This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f68f6e01-5422-3936-ab82-458179ed5da6.roa File: f68f6e01-5422-3936-ab82-458179ed5da6.roa (raw, json) Hash identifier: OSU3beftzbOtxQr4nU9R86aq89LtYkN0neFD6YWk4DA= Subject key identifier: E4:E9:25:FC:A5:E6:1D:CB:6B:DD:E1:FB:4B:D1:00:AD:A3:1C:86:16 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584C42DBF39CDBCEF3627DC9EA00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f68f6e01-5422-3936-ab82-458179ed5da6.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 399114 IP address blocks: 104.249.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:f3:9c:db:ce:f3:62:7d:c9:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=9e2e2ccb-c6bf-4295-b4fb-a74cec44c31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e2:22:c8:7d:de:24:45:56:ca:ad:81:74:33: 31:05:95:e5:90:78:76:2a:a2:d1:06:4d:91:35:ce: 4f:1a:df:b3:b8:16:b7:f3:c6:ee:02:fd:2a:0f:34: 4f:d7:0f:0f:20:ac:35:0e:5f:95:3a:ec:2c:51:32: b3:6d:4a:3d:6d:5d:ca:7f:0d:02:66:ef:f9:ca:2f: 2b:37:61:50:c0:e2:c9:a4:c9:cb:5f:05:9d:e5:30: 8e:4b:b6:be:f8:31:cc:4d:c9:ae:3b:a2:98:7b:0a: 01:56:2b:46:ee:03:75:ef:eb:31:7e:5b:af:b2:a5: 24:0f:58:54:77:bc:d5:94:87:b4:a1:b0:90:48:d2: bf:29:01:4c:c9:42:e7:0a:54:f8:99:f5:16:b8:0b: ee:a8:57:9e:b1:38:a0:d2:74:d9:2a:31:a1:68:7f: 12:e7:c1:2e:49:6a:0b:8d:b5:20:f2:d0:54:cf:f6: 06:20:c9:56:b1:86:e9:b4:2d:ca:45:ed:95:bb:19: e7:19:3d:9d:ff:f0:b7:38:2d:d4:da:d9:38:2d:94: 6d:e2:8c:8f:d6:6c:3f:47:89:ab:c1:19:4e:43:39: be:66:1e:33:fd:9f:11:c0:2a:e6:c4:91:d5:84:07: 19:94:64:68:10:7e:38:56:e5:b3:12:f4:48:b7:e8: af:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E9:25:FC:A5:E6:1D:CB:6B:DD:E1:FB:4B:D1:00:AD:A3:1C:86:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/f68f6e01-5422-3936-ab82-458179ed5da6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2c:bc:8c:82:ce:59:53:ab:c1:ad:f5:b7:21:51:e0:a3:01: b6:e7:bd:0f:34:39:ec:69:56:35:43:ed:04:00:51:e6:64:18: 5e:6c:35:89:47:8b:75:bd:67:df:58:1c:3d:5f:c0:d0:ed:d3: b2:e5:be:90:da:73:a4:3b:36:46:7f:c4:4b:40:36:68:00:2e: 9d:d7:cd:d3:c6:87:20:6e:f7:0c:9e:94:0f:06:e8:90:36:ef: 19:81:fe:fb:57:06:41:f5:d3:0a:84:d6:04:36:1d:a1:d6:7d: 1b:8a:da:54:e0:c6:12:e8:b8:e9:60:83:06:5d:68:ac:c8:f7: c2:bd:79:a7:38:4f:32:30:1a:6e:21:9b:77:0b:63:71:41:f3: ef:cd:bf:88:bf:cd:98:cf:95:fa:5a:3e:7b:5b:e9:54:39:b5: 31:80:d3:bf:13:25:1a:a5:a7:93:b5:bb:db:b3:98:73:bc:97: 02:d4:78:d7:81:3d:a7:55:a5:43:aa:48:cc:36:4a:a2:6f:a2: 01:7e:f0:59:f0:3b:07:3e:65:d8:d1:e7:28:c0:12:6b:59:c6: c7:87:5c:52:82:91:33:60:33:21:9d:31:fe:63:a4:21:ee:61: 71:93:ad:51:05:3e:f3:87:f7:b5:aa:82:f9:b4:3f:d3:79:a8: 11:31:e4:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2/Oc287zYn3J6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk OWUyZTJjY2ItYzZiZi00Mjk1LWI0ZmItYTc0Y2VjNDRjMzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+uIiyH3eJEVWyq2BdDMxBZXlkHh2KqLRBk2R Nc5PGt+zuBa388buAv0qDzRP1w8PIKw1Dl+VOuwsUTKzbUo9bV3Kfw0CZu/5yi8r N2FQwOLJpMnLXwWd5TCOS7a++DHMTcmuO6KYewoBVitG7gN17+sxfluvsqUkD1hU d7zVlIe0obCQSNK/KQFMyULnClT4mfUWuAvuqFeesTig0nTZKjGhaH8S58EuSWoL jbUg8tBUz/YGIMlWsYbptC3KRe2VuxnnGT2d//C3OC3U2tk4LZRt4oyP1mw/R4mr wRlOQzm+Zh4z/Z8RwCrmxJHVhAcZlGRoEH44VuWzEvRIt+ivqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTpJfyl5h3La93h+0vRAK2jHIYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvZjY4ZjZlMDEtNTQyMi0z OTM2LWFiODItNDU4MTc5ZWQ1ZGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQsvIyCzllTq8Gt9bchUeCjAbbnvQ80OexpVjVD7QQAUeZkGF5sNYlH i3W9Z99YHD1fwNDt07LlvpDac6Q7NkZ/xEtANmgALp3XzdPGhyBu9wyelA8G6JA2 7xmB/vtXBkH10wqE1gQ2HaHWfRuK2lTgxhLouOlggwZdaKzI98K9eac4TzIwGm4h m3cLY3FB8+/Nv4i/zZjPlfpaPntb6VQ5tTGA078TJRqlp5O1u9uzmHO8lwLUeNeB PadVpUOqSMw2SqJvogF+8FnwOwc+ZdjR5yjAEmtZxseHXFKCkTNgMyGdMf5jpCHu YXGTrVEFPvOH97Wqgvm0P9N5qBEx5Nw= -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:46 2026 by rpki-client