This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa File: 891439fd-34b5-3a59-98cf-17456b30b05b.roa (raw, json) Hash identifier: H8b2BhNP6y8S/R2Qz8HdJttWRmd4RF8H4d71HXych/Y= Subject key identifier: 59:06:2A:86:DA:CA:15:B9:53:8F:5C:2B:A6:4E:7E:4E:86:4F:5F:EE Certificate issuer: /CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b Certificate serial: 010D0C9F4328584C93D1A3AC1EC122700DC0E300 Authority key identifier: EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa Signing time: Mon 19 Jan 2026 14:00:38 +0000 ROA not before: Mon 19 Jan 2026 14:00:38 +0000 ROA not after: Sun 19 Apr 2026 13:00:38 +0000 asID: 32003 IP address blocks: 104.243.144.0/20 maxlen: 24 199.38.168.0/22 maxlen: 24 2606:780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:93:d1:a3:ac:1e:c1:22:70:0d:c0:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b Validity Not Before: Jan 19 14:00:38 2026 GMT Not After : Apr 19 13:00:38 2026 GMT Subject: CN=8d767f43-195b-4171-906f-205c1a91cdaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a1:6d:cc:f0:c9:54:d4:8f:57:97:7e:83:c4: 64:ed:55:64:3c:a9:42:ec:a7:9d:61:c7:b1:13:4c: 28:e5:1e:24:24:f6:e5:09:bd:6d:8c:e0:77:46:31: cc:08:ad:27:64:ae:66:e6:e2:cb:28:2a:30:73:c7: bc:1e:ba:35:5a:34:83:dc:63:d8:d8:f2:ce:0e:65: ef:34:a4:91:20:27:3b:0d:4a:c2:72:83:c1:f8:b1: 53:12:4e:6b:c4:fc:fe:44:80:c2:73:a1:51:aa:80: 8f:3c:f7:1f:57:a9:94:89:01:4c:b2:bf:c8:4f:e4: 37:93:62:4e:1a:3e:fa:7c:3a:1f:ae:f2:35:1c:2b: 6d:89:9d:ae:d1:7c:c7:af:32:79:5a:c3:44:89:34: ef:11:c5:64:62:2c:09:de:4d:ec:87:f4:ca:58:04: 9b:e8:14:a9:92:fd:eb:32:41:97:b9:ec:17:04:af: 6e:13:ba:d8:f9:ec:cf:23:a2:82:d1:56:cd:70:68: 1b:b4:e2:4e:f7:46:c6:cc:f3:e8:2f:dc:c7:75:c9: 07:b5:ba:78:78:c9:18:6c:42:02:87:61:57:9c:4f: 43:d8:17:a3:ac:b4:20:f6:3e:d4:55:f7:2d:74:1c: 84:09:b0:11:b7:45:5b:f4:c2:6d:77:f5:fb:d6:99: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:06:2A:86:DA:CA:15:B9:53:8F:5C:2B:A6:4E:7E:4E:86:4F:5F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.crl X509v3 Authority Key Identifier: keyid:EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer sbgp-ipAddrBlock: critical IPv4: 104.243.144.0/20 199.38.168.0/22 IPv6: 2606:780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a3:bb:ca:7e:9d:d2:db:c7:41:e1:1d:90:af:1b:87:3f:65: 80:75:c4:1a:cb:7d:62:13:b4:bf:b2:f3:40:2e:97:94:b8:cb: 12:fb:e6:38:53:d8:6b:78:96:0d:3d:36:11:b7:9b:ac:65:95: 41:ef:26:7f:ee:89:f0:50:b5:cb:e2:a1:6c:dd:f7:d8:47:06: 4a:97:fe:17:52:a5:a9:dd:ef:37:82:9b:43:d9:aa:7d:40:fa: 1f:a9:f3:2c:0c:b6:d0:f4:41:1e:71:6d:a3:9c:74:a2:ea:11: bf:5d:a3:b6:17:db:94:a6:4f:ad:c9:6d:cf:64:28:60:48:ab: b9:f7:cc:ce:8f:26:65:51:f3:14:a4:2a:6b:91:3e:26:74:35: 60:3e:a7:6a:1b:c0:29:3d:0c:fe:73:43:45:ce:ef:9d:3c:29: f4:9f:8a:3c:76:3c:e3:a4:62:60:fd:22:57:25:6f:8f:86:bb: 06:41:79:4f:ce:d5:d4:b3:71:d6:c7:b6:03:8c:ed:a4:ba:e9: fc:d8:31:70:28:a8:dc:af:3a:d7:9a:19:32:fd:67:b5:51:6e: b5:51:ef:17:16:77:de:6d:85:04:ef:11:3c:7c:63:0a:c9:c8: 1e:b3:67:d7:82:2c:0a:12:87:ef:74:16:c5:35:1c:cb:88:cd: f0:07:12:f3 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEyT0aOsHsEicA3A4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U1Nzg3N2MtODlhZC00ZDE0LTliMmMtM2ZiZDQ0MGIw MDNiMB4XDTI2MDExOTE0MDAzOFoXDTI2MDQxOTEzMDAzOFowLzEtMCsGA1UEAxMk OGQ3NjdmNDMtMTk1Yi00MTcxLTkwNmYtMjA1YzFhOTFjZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKFtzPDJVNSPV5d+g8Rk7VVkPKlC7KedYcex E0wo5R4kJPblCb1tjOB3RjHMCK0nZK5m5uLLKCowc8e8Hro1WjSD3GPY2PLODmXv NKSRICc7DUrCcoPB+LFTEk5rxPz+RIDCc6FRqoCPPPcfV6mUiQFMsr/IT+Q3k2JO Gj76fDofrvI1HCttiZ2u0XzHrzJ5WsNEiTTvEcVkYiwJ3k3sh/TKWASb6BSpkv3r MkGXuewXBK9uE7rY+ezPI6KC0VbNcGgbtOJO90bGzPPoL9zHdckHtbp4eMkYbEIC h2FXnE9D2BejrLQg9j7UVfctdByECbARt0Vb9MJtd/X71pnC8QIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFkGKobayhW5U49cK6ZOfk6GT1/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3 ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJkNDQwYjAwM2IvODkxNDM5ZmQtMzRiNS0z YTU5LTk4Y2YtMTc0NTZiMzBiMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2U1Nzg3N2MtODlhZC00ZDE0LTli MmMtM2ZiZDQ0MGIwMDNiL2NlNTc4NzdjLTg5YWQtNGQxNC05YjJjLTNmYmQ0NDBi MDAzYi5jcmwwHwYDVR0jBBgwFoAU7o+JJocvszr18UaPE7bxxh8SVkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJk NDQwYjAwM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEaPOQAwQC xyaoMA0EAgACMAcDBQAmBgeAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE+ju8p+ndLbx0HhHZCvG4c/ZYB1 xBrLfWITtL+y80Aul5S4yxL75jhT2Gt4lg09NhG3m6xllUHvJn/uifBQtcvioWzd 99hHBkqX/hdSpand7zeCm0PZqn1A+h+p8ywMttD0QR5xbaOcdKLqEb9do7YX25Sm T63Jbc9kKGBIq7n3zM6PJmVR8xSkKmuRPiZ0NWA+p2obwCk9DP5zQ0XO7508KfSf ijx2POOkYmD9Ilclb4+GuwZBeU/O1dSzcdbHtgOM7aS66fzYMXAoqNyvOteaGTL9 Z7VRbrVR7xcWd95thQTvETx8YwrJyB6zZ9eCLAoSh+90FsU1HMuIzfAHEvM= -----END CERTIFICATE-----Generated at Sun Jan 25 17:31:53 2026 by rpki-client