This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa File: a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa (raw, json) Hash identifier: mWuRLzPn+95L43eokK9oBHzuaK2njeh6NvwtLoHf1iw= Subject key identifier: B1:6A:FC:D5:14:06:41:20:F7:45:8D:4E:88:59:EA:E2:D1:5C:A2:13 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A759856864BB1D087A5080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 208.68.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:59:85:68:64:bb:1d:08:7a:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=97ce35d9-70aa-4ddb-901c-5306e59252b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ce:cf:9a:56:9a:34:f3:a6:ed:c7:33:3f:de: c1:ff:d1:83:9a:68:e4:0e:2e:76:1c:10:d7:e4:3a: f6:ec:28:44:99:97:45:87:fc:fa:b5:32:b7:27:46: 8d:ec:ea:fd:04:f2:73:07:c8:21:91:0b:bf:e9:ac: e7:a2:a8:c9:0b:eb:21:63:15:09:ee:27:9f:9e:4b: fb:f1:d1:d4:9d:53:4f:af:13:b2:41:4f:fb:24:ce: 05:53:09:b2:ed:59:fb:5b:b4:ce:f1:63:0f:a0:7c: cd:ab:c3:4c:20:af:f1:39:ce:17:d5:4e:22:80:8a: f8:39:3b:a0:4b:ce:f3:44:59:25:58:78:85:f9:50: ae:7b:ca:58:03:81:9b:ba:05:aa:a2:f9:cc:c7:6a: 58:df:bd:2e:4b:e7:ac:72:41:04:b7:4a:78:6c:5f: a3:63:88:eb:66:5a:d5:86:77:6c:48:92:34:e1:65: d2:65:b3:e6:6b:ba:0d:31:7c:64:5d:6f:01:1a:75: 69:5c:79:a7:cf:9d:2d:48:32:ff:8c:c6:d9:fc:1c: 15:b8:49:a7:30:8e:2a:12:82:63:f9:e8:78:38:44: c7:50:d4:c4:70:a1:a3:bf:94:fa:b6:2e:39:2e:64: 17:8b:67:9c:dd:f2:bb:ab:61:7d:6b:21:97:fa:66: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6A:FC:D5:14:06:41:20:F7:45:8D:4E:88:59:EA:E2:D1:5C:A2:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:95:44:c3:0a:7a:a2:5d:b7:13:d5:0c:57:c6:a7:30:59:17: de:6c:bd:70:66:94:bf:7a:50:e4:2a:65:7b:bc:c5:a0:e1:38: 97:aa:a4:b0:be:db:51:ac:94:f3:a0:b4:de:6d:24:cb:6c:bf: 83:cf:5c:26:f0:c9:1c:ee:20:f5:46:69:a5:0b:1f:20:ed:8f: 02:7d:78:a4:92:1b:25:8e:76:99:76:35:58:88:f8:10:49:6c: ac:e0:8d:1c:e4:f4:64:86:ad:76:10:92:22:49:af:b6:7b:f8: c7:68:bf:16:a1:a4:89:73:4a:7c:6c:3a:08:9c:0c:aa:87:d2: e2:75:c9:54:15:0d:6a:f6:c6:49:6c:20:d1:2a:19:cb:c6:44: 81:e2:75:d7:a4:bf:78:1a:ea:2d:4a:a8:2b:f1:c4:48:3f:2f: 36:71:a0:0c:f3:b0:44:54:2d:6c:33:e3:21:1f:31:63:19:f6: 11:a3:80:e7:7d:b8:67:5d:60:cf:12:cd:17:d2:54:f3:88:5f: 0d:62:36:5d:c9:1a:7a:8d:b7:39:7b:59:60:b7:59:40:31:3c: 18:50:4e:c4:e9:e8:b3:16:a0:71:a9:7a:14:42:31:f2:36:ce: 89:aa:f9:bc:60:4d:c0:aa:59:38:17:cf:fd:db:18:c4:b2:f6: 51:25:d5:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp1mFaGS7HQh6UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk OTdjZTM1ZDktNzBhYS00ZGRiLTkwMWMtNTMwNmU1OTI1MmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl87PmlaaNPOm7cczP97B/9GDmmjkDi52HBDX 5Dr27ChEmZdFh/z6tTK3J0aN7Or9BPJzB8ghkQu/6aznoqjJC+shYxUJ7iefnkv7 8dHUnVNPrxOyQU/7JM4FUwmy7Vn7W7TO8WMPoHzNq8NMIK/xOc4X1U4igIr4OTug S87zRFklWHiF+VCue8pYA4GbugWqovnMx2pY370uS+esckEEt0p4bF+jY4jrZlrV hndsSJI04WXSZbPma7oNMXxkXW8BGnVpXHmnz50tSDL/jMbZ/BwVuEmnMI4qEoJj +eh4OETHUNTEcKGjv5T6ti45LmQXi2ec3fK7q2F9ayGX+mamEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFq/NUUBkEg90WNTohZ6uLRXKITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTFmOGIyOGUtMzBiOS0z Y2VmLThlNzItOGNiNjc1ODJiNGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeVRMMKeqJdtxPVDFfGpzBZF95svXBmlL96UOQqZXu8xaDhOJeqpLC+ 21GslPOgtN5tJMtsv4PPXCbwyRzuIPVGaaULHyDtjwJ9eKSSGyWOdpl2NViI+BBJ bKzgjRzk9GSGrXYQkiJJr7Z7+MdovxahpIlzSnxsOgicDKqH0uJ1yVQVDWr2xkls INEqGcvGRIHiddekv3ga6i1KqCvxxEg/LzZxoAzzsERULWwz4yEfMWMZ9hGjgOd9 uGddYM8SzRfSVPOIXw1iNl3JGnqNtzl7WWC3WUAxPBhQTsTp6LMWoHGpehRCMfI2 zomq+bxgTcCqWTgXz/3bGMSy9lEl1SA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:30:48 2026 by rpki-client