This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa File: e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa (raw, json) Hash identifier: Rvr88ZJth9FVRVxuwSTaN6cWZDX3zRsOoqYW4wJltWM= Subject key identifier: AF:3B:06:FD:76:91:78:1A:E4:C0:E3:47:0C:C2:91:DE:7F:24:25:AD Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584C8A0C7EC760DD98831F1FE680 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 16557 IP address blocks: 72.21.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:7e:c7:60:dd:98:83:1f:1f:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=ce4da7fa-e394-4068-9b38-1a7371bbccf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:81:9f:e6:0c:f1:60:4d:f2:3a:32:7d:73:55: 1f:24:bd:2c:93:36:cc:f3:bb:75:d4:27:94:79:dc: cf:e0:c2:fa:87:7f:34:8a:11:b6:b3:e4:42:de:1a: e3:c8:92:67:f5:ad:81:d2:b0:e9:89:8c:c2:c0:57: 22:c7:36:7a:7d:44:62:87:52:d7:9b:11:5a:fb:f3: a5:1a:6f:60:75:57:d2:d4:73:83:7c:af:1f:26:6c: 94:b8:48:d2:2a:da:9d:21:1b:04:50:36:57:29:d7: f2:16:a8:eb:50:ac:7d:20:a8:53:47:b5:ac:d7:f9: b8:af:41:28:57:22:cd:2c:a2:7c:b3:11:de:29:e1: b9:3c:46:ef:d9:0a:92:14:d5:ef:30:bb:9a:be:ed: b9:3f:ca:b7:42:6c:f4:63:52:08:fe:c6:e6:84:ac: 8c:e7:e1:f9:d7:6e:91:dd:89:b2:eb:b2:a9:ab:76: 62:42:73:92:a6:25:5e:b2:91:e3:ba:49:cc:e2:38: 8c:81:17:e4:08:e7:9a:41:c7:a5:c2:1e:e4:5c:bb: 5c:79:0b:7b:51:c8:bb:98:a1:8a:90:dc:5e:da:41: 41:d2:14:e5:f4:a4:45:52:9a:a5:4a:f6:24:33:a5: 1e:5e:4f:aa:af:5b:a0:98:11:03:de:97:8d:b1:6e: a9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3B:06:FD:76:91:78:1A:E4:C0:E3:47:0C:C2:91:DE:7F:24:25:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 72.21.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:30:44:9a:a7:6b:9e:25:fe:9b:9c:bf:2a:a4:61:bc:56:d1: 3a:44:12:ce:64:b7:e5:48:83:4f:32:af:90:5c:db:f0:19:26: 88:d1:27:86:ae:40:a3:72:5d:c6:e6:56:72:97:1b:6d:6b:3a: 49:77:ad:05:e0:4e:29:a9:33:01:3c:23:c5:5d:84:ba:c9:f4: 20:70:26:d1:ff:52:c2:67:7b:cc:eb:b9:09:59:85:d0:d5:9b: aa:1e:a5:ce:04:56:05:1e:80:36:dc:cf:2f:49:ca:22:50:b0: 10:20:05:c8:b6:ac:99:4d:07:c8:e9:1e:e6:57:8f:e9:e7:43: 15:58:45:be:ed:65:a5:cd:ad:b8:33:ed:45:87:5f:35:00:1d: 66:81:ef:f3:76:44:22:4b:b6:1b:f0:6f:e6:50:28:8c:f1:27: 10:28:cf:20:e5:fd:7c:24:6e:24:56:e6:16:e5:c1:ca:00:cf: 1a:b3:45:b7:61:af:9a:e8:48:be:e1:cd:a4:f8:e7:b6:7c:ca: 13:0d:ce:a8:bb:de:bd:b9:ec:95:aa:96:ba:42:c0:60:28:0d: c3:5a:d6:b4:18:80:61:9e:69:c6:19:dc:35:78:90:cf:af:0d: 62:5d:12:50:52:2d:7e:98:ce:f2:97:a1:1a:7e:f2:e9:3b:22: 5c:85:36:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDH7HYN2Ygx8f5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk Y2U0ZGE3ZmEtZTM5NC00MDY4LTliMzgtMWE3MzcxYmJjY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIGf5gzxYE3yOjJ9c1UfJL0skzbM87t11CeU edzP4ML6h380ihG2s+RC3hrjyJJn9a2B0rDpiYzCwFcixzZ6fURih1LXmxFa+/Ol Gm9gdVfS1HODfK8fJmyUuEjSKtqdIRsEUDZXKdfyFqjrUKx9IKhTR7Ws1/m4r0Eo VyLNLKJ8sxHeKeG5PEbv2QqSFNXvMLuavu25P8q3Qmz0Y1II/sbmhKyM5+H5126R 3Ymy67Kpq3ZiQnOSpiVespHjuknM4jiMgRfkCOeaQcelwh7kXLtceQt7Uci7mKGK kNxe2kFB0hTl9KRFUpqlSvYkM6UeXk+qr1ugmBED3peNsW6p2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK87Bv12kXga5MDjRwzCkd5/JCWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvZTA4MDZiODQtM2QyZC0z NWJhLTgxZmUtZTNkMWE5MzgxZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAswRJqna54l/pucvyqkYbxW0TpEEs5kt+VIg08yr5Bc2/AZJojRJ4au QKNyXcbmVnKXG21rOkl3rQXgTimpMwE8I8VdhLrJ9CBwJtH/UsJne8zruQlZhdDV m6oepc4EVgUegDbczy9JyiJQsBAgBci2rJlNB8jpHuZXj+nnQxVYRb7tZaXNrbgz 7UWHXzUAHWaB7/N2RCJLthvwb+ZQKIzxJxAozyDl/XwkbiRW5hblwcoAzxqzRbdh r5roSL7hzaT457Z8yhMNzqi73r257JWqlrpCwGAoDcNa1rQYgGGeacYZ3DV4kM+v DWJdElBSLX6YzvKXoRp+8uk7IlyFNqw= -----END CERTIFICATE-----Generated at Sun Jan 25 23:09:08 2026 by rpki-client