This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d67fdd97-1889-3aed-be21-4c33f4030ea7.roa File: d67fdd97-1889-3aed-be21-4c33f4030ea7.roa (raw, json) Hash identifier: JwlXK9seDRBCf/KzDPA5qtkZZCNlXHGgC+a/Vtdfx0k= Subject key identifier: 3E:3A:A9:94:77:30:D4:6B:49:FB:F5:F1:33:88:B5:B9:CF:6B:00:E3 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C5BFBDD917F96B5242A1C7000 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d67fdd97-1889-3aed-be21-4c33f4030ea7.roa Signing time: Tue 30 Dec 2025 14:00:38 +0000 ROA not before: Tue 30 Dec 2025 14:00:38 +0000 ROA not after: Mon 30 Mar 2026 13:00:38 +0000 asID: 30036 IP address blocks: 107.167.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5b:fb:dd:91:7f:96:b5:24:2a:1c:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Dec 30 14:00:38 2025 GMT Not After : Mar 30 13:00:38 2026 GMT Subject: CN=8863df1d-a6ed-496a-96d7-a0bac6abfada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a5:18:ce:f1:8e:29:aa:54:88:a9:de:0a:de: 1f:47:aa:a3:b9:0d:3b:cf:d4:f4:d4:ae:98:4e:a5: 2f:33:24:37:ea:c7:64:98:f4:a7:b9:24:9b:f4:5e: c6:2f:15:1e:aa:b6:8b:d7:1c:be:4d:89:58:29:33: a0:0a:1b:b3:fc:ee:f2:34:dd:9b:94:57:d5:93:08: a9:5d:93:d5:ac:bd:6a:fd:12:0d:10:22:b8:b7:79: 7d:cb:7d:f3:19:bf:b8:a5:19:80:67:42:e3:e0:9d: 4f:f8:2d:af:50:ce:e5:3b:75:19:4c:e0:00:00:52: 76:7f:fb:15:5f:b3:4f:1a:e0:f4:a2:bf:e0:a1:92: cb:44:a9:9f:70:b2:c4:ee:a5:a6:fb:56:ba:f6:03: 3e:52:ff:83:b6:c9:50:df:43:78:cf:f6:b5:89:3d: 7f:8d:14:b2:68:b6:a0:e2:9e:e7:e3:a7:b0:e3:63: 20:00:60:2a:9f:99:7c:cd:42:fe:6e:93:63:2c:9c: da:4b:eb:ba:48:80:2f:74:ce:8c:db:8d:1a:e0:7e: 5e:21:c4:e8:a3:12:3d:82:25:99:e1:a2:3c:74:60: 18:f5:45:b8:bd:70:62:50:9b:0f:93:8a:cf:01:b0: d2:e2:27:9f:50:1f:02:b4:0b:d0:14:6a:e3:7c:55: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3A:A9:94:77:30:D4:6B:49:FB:F5:F1:33:88:B5:B9:CF:6B:00:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d67fdd97-1889-3aed-be21-4c33f4030ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 107.167.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:8d:49:3e:1e:db:aa:5d:87:bb:6e:c4:a8:98:42:df:24:fa: 27:69:c2:12:72:f5:36:38:f9:11:62:bf:37:17:2d:e6:ee:13: b9:f5:a6:e3:ba:a3:be:1c:41:5a:68:64:f8:dd:1c:f4:a2:f4: 9b:4c:19:40:1b:b7:89:76:43:b5:d7:03:f9:a3:c9:94:dd:de: 4f:0b:36:82:97:fe:3f:55:a7:2d:f5:a1:c3:ee:67:17:1e:8c: 3d:bd:d6:61:c8:d3:b0:b0:0d:f1:c8:70:9f:43:c4:7e:6a:ec: 05:db:2c:bb:b1:ff:e1:70:eb:12:98:3c:68:76:46:83:4a:9c: 24:f3:94:a5:0d:6c:b2:a5:77:4f:f9:89:a1:67:e9:9f:6f:ac: b4:2e:a0:e2:c5:da:b5:0b:81:a6:8a:1b:84:7e:05:db:78:0c: e1:df:32:db:a4:ba:01:05:da:6b:4c:5d:1d:64:56:67:5b:4a: 20:81:bc:03:0b:a7:98:5e:f5:56:95:b7:a6:34:cf:d4:48:d8: 49:d5:1f:db:37:d1:5a:2a:23:57:0c:b1:95:3e:1e:92:51:cc: 30:46:4f:dc:5f:bc:95:bb:ee:8b:16:ad:75:79:ab:f7:96:31: 89:32:a2:f1:d4:26:1b:6a:a3:3b:d2:ab:2b:46:07:dd:74:cb: ac:ae:b5:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExb+92Rf5a1JCoccAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTIzMDE0MDAzOFoXDTI2MDMzMDEzMDAzOFowLzEtMCsGA1UEAxMk ODg2M2RmMWQtYTZlZC00OTZhLTk2ZDctYTBiYWM2YWJmYWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKUYzvGOKapUiKneCt4fR6qjuQ07z9T01K6Y TqUvMyQ36sdkmPSnuSSb9F7GLxUeqraL1xy+TYlYKTOgChuz/O7yNN2blFfVkwip XZPVrL1q/RINECK4t3l9y33zGb+4pRmAZ0Lj4J1P+C2vUM7lO3UZTOAAAFJ2f/sV X7NPGuD0or/goZLLRKmfcLLE7qWm+1a69gM+Uv+DtslQ30N4z/a1iT1/jRSyaLag 4p7n46ew42MgAGAqn5l8zUL+bpNjLJzaS+u6SIAvdM6M240a4H5eIcTooxI9giWZ 4aI8dGAY9UW4vXBiUJsPk4rPAbDS4iefUB8CtAvQFGrjfFU2UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD46qZR3MNRrSfv18TOItbnPawDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDY3ZmRkOTctMTg4OS0z YWVkLWJlMjEtNGMzM2Y0MDMwZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6fMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGONST4e26pdh7tuxKiYQt8k+idpwhJy9TY4+RFivzcXLebuE7n1puO6 o74cQVpoZPjdHPSi9JtMGUAbt4l2Q7XXA/mjyZTd3k8LNoKX/j9Vpy31ocPuZxce jD291mHI07CwDfHIcJ9DxH5q7AXbLLux/+Fw6xKYPGh2RoNKnCTzlKUNbLKld0/5 iaFn6Z9vrLQuoOLF2rULgaaKG4R+Bdt4DOHfMtukugEF2mtMXR1kVmdbSiCBvAML p5he9VaVt6Y0z9RI2EnVH9s30VoqI1cMsZU+HpJRzDBGT9xfvJW77osWrXV5q/eW MYkyovHUJhtqozvSqytGB910y6yutXU= -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:10 2026 by rpki-client