This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa File: af9062fc-c2de-328a-89b2-ae470ad5b211.roa (raw, json) Hash identifier: tBF1Zx2MExspD7IBzzpHwSeTSfGsQ4YqMP0dZ7hX7lc= Subject key identifier: E1:C8:11:5D:F5:FA:2A:46:63:B8:C6:01:EA:CC:56:56:0F:CA:AD:0F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C40111E01C3E5AFFDAE2D1BC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 15169 IP address blocks: 108.177.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:1e:01:c3:e5:af:fd:ae:2d:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=4a348c15-26d9-4ded-8153-f056fa388781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:e0:3c:6c:68:08:d2:b6:5a:3f:58:e4:ac: 17:cf:cf:ad:dd:86:75:b9:dd:ef:c4:51:23:1f:6b: b9:74:d1:4a:c7:37:28:fc:24:0f:39:60:e5:26:17: 26:8f:ae:df:17:f6:d8:fd:35:e2:20:5a:e0:ce:fb: 48:d4:9f:43:88:97:fc:20:8c:d2:14:fb:20:11:b4: 52:27:11:c6:8f:29:79:1a:cb:9c:d6:8f:95:e9:69: a0:5a:ba:1c:58:ec:8e:cb:ea:02:a8:17:52:d2:f5: 82:70:65:29:c4:c4:27:59:a1:42:58:34:28:a5:86: e9:9a:60:b6:02:68:96:6e:76:f8:74:24:46:a0:59: 5b:87:2a:2d:8c:a5:18:5e:ca:fc:3d:e4:d4:82:f6: 46:2f:4b:74:45:b3:80:f2:f5:07:d2:2c:e1:48:0d: 66:14:17:61:a7:d5:de:a8:81:01:3f:28:81:0e:66: 8e:f0:74:50:0b:73:44:47:68:a5:fb:0f:04:9b:b6: 07:9e:3e:e9:89:ae:cb:1f:5c:5f:22:54:30:3b:25: 4b:08:83:8c:56:b4:9c:b7:06:95:bc:f4:b1:3e:3f: 4e:89:0d:21:56:92:ad:0c:5e:4a:32:48:c6:cd:43: 07:44:bc:7a:20:20:17:7c:d0:f8:f3:74:6d:f7:c3: 8a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C8:11:5D:F5:FA:2A:46:63:B8:C6:01:EA:CC:56:56:0F:CA:AD:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/af9062fc-c2de-328a-89b2-ae470ad5b211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:5b:01:77:eb:d3:47:41:2b:f5:8f:19:20:3e:32:44:b1:f3: 52:b7:a0:d3:aa:9c:a3:d5:e5:82:8c:2a:f2:a1:32:24:6c:95: ac:d9:79:e4:1e:58:8e:2b:e0:7c:4d:da:10:3c:2b:88:50:17: 53:69:35:47:75:17:b4:3b:cd:36:80:6b:97:a2:cf:cb:02:7b: 00:46:07:fa:73:73:fa:a0:97:aa:71:cb:da:a5:05:6a:dd:df: 61:db:62:22:48:6c:b6:aa:82:94:9f:56:34:4a:2a:c5:8c:b1: 1a:73:1d:93:fa:87:13:bc:4d:16:e2:82:77:eb:39:1b:05:30: 52:fc:27:9e:39:94:98:a3:ff:1c:6a:d6:71:10:7c:26:f3:01: 95:fb:89:a6:bc:28:86:5a:00:6f:0b:57:89:6e:f1:06:0f:b1: 98:88:c0:d0:2e:84:97:72:8f:25:e7:c9:23:9a:4e:d2:27:34: fa:0d:e9:8a:1a:b8:20:25:ef:31:d7:8d:27:a1:16:80:56:47: fd:65:c9:11:4d:e8:0e:5c:e2:53:cb:9c:4d:f4:43:94:e4:28: be:56:03:a8:9b:17:e0:39:21:ef:d7:57:9e:75:c2:fa:29:9a: 1d:17:54:83:1d:e9:11:77:9a:dc:b8:98:d1:79:73:9a:c2:5b: 63:11:7b:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAER4Bw+Wv/a4tG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk NGEzNDhjMTUtMjZkOS00ZGVkLTgxNTMtZjA1NmZhMzg4NzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lTgPGxoCNK2Wj9Y5KwXz8+t3YZ1ud3vxFEj H2u5dNFKxzco/CQPOWDlJhcmj67fF/bY/TXiIFrgzvtI1J9DiJf8IIzSFPsgEbRS JxHGjyl5Gsuc1o+V6WmgWrocWOyOy+oCqBdS0vWCcGUpxMQnWaFCWDQopYbpmmC2 AmiWbnb4dCRGoFlbhyotjKUYXsr8PeTUgvZGL0t0RbOA8vUH0izhSA1mFBdhp9Xe qIEBPyiBDmaO8HRQC3NER2il+w8Em7YHnj7pia7LH1xfIlQwOyVLCIOMVrSctwaV vPSxPj9OiQ0hVpKtDF5KMkjGzUMHRLx6ICAXfND483Rt98OKZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHIEV31+ipGY7jGAerMVlYPyq0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWY5MDYyZmMtYzJkZS0z MjhhLTg5YjItYWU0NzBhZDViMjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbLEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNbAXfr00dBK/WPGSA+MkSx81K3oNOqnKPV5YKMKvKhMiRslazZeeQe WI4r4HxN2hA8K4hQF1NpNUd1F7Q7zTaAa5eiz8sCewBGB/pzc/qgl6pxy9qlBWrd 32HbYiJIbLaqgpSfVjRKKsWMsRpzHZP6hxO8TRbignfrORsFMFL8J545lJij/xxq 1nEQfCbzAZX7iaa8KIZaAG8LV4lu8QYPsZiIwNAuhJdyjyXnySOaTtInNPoN6Yoa uCAl7zHXjSehFoBWR/1lyRFN6A5c4lPLnE30Q5TkKL5WA6ibF+A5Ie/XV551wvop mh0XVIMd6RF3mty4mNF5c5rCW2MRe3I= -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:41 2026 by rpki-client