This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa File: c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa (raw, json) Hash identifier: uB8AuuZWmTFS+y8eldYzrrD3lqf8PhTSdIMTGPKRv6Q= Subject key identifier: 8C:2A:76:77:E9:19:45:2E:29:E3:6C:0C:E6:87:A4:D8:59:95:C5:DC Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584C6E216170AF46C2172C3D9A40 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 46408 IP address blocks: 104.255.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:61:70:af:46:c2:17:2c:3d:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=79f1adb7-73f0-49d3-affd-9e9b3dbfa656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:23:0b:72:72:bb:8f:53:d4:8c:e5:96:59:4b: d4:31:68:66:9d:95:f1:5e:f4:7b:91:c1:ed:f1:70: 59:30:31:af:80:ab:e6:3c:45:f8:fa:3b:6d:03:12: 32:97:83:b3:5b:ab:4b:dc:12:ba:cc:d1:41:f8:de: 8c:0e:93:91:8a:66:9d:1f:93:ab:ab:fa:38:a9:1c: 62:43:b6:10:46:d1:c6:20:34:1b:d3:c4:c6:83:44: 8f:a9:39:c5:fd:8b:a1:6e:96:82:d1:09:94:05:57: 1c:76:b9:39:21:d5:f7:cf:00:df:ea:72:95:be:a1: 9f:c5:88:e8:a1:a0:73:91:f3:d8:73:7b:ef:5c:e4: 2d:c3:ba:86:ae:6f:0d:c1:7a:cc:b5:17:e8:f7:4c: 2e:eb:ee:d8:68:9f:32:1a:da:61:f9:a8:45:00:a2: 94:9b:11:f7:a6:6c:ea:72:c2:27:36:10:f1:e1:07: 35:c0:18:2e:94:58:29:d6:bf:db:cd:5d:25:42:84: 45:39:54:34:49:1d:1d:78:06:6d:aa:c4:54:4f:f3: d1:2d:29:77:af:02:2f:ff:ec:24:ea:42:f7:8e:ab: a3:22:36:57:56:d2:e7:ad:40:13:d5:76:12:39:7e: bc:02:f9:69:3d:96:75:e4:a5:3f:9d:7a:43:8a:71: 66:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2A:76:77:E9:19:45:2E:29:E3:6C:0C:E6:87:A4:D8:59:95:C5:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 104.255.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:30:01:d5:e8:d9:16:9b:e1:32:b6:4c:3f:dd:64:33:f0:dc: c5:da:ef:18:3c:c1:81:2c:5e:15:04:cb:84:46:ec:86:6c:9b: 48:a8:30:86:03:76:d6:50:91:04:4e:ad:cd:36:fe:90:ad:24: 4c:73:69:78:6c:6e:6f:c3:b0:dc:5b:28:f6:49:63:f8:a6:57: 2c:9f:01:10:51:ff:2f:24:5f:a2:41:30:4d:e7:ad:5f:b0:91: 5c:ec:b9:8f:b5:5f:c1:66:e6:c0:7f:89:cb:ac:8d:94:8b:35: 84:7d:dc:a3:e5:56:29:be:3e:d0:ea:85:f8:fa:30:0e:b9:e7: ac:4a:ef:b7:f8:32:84:07:2e:eb:66:4c:e9:92:21:28:aa:28: 71:71:b7:d4:fb:ef:24:b7:65:3d:a5:42:f4:73:87:01:3f:9e: 77:b4:ba:83:05:58:b1:16:a4:de:34:25:eb:44:0d:3c:d9:b7: a9:01:6a:9f:c1:6c:0a:4a:d0:fe:1c:2b:1d:27:10:ee:9d:91: 7d:2d:43:ef:27:aa:d9:cb:ee:f6:01:20:42:de:62:75:15:ac: 1d:93:0e:f4:51:92:7a:c0:f8:7a:27:a9:24:4f:c2:5e:8a:99: 5c:08:ec:6b:82:78:76:dc:e1:b4:68:a5:a2:8b:de:70:ba:a8: 6a:0d:8b:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExuIWFwr0bCFyw9mkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk NzlmMWFkYjctNzNmMC00OWQzLWFmZmQtOWU5YjNkYmZhNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCMLcnK7j1PUjOWWWUvUMWhmnZXxXvR7kcHt 8XBZMDGvgKvmPEX4+jttAxIyl4OzW6tL3BK6zNFB+N6MDpORimadH5Orq/o4qRxi Q7YQRtHGIDQb08TGg0SPqTnF/YuhbpaC0QmUBVccdrk5IdX3zwDf6nKVvqGfxYjo oaBzkfPYc3vvXOQtw7qGrm8NwXrMtRfo90wu6+7YaJ8yGtph+ahFAKKUmxH3pmzq csInNhDx4Qc1wBgulFgp1r/bzV0lQoRFOVQ0SR0deAZtqsRUT/PRLSl3rwIv/+wk 6kL3jqujIjZXVtLnrUAT1XYSOX68AvlpPZZ15KU/nXpDinFmnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwqdnfpGUUuKeNsDOaHpNhZlcXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvYzg4NDdiZDQtYmU4ZS0z ZmNiLWFhZDktY2VhNDkwZGZiYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALswAdXo2Rab4TK2TD/dZDPw3MXa7xg8wYEsXhUEy4RG7IZsm0ioMIYD dtZQkQROrc02/pCtJExzaXhsbm/DsNxbKPZJY/imVyyfARBR/y8kX6JBME3nrV+w kVzsuY+1X8Fm5sB/icusjZSLNYR93KPlVim+PtDqhfj6MA6556xK77f4MoQHLutm TOmSISiqKHFxt9T77yS3ZT2lQvRzhwE/nne0uoMFWLEWpN40JetEDTzZt6kBap/B bApK0P4cKx0nEO6dkX0tQ+8nqtnL7vYBIELeYnUVrB2TDvRRknrA+HonqSRPwl6K mVwI7GuCeHbc4bRopaKL3nC6qGoNixc= -----END CERTIFICATE-----Generated at Sun Jan 25 17:03:32 2026 by rpki-client