This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/d1087e91-df5b-397b-914d-19b3b91f8595.roa File: d1087e91-df5b-397b-914d-19b3b91f8595.roa (raw, json) Hash identifier: NtzK29cSE8noXxWKg+0MUeYraE7QX4UVMhNqLa7IisU= Subject key identifier: 95:E8:B1:51:8F:28:30:5F:38:87:7A:CA:A6:FD:44:D2:30:2B:18:E9 Certificate issuer: /CN=b40433ec-94a2-4c25-adea-c7cb2bd2bb1b Certificate serial: 010D0C9F4328584CA061C3813591266ED9E3EF80 Authority key identifier: D1:F0:E4:49:18:3A:E3:63:CC:22:68:CD:F4:46:C3:95:09:BA:75:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/d1087e91-df5b-397b-914d-19b3b91f8595.roa Signing time: Sat 24 Jan 2026 02:00:31 +0000 ROA not before: Sat 24 Jan 2026 02:00:31 +0000 ROA not after: Fri 24 Apr 2026 01:00:31 +0000 asID: 63089 IP address blocks: 104.156.16.0/20 maxlen: 24 104.243.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a0:61:c3:81:35:91:26:6e:d9:e3:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40433ec-94a2-4c25-adea-c7cb2bd2bb1b Validity Not Before: Jan 24 02:00:31 2026 GMT Not After : Apr 24 01:00:31 2026 GMT Subject: CN=c3a9e1d2-8c97-4ae4-8873-49000c3f9a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:96:79:81:53:24:37:ed:49:51:bc:b2:21:65: 56:b5:24:59:0b:92:a2:ad:c3:81:91:06:25:80:28: 03:83:0a:e8:ab:ac:04:79:28:a4:18:55:4c:76:18: f4:79:02:52:52:96:62:48:cc:b7:60:f6:3d:11:da: f1:01:48:da:c6:44:15:a8:dd:59:2e:d0:ae:d8:5c: 3e:4e:2a:4d:2b:3b:7f:54:3b:7c:f9:58:d6:3e:f5: b4:38:79:e2:a3:99:59:8a:54:5f:54:de:9f:0d:13: e4:f4:3a:7f:02:b7:10:81:58:82:14:a8:f6:a9:a9: 14:e7:98:4d:c6:bb:b9:14:33:42:8d:ac:91:95:9d: 50:77:11:1e:f7:e8:cb:46:7c:54:80:65:e8:e8:eb: 98:51:08:5b:08:2c:c9:21:03:15:f0:8e:57:f5:d8: 1b:75:8a:2b:f8:6d:51:e0:fa:f2:8c:61:a1:92:b5: e3:be:a4:28:8c:b7:5b:e0:9e:c5:3b:01:2b:23:fc: a3:18:44:53:5c:12:1c:db:2c:bc:a1:e6:71:fd:93: bc:05:0f:b1:88:50:71:30:36:dc:23:3f:07:0c:f9: 57:9c:23:d8:68:f6:08:53:46:f7:52:ff:bf:23:f2: 3c:0e:26:a9:0e:75:c0:c1:e2:9b:9e:9b:96:d4:35: 35:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E8:B1:51:8F:28:30:5F:38:87:7A:CA:A6:FD:44:D2:30:2B:18:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/d1087e91-df5b-397b-914d-19b3b91f8595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.crl X509v3 Authority Key Identifier: keyid:D1:F0:E4:49:18:3A:E3:63:CC:22:68:CD:F4:46:C3:95:09:BA:75:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b40433ec-94a2-4c25-adea-c7cb2bd2bb1b.cer sbgp-ipAddrBlock: critical IPv4: 104.156.16.0/20 104.243.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:99:23:5f:28:0e:66:21:be:05:7c:eb:da:28:56:18:c2:b8: 62:2d:f7:db:db:ac:1a:4d:8a:c9:c5:51:f6:7b:53:85:28:1d: 3c:d6:dd:72:b8:2d:3c:a5:df:07:dd:06:8b:cd:4e:4a:cf:ce: 81:04:61:ca:29:7f:89:a9:be:00:aa:4f:d0:8a:5a:59:04:8e: a9:6f:26:4f:91:e9:c5:7c:8f:45:cd:5a:e8:e3:42:af:42:73: ae:1f:81:01:86:e3:16:ac:68:6a:dc:6d:e7:80:be:ce:26:4b: a9:67:2d:b9:f5:ef:bf:ff:69:09:37:ce:58:45:59:cd:0d:ed: 69:81:91:85:c7:0a:3e:69:8b:40:c9:6a:c2:53:a0:03:5a:c0: b2:58:4d:f9:72:2c:25:3a:db:04:ca:1e:1d:b1:d4:fe:d0:fd: 92:2f:8f:a2:ee:24:14:42:67:f7:72:6a:c6:cd:c8:90:47:68: 1e:b4:eb:73:ad:2c:70:ed:a3:06:dc:5f:d5:ed:69:69:9d:8c: d8:e0:df:15:d8:59:6c:ec:d1:98:ce:1b:50:f3:b9:15:bc:63: 76:14:56:8e:7a:82:d7:87:b2:c5:03:46:81:6f:bc:07:15:ed: 53:9c:ce:db:52:bf:15:b0:f4:66:33:b5:b9:7f:68:3a:fc:62: d0:f0:57:68 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEygYcOBNZEmbtnj74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQwNDMzZWMtOTRhMi00YzI1LWFkZWEtYzdjYjJiZDJi YjFiMB4XDTI2MDEyNDAyMDAzMVoXDTI2MDQyNDAxMDAzMVowLzEtMCsGA1UEAxMk YzNhOWUxZDItOGM5Ny00YWU0LTg4NzMtNDkwMDBjM2Y5YTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJZ5gVMkN+1JUbyyIWVWtSRZC5KircOBkQYl gCgDgwroq6wEeSikGFVMdhj0eQJSUpZiSMy3YPY9EdrxAUjaxkQVqN1ZLtCu2Fw+ TipNKzt/VDt8+VjWPvW0OHnio5lZilRfVN6fDRPk9Dp/ArcQgViCFKj2qakU55hN xru5FDNCjayRlZ1QdxEe9+jLRnxUgGXo6OuYUQhbCCzJIQMV8I5X9dgbdYor+G1R 4PryjGGhkrXjvqQojLdb4J7FOwErI/yjGERTXBIc2yy8oeZx/ZO8BQ+xiFBxMDbc Iz8HDPlXnCPYaPYIU0b3Uv+/I/I8DiapDnXAweKbnpuW1DU1WwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJXosVGPKDBfOId6yqb9RNIwKxjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNDA0 MzNlYy05NGEyLTRjMjUtYWRlYS1jN2NiMmJkMmJiMWIvZDEwODdlOTEtZGY1Yi0z OTdiLTkxNGQtMTliM2I5MWY4NTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjQwNDMzZWMtOTRhMi00YzI1LWFk ZWEtYzdjYjJiZDJiYjFiL2I0MDQzM2VjLTk0YTItNGMyNS1hZGVhLWM3Y2IyYmQy YmIxYi5jcmwwHwYDVR0jBBgwFoAU0fDkSRg642PMImjN9EbDlQm6dbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNDA0MzNlYy05NGEyLTRjMjUtYWRlYS1jN2Ni MmJkMmJiMWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEaJwQAwQE aPOwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH+ZI18oDmYhvgV869ooVhjCuGIt99vbrBpNisnFUfZ7U4Uo HTzW3XK4LTyl3wfdBovNTkrPzoEEYcopf4mpvgCqT9CKWlkEjqlvJk+R6cV8j0XN WujjQq9Cc64fgQGG4xasaGrcbeeAvs4mS6lnLbn177//aQk3zlhFWc0N7WmBkYXH Cj5pi0DJasJToANawLJYTflyLCU62wTKHh2x1P7Q/ZIvj6LuJBRCZ/dyasbNyJBH aB6063OtLHDtowbcX9XtaWmdjNjg3xXYWWzs0ZjOG1DzuRW8Y3YUVo56gteHssUD RoFvvAcV7VOczttSvxWw9GYztbl/aDr8YtDwV2g= -----END CERTIFICATE-----Generated at Sun Jan 25 11:51:52 2026 by rpki-client