This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa File: bf34a922-0471-34af-bb29-1cebd856cee0.roa (raw, json) Hash identifier: wdYi1h3vaGakq1xwyojgY54HRdYaXP6V6xwPXswm5Ac= Subject key identifier: 7F:68:93:51:FE:0B:A7:79:1E:92:8F:25:8B:D2:CF:20:41:B1:74:D8 Certificate issuer: /CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Certificate serial: 010D0C9F4328584C9EFC67CDEDAA8A9AC86A4B80 Authority key identifier: 2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 62533 IP address blocks: 104.219.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:67:cd:ed:aa:8a:9a:c8:6a:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509fd691-d18e-4244-b269-cdbfdf5bdf42 Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=3efd2cfa-693c-48d8-91c2-b263e290496d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:1d:0a:0f:93:d3:a5:60:6f:74:b4:d8:02: ed:44:bf:17:84:c7:b7:bb:54:11:9e:97:ac:0e:51: 7b:e3:e1:2e:de:3e:56:65:09:4b:a6:b9:56:35:84: d3:2f:ca:8b:97:df:5e:12:fc:ca:b5:c8:14:12:3e: aa:a7:4d:08:de:ce:bb:b0:25:04:5f:83:e1:97:e0: 50:41:bf:be:02:14:d5:34:29:00:2e:fc:cc:25:b8: c9:49:76:35:9b:dc:63:1e:31:1e:c2:c6:d9:68:df: b7:9f:5a:c0:74:83:04:40:ea:39:75:67:72:31:5d: f3:a8:82:b7:c2:7a:84:32:3d:b5:39:f2:de:ab:b9: 3e:ce:eb:86:16:41:fc:93:36:1f:81:39:87:05:f8: 91:d2:b3:e3:32:4d:64:3a:3c:c3:a7:9e:16:12:5c: 22:3e:26:37:ff:3b:0a:be:cd:9b:05:9e:e9:0f:30: 91:a0:15:e7:2c:28:c0:5f:73:89:ea:dd:15:a9:93: 5a:41:f3:48:b7:87:03:11:0c:a9:6e:bf:14:9d:8c: bd:04:cb:5e:55:bf:78:13:c9:68:ae:e9:03:b6:5b: f7:fd:bd:be:da:eb:bd:c0:e7:27:49:3b:fc:48:a4: d9:8d:ff:ab:3a:96:1d:aa:b0:e4:df:00:72:ec:40: 04:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:68:93:51:FE:0B:A7:79:1E:92:8F:25:8B:D2:CF:20:41:B1:74:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/bf34a922-0471-34af-bb29-1cebd856cee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42/509fd691-d18e-4244-b269-cdbfdf5bdf42.crl X509v3 Authority Key Identifier: keyid:2A:0B:C0:20:8F:22:73:EC:9A:3E:95:73:71:12:75:7C:D5:03:1B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/509fd691-d18e-4244-b269-cdbfdf5bdf42.cer sbgp-ipAddrBlock: critical IPv4: 104.219.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a2:dc:d5:be:5a:77:9a:13:fa:07:3a:3e:08:50:3b:dd:dd: 3e:18:1f:44:c1:29:a3:00:2c:b7:4b:5c:4d:b3:02:58:21:10: 1b:f4:d0:32:cf:cd:2a:35:51:78:98:6f:b2:15:a7:f3:92:a9: 58:f6:df:b1:b2:ea:fa:8c:77:93:53:26:a7:60:e8:5b:e5:49: fb:1d:33:fa:b7:0d:87:3d:34:22:af:81:0a:6d:ac:e9:42:be: 60:47:3b:24:59:b3:59:dd:c6:4d:1f:04:70:ce:72:8d:d1:bc: 98:54:f2:f9:68:1c:a9:24:e3:a4:1d:52:27:6d:61:31:3f:8e: bd:48:c7:6a:20:fc:ed:3b:2a:bb:06:5f:14:40:02:db:f0:32: 0d:38:c8:f7:8a:33:f3:3e:2a:84:e1:24:b8:4d:0b:93:ca:a4: 1a:8c:89:e8:c9:1e:cc:9a:bf:37:c6:b9:48:9f:bc:73:db:bf: f3:e3:7e:64:20:a8:71:32:07:21:8e:2f:8f:36:fa:d5:e0:41: a6:68:b8:be:e4:d9:40:a7:6f:74:6e:b3:e0:f6:fd:8f:1f:5d: 41:84:d0:ba:5b:a8:90:4f:51:d1:4d:33:b6:d4:a2:56:2c:d0: 82:70:da:4f:c0:ce:2d:d0:a5:50:ee:c4:89:d5:d7:4e:2c:fc: d0:95:e8:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/GfN7aqKmshqS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIyNjktY2RiZmRmNWJk ZjQyMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk M2VmZDJjZmEtNjkzYy00OGQ4LTkxYzItYjI2M2UyOTA0OTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUwdCg+T06Vgb3S02ALtRL8XhMe3u1QRnpes DlF74+Eu3j5WZQlLprlWNYTTL8qLl99eEvzKtcgUEj6qp00I3s67sCUEX4Phl+BQ Qb++AhTVNCkALvzMJbjJSXY1m9xjHjEewsbZaN+3n1rAdIMEQOo5dWdyMV3zqIK3 wnqEMj21OfLeq7k+zuuGFkH8kzYfgTmHBfiR0rPjMk1kOjzDp54WElwiPiY3/zsK vs2bBZ7pDzCRoBXnLCjAX3OJ6t0VqZNaQfNIt4cDEQypbr8UnYy9BMteVb94E8lo rukDtlv3/b2+2uu9wOcnSTv8SKTZjf+rOpYdqrDk3wBy7EAErwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9ok1H+C6d5HpKPJYvSzyBBsXTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MDlm ZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJmZGY1YmRmNDIvYmYzNGE5MjItMDQ3MS0z NGFmLWJiMjktMWNlYmQ4NTZjZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTA5ZmQ2OTEtZDE4ZS00MjQ0LWIy NjktY2RiZmRmNWJkZjQyLzUwOWZkNjkxLWQxOGUtNDI0NC1iMjY5LWNkYmZkZjVi ZGY0Mi5jcmwwHwYDVR0jBBgwFoAUKgvAII8ic+yaPpVzcRJ1fNUDG8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MDlmZDY5MS1kMThlLTQyNDQtYjI2OS1jZGJm ZGY1YmRmNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWi3NW+WneaE/oHOj4IUDvd3T4YH0TBKaMALLdLXE2zAlghEBv00DLP zSo1UXiYb7IVp/OSqVj237Gy6vqMd5NTJqdg6FvlSfsdM/q3DYc9NCKvgQptrOlC vmBHOyRZs1ndxk0fBHDOco3RvJhU8vloHKkk46QdUidtYTE/jr1Ix2og/O07KrsG XxRAAtvwMg04yPeKM/M+KoThJLhNC5PKpBqMiejJHsyavzfGuUifvHPbv/PjfmQg qHEyByGOL482+tXgQaZouL7k2UCnb3Rus+D2/Y8fXUGE0LpbqJBPUdFNM7bUolYs 0IJw2k/Azi3QpVDuxInV104s/NCV6DI= -----END CERTIFICATE-----Generated at Sun Jan 25 20:37:33 2026 by rpki-client