This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa File: 40be57dc-7156-3f97-b77b-4e30e5469063.roa (raw, json) Hash identifier: C9oCdNe/ZLK31g4l00bqF1/c/W1FdAjUKtKr8f5zlZI= Subject key identifier: 20:96:05:F0:3F:20:DA:BE:F2:78:DB:21:B6:FC:0F:A1:0C:4B:EC:C9 Certificate issuer: /CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9 Certificate serial: 010D0C9F4328584C5EC69B2E8D3866D959291100 Authority key identifier: CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 54911 IP address blocks: 104.171.32.0/20 maxlen: 20 104.171.36.0/22 maxlen: 22 104.171.39.0/24 maxlen: 24 104.171.40.0/22 maxlen: 22 104.171.40.0/24 maxlen: 24 104.171.41.0/24 maxlen: 24 104.171.43.0/24 maxlen: 24 104.171.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:9b:2e:8d:38:66:d9:59:29:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=b8b213d6-272a-4659-8da0-bd38b98f8aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:74:5a:e2:97:21:d3:bc:dc:c5:e1:33:b3: 67:6f:5d:e0:f5:2c:8a:fa:f7:ce:cf:42:f7:a0:10: 56:52:8c:07:e7:5b:56:5e:8f:7f:83:0e:2a:88:02: 15:f0:3a:7a:ab:22:45:4e:a0:e6:64:64:30:8e:36: 0f:81:59:22:b9:60:15:97:63:c8:0e:bc:68:8e:0a: 06:e0:32:66:5d:a3:ff:70:b8:d4:dc:f6:ae:dd:81: 45:94:70:dc:e7:dd:3a:4a:f3:d0:f6:51:3d:5b:89: ee:68:4d:1a:c4:f2:e0:80:f9:e3:e1:42:e7:58:37: 08:2a:95:e2:7b:b2:88:ef:38:08:1c:7c:ac:03:df: b8:88:a4:36:90:1b:00:75:36:29:29:76:02:03:df: d8:e9:29:99:59:25:d8:b4:44:a9:4c:97:c3:70:74: 41:91:2e:af:96:3d:ac:83:29:ee:6f:a2:3c:15:aa: 50:13:28:91:4d:bc:dc:76:dd:c0:08:86:e9:7e:88: 21:c9:72:64:9a:9e:e8:25:40:01:67:38:70:bc:61: 3a:a1:05:a7:3d:1b:f0:9e:82:67:00:25:16:b8:9f: e9:75:a6:27:e2:cd:d3:04:e9:89:53:1c:fa:23:c7: 80:c5:64:c5:cd:c1:64:9d:74:4f:b2:26:0b:b7:08: 76:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:96:05:F0:3F:20:DA:BE:F2:78:DB:21:B6:FC:0F:A1:0C:4B:EC:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.crl X509v3 Authority Key Identifier: keyid:CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer sbgp-ipAddrBlock: critical IPv4: 104.171.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:32:f9:77:f2:2b:ea:73:a7:fa:72:66:00:f4:0d:6a:b8:06: 92:67:62:79:17:a5:e5:14:5b:0d:b1:48:35:19:c5:5c:60:89: 53:0a:b8:f2:4e:14:b2:2a:3e:5c:08:39:04:1a:2b:1b:05:58: f1:6d:50:6d:94:87:c5:fa:31:87:b4:b5:0f:a3:80:62:94:47: 13:ba:bd:b9:c8:14:64:ef:0e:a8:5b:32:73:1f:1e:7f:d8:4d: 58:93:88:6c:ae:d0:e7:a6:d9:fe:89:73:c8:0a:b1:83:a3:58: e3:7e:75:33:99:57:80:50:f0:72:33:a1:fe:62:6f:6c:a6:4d: 59:49:98:c0:61:2d:41:76:db:1c:4e:85:70:ab:2f:1b:a4:f9: f8:2c:e2:64:c6:76:8e:28:93:c4:2d:89:94:03:ef:ea:75:ef: d0:cd:e3:3b:f3:5d:fa:d9:d3:46:2f:8e:e3:86:67:06:07:11: 42:77:9e:52:de:49:be:a8:6b:e2:9b:04:6a:62:7c:21:4f:2e: d1:36:2a:cc:29:ab:2f:79:ea:74:62:42:ab:f2:d7:ab:44:fb: 78:6c:08:b4:02:c1:18:87:35:a3:73:18:f0:45:7f:0c:82:90: c2:41:f3:64:70:bd:21:af:94:32:db:b9:29:6e:b9:a7:fa:67: 80:1d:4f:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexpsujThm2VkpEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJiODlmOTEtYTlhMS00ZDg4LWI5ZDAtZjc4ODJlYTEz NGE5MB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk YjhiMjEzZDYtMjcyYS00NjU5LThkYTAtYmQzOGI5OGY4YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E90WuKXIdO83MXhM7Nnb13g9SyK+vfOz0L3 oBBWUowH51tWXo9/gw4qiAIV8Dp6qyJFTqDmZGQwjjYPgVkiuWAVl2PIDrxojgoG 4DJmXaP/cLjU3Pau3YFFlHDc5906SvPQ9lE9W4nuaE0axPLggPnj4ULnWDcIKpXi e7KI7zgIHHysA9+4iKQ2kBsAdTYpKXYCA9/Y6SmZWSXYtESpTJfDcHRBkS6vlj2s gynub6I8FapQEyiRTbzcdt3ACIbpfoghyXJkmp7oJUABZzhwvGE6oQWnPRvwnoJn ACUWuJ/pdaYn4s3TBOmJUxz6I8eAxWTFzcFknXRPsiYLtwh2aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCWBfA/INq+8njbIbb8D6EMS+zJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81YmI4 OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4MmVhMTM0YTkvNDBiZTU3ZGMtNzE1Ni0z Zjk3LWI3N2ItNGUzMGU1NDY5MDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWJiODlmOTEtYTlhMS00ZDg4LWI5 ZDAtZjc4ODJlYTEzNGE5LzViYjg5ZjkxLWE5YTEtNGQ4OC1iOWQwLWY3ODgyZWEx MzRhOS5jcmwwHwYDVR0jBBgwFoAUzjpqHXvNBHS7s9ZDcs+uIiPUqHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YmI4OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4 MmVhMTM0YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYy+XfyK+pzp/pyZgD0DWq4BpJnYnkXpeUUWw2xSDUZxVxgiVMKuPJO FLIqPlwIOQQaKxsFWPFtUG2Uh8X6MYe0tQ+jgGKURxO6vbnIFGTvDqhbMnMfHn/Y TViTiGyu0Oem2f6Jc8gKsYOjWON+dTOZV4BQ8HIzof5ib2ymTVlJmMBhLUF22xxO hXCrLxuk+fgs4mTGdo4ok8QtiZQD7+p179DN4zvzXfrZ00YvjuOGZwYHEUJ3nlLe Sb6oa+KbBGpifCFPLtE2Kswpqy956nRiQqvy16tE+3hsCLQCwRiHNaNzGPBFfwyC kMJB82RwvSGvlDLbuSluuaf6Z4AdTy0= -----END CERTIFICATE-----Generated at Sun Jan 11 03:20:09 2026 by rpki-client