This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22dcbfbd-c829-3508-b0a4-eec691ff1a6e.roa File: 22dcbfbd-c829-3508-b0a4-eec691ff1a6e.roa (raw, json) Hash identifier: yiCOFjaaqWJDbiIPvyG4nYJddknhRx+asHBRMQMpxkU= Subject key identifier: 6D:A1:20:50:92:B9:BB:19:6D:E3:9C:54:A6:56:35:E8:C0:83:48:26 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C8E3C73F17FFD55CDB5885AC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22dcbfbd-c829-3508-b0a4-eec691ff1a6e.roa Signing time: Sat 17 Jan 2026 14:00:38 +0000 ROA not before: Sat 17 Jan 2026 14:00:38 +0000 ROA not after: Fri 17 Apr 2026 13:00:38 +0000 asID: 31898 IP address blocks: 168.138.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8e:3c:73:f1:7f:fd:55:cd:b5:88:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 17 14:00:38 2026 GMT Not After : Apr 17 13:00:38 2026 GMT Subject: CN=c205de52-c602-45d2-a0bb-10b175e2881d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0a:88:bd:47:a8:99:b7:54:ca:8b:ca:71:2d: 55:1d:ef:7a:eb:d2:25:f7:fe:10:40:f8:b0:82:24: 18:25:30:f1:cc:97:a3:c2:00:a6:f7:3b:29:af:f6: c6:33:0d:6f:16:f9:96:08:a7:9f:3b:89:80:d5:28: f8:0a:5d:6a:a6:25:0e:17:11:ca:1a:90:3c:bd:2b: 50:f8:b0:d5:75:45:29:4a:bc:97:64:14:ac:10:11: b9:7b:ec:6e:ea:71:e9:73:36:85:0f:3b:1c:35:9d: 03:bf:b7:c5:63:d9:a6:f7:f6:cf:41:3f:e9:2a:64: 9f:fb:10:42:f0:e1:3f:ee:6c:d8:b6:43:8a:40:4a: 6c:cd:0a:08:21:24:f6:85:ef:ec:90:1f:34:d6:f2: 5e:22:53:3c:ad:08:89:ac:44:4e:ea:28:fe:bc:e0: 56:cd:73:6a:1c:e8:7e:ad:ec:1e:3b:24:66:e3:53: 48:f1:9e:50:b7:9a:05:56:f5:5c:95:a9:89:05:31: 08:e8:84:17:9d:dd:63:36:6c:b4:a0:ce:f7:61:fb: f7:32:be:85:3a:79:96:6f:b2:8c:a8:ac:9d:1e:b9: 28:42:f5:b8:d8:1b:0d:2c:12:77:3d:36:59:0e:49: 52:83:39:e0:a3:5f:03:14:49:2b:bb:91:25:6c:42: 56:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A1:20:50:92:B9:BB:19:6D:E3:9C:54:A6:56:35:E8:C0:83:48:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22dcbfbd-c829-3508-b0a4-eec691ff1a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 168.138.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:77:7d:ec:55:f4:ce:0d:dc:13:81:10:6c:91:fb:fa:f6:c5: 44:4c:33:81:5e:25:e3:78:3d:dd:97:8d:7a:7b:74:59:0e:cd: d4:1d:03:ed:29:d6:d4:4d:7d:fb:18:ab:4a:57:91:ae:81:5e: 55:67:1f:63:7e:f8:31:2e:b6:94:63:10:96:24:a5:43:7a:9b: 3f:4d:4b:ca:96:de:ff:ac:ce:a8:7f:bd:48:62:39:0f:f5:9b: dc:03:5d:2c:32:3b:10:ff:93:f1:a4:5c:70:da:37:71:cf:6b: 85:50:dc:ec:2c:ba:5c:0a:fa:08:fe:73:ba:dc:47:e4:5a:24: 6f:43:47:6c:a9:69:a7:a0:43:bf:74:9a:a8:42:34:fc:e7:c7: 6f:84:30:53:cd:26:f8:57:10:47:a0:20:c2:e0:41:2a:c0:7d: fd:bf:e3:32:a2:eb:77:a4:98:5f:8d:ad:66:ee:17:cb:91:76: 72:1e:cf:0d:c9:46:2c:89:47:f6:04:fe:92:65:89:b3:80:88: 77:6f:a8:d4:5a:68:f8:12:aa:b5:2b:f4:e8:24:70:8c:7a:d1: 72:da:63:13:b7:83:e0:e9:ce:5b:a1:a9:d4:cf:b2:ab:80:4d: 88:dc:69:a8:4c:f5:c7:b5:be:41:d4:8e:d3:c7:b5:84:5e:26: 11:09:c2:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyOPHPxf/1VzbWIWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDExNzE0MDAzOFoXDTI2MDQxNzEzMDAzOFowLzEtMCsGA1UEAxMk YzIwNWRlNTItYzYwMi00NWQyLWEwYmItMTBiMTc1ZTI4ODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQqIvUeombdUyovKcS1VHe9669Il9/4QQPiw giQYJTDxzJejwgCm9zspr/bGMw1vFvmWCKefO4mA1Sj4Cl1qpiUOFxHKGpA8vStQ +LDVdUUpSryXZBSsEBG5e+xu6nHpczaFDzscNZ0Dv7fFY9mm9/bPQT/pKmSf+xBC 8OE/7mzYtkOKQEpszQoIIST2he/skB801vJeIlM8rQiJrERO6ij+vOBWzXNqHOh+ reweOyRm41NI8Z5Qt5oFVvVclamJBTEI6IQXnd1jNmy0oM73Yfv3Mr6FOnmWb7KM qKydHrkoQvW42BsNLBJ3PTZZDklSgzngo18DFEkru5ElbEJWDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2hIFCSubsZbeOcVKZWNejAg0gmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjJkY2JmYmQtYzgyOS0z NTA4LWIwYTQtZWVjNjkxZmYxYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF3fexV9M4N3BOBEGyR+/r2xURMM4FeJeN4Pd2XjXp7dFkOzdQdA+0p 1tRNffsYq0pXka6BXlVnH2N++DEutpRjEJYkpUN6mz9NS8qW3v+szqh/vUhiOQ/1 m9wDXSwyOxD/k/GkXHDaN3HPa4VQ3OwsulwK+gj+c7rcR+RaJG9DR2ypaaegQ790 mqhCNPznx2+EMFPNJvhXEEegIMLgQSrAff2/4zKi63ekmF+NrWbuF8uRdnIezw3J RiyJR/YE/pJlibOAiHdvqNRaaPgSqrUr9OgkcIx60XLaYxO3g+DpzluhqdTPsquA TYjcaahM9ce1vkHUjtPHtYReJhEJwiA= -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:20 2026 by rpki-client