8M2vzMEXGfkqIhS21 pwgY5yAjeFjLzijIMCgwjU3pSBSSUNFrbtKOXWbKTmmHaOqwsqTto5vkjlTFRuQV v4FehxwsBGaB2OnzfH/cw8TfDkK11Nr3eiO3JI/7jG8TyLYFtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8AEBgMikNuH+U/7P+hMXfLCvJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvY2I3ZGJhZjEtNGEwOC0z NWFjLTgzOGMtZDUyZTFjYzE4MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQnbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGmfk9u5HOtJP9LtHiknyKMm5wUoFbPR6gHD9vXS+OrtNxHotsOtY0k qCucgpnjEa+6K+/Ijh7e5GHQZ7aYeKki24TjI7g3+rDF6HvPV0TCQ4PDmDdMEF1y K5DtI740UvrpIKS0o0Phiq49XtTe6t4Mjqy5ymG1+RFGxG+HsTA/6XT3Xc3xidA/ 2w8TqhQZT3C2Untf29GmiZE3Bb9S65cmYEAtZfjnYGJJx7gjeyfFjlYxTReL4jkU rD8TtNXHdoh/h/l6jf2azidW713T//sPPif7auf/CZTqOvBgaDvh8y63uGRXtf2Z avAPceqsCw2VyQnq4OHWkuG45DwP1WU= -----END CERTIFICATE-----Generated at Sun Jan 25 22:04:50 2026 by rpki-client