This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02b7c20a-cfb8-3b3a-837c-bd2ed105b0a4.roa File: 02b7c20a-cfb8-3b3a-837c-bd2ed105b0a4.roa (raw, json) Hash identifier: 8cizV3As7opXZwnk6wPIEIVOTYS2dCL/AZG0o4Q2dZY= Subject key identifier: 38:50:58:E9:F0:43:BE:1F:CE:9B:67:95:2D:81:FD:92:AE:AE:EC:BE Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584C75D1CD6E9B0F00A316241C00 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02b7c20a-cfb8-3b3a-837c-bd2ed105b0a4.roa Signing time: Thu 08 Jan 2026 20:06:56 +0000 ROA not before: Thu 08 Jan 2026 20:06:56 +0000 ROA not after: Wed 08 Apr 2026 19:06:56 +0000 asID: 401152 IP address blocks: 108.165.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:d1:cd:6e:9b:0f:00:a3:16:24:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jan 8 20:06:56 2026 GMT Not After : Apr 8 19:06:56 2026 GMT Subject: CN=d56fd1a9-a3e0-4da4-a0ad-35a34f04f0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:98:97:4e:a4:79:18:72:7d:fc:ec:dc:3d:1e: 0f:ad:cf:af:d1:6b:19:cf:5c:61:e0:47:7b:bb:fc: aa:b6:58:d3:45:bb:3f:7c:9c:21:76:8e:1f:0f:d8: cc:2f:34:2c:89:30:41:18:c9:22:ed:41:d1:72:a9: 52:75:3b:40:0a:2b:c8:d8:d3:ae:c0:48:87:3e:c3: 16:b6:63:0a:b6:fb:50:2a:10:dc:94:f5:f0:71:30: cf:50:7e:54:2f:57:33:38:d6:d0:24:83:d5:ec:31: 85:93:73:d3:e4:c8:12:ca:7f:5c:39:fc:4f:74:e8: f2:ff:56:e2:cc:64:83:44:95:6f:8e:9d:05:6b:2e: c0:dc:1f:7d:6e:7f:f5:f1:4e:b9:ce:08:d2:34:14: fc:18:eb:a1:e5:8f:57:0c:d1:a5:61:e4:44:ae:ee: 5a:23:f6:f5:db:11:35:f2:16:a9:72:7e:d6:5c:d9: e7:bb:47:a1:b5:70:1e:6c:da:af:18:72:64:21:46: 10:92:26:86:93:97:d4:c9:bc:51:4c:7d:6d:48:57: 7d:2d:08:69:00:ae:36:cd:54:08:b1:92:27:cd:f9: b3:6c:76:29:6c:32:0a:63:1b:1f:e2:fc:20:7c:cc: 60:bc:7c:c9:b1:d7:31:90:f1:bd:d1:f0:dd:c4:73: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:50:58:E9:F0:43:BE:1F:CE:9B:67:95:2D:81:FD:92:AE:AE:EC:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/02b7c20a-cfb8-3b3a-837c-bd2ed105b0a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:aa:e9:19:52:eb:2f:9f:d1:00:1e:29:b6:1b:5a:c5:e6:2b: 31:03:9d:71:23:3e:f5:72:cb:8b:fb:27:81:5f:0c:45:e2:ad: 87:1a:86:ed:6f:1b:4e:12:51:8d:b4:07:12:d2:88:e6:59:57: dc:ff:7f:1f:6d:8f:55:e5:2e:86:01:f8:8f:d2:83:0d:d9:ba: cc:4e:b6:0a:88:3d:d7:e5:81:85:1d:84:21:b9:dc:20:ae:60: 8e:b4:dd:65:9a:e1:c1:c1:4f:1e:15:e1:a6:dc:70:e0:f8:ca: bb:8b:ea:63:74:05:2f:08:ee:e5:77:e5:cd:fa:d3:d1:89:b7: aa:ff:43:92:07:67:4c:f5:6b:07:1a:80:cb:c4:71:01:7c:c1: 3a:b1:63:d1:f0:c7:a4:3b:aa:6b:40:ae:96:ae:bc:cf:1e:c1: 74:a0:7a:8e:1d:22:32:11:57:55:a7:c4:49:23:98:0c:42:67: c8:38:d0:51:3f:72:db:32:7c:54:52:55:50:11:09:bf:bf:42: bd:bb:96:6a:79:b0:e7:65:62:3d:9a:b8:19:d6:8c:c8:75:26: 80:1e:5a:2a:30:2f:01:f1:b7:fe:89:79:68:1d:92:71:39:37: 7c:79:a0:8b:76:5a:47:42:c8:4c:28:51:72:92:00:c0:3d:75: 01:bd:27:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx10c1umw8AoxYkHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDEwODIwMDY1NloXDTI2MDQwODE5MDY1NlowLzEtMCsGA1UEAxMk ZDU2ZmQxYTktYTNlMC00ZGE0LWEwYWQtMzVhMzRmMDRmMGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJiXTqR5GHJ9/OzcPR4Prc+v0WsZz1xh4Ed7 u/yqtljTRbs/fJwhdo4fD9jMLzQsiTBBGMki7UHRcqlSdTtACivI2NOuwEiHPsMW tmMKtvtQKhDclPXwcTDPUH5UL1czONbQJIPV7DGFk3PT5MgSyn9cOfxPdOjy/1bi zGSDRJVvjp0Fay7A3B99bn/18U65zgjSNBT8GOuh5Y9XDNGlYeREru5aI/b12xE1 8hapcn7WXNnnu0ehtXAebNqvGHJkIUYQkiaGk5fUybxRTH1tSFd9LQhpAK42zVQI sZInzfmzbHYpbDIKYxsf4vwgfMxgvHzJsdcxkPG90fDdxHN9lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhQWOnwQ74fzptnlS2B/ZKuruy+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDJiN2MyMGEtY2ZiOC0z YjNhLTgzN2MtYmQyZWQxMDViMGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6q6RlS6y+f0QAeKbYbWsXmKzEDnXEjPvVyy4v7J4FfDEXirYcahu1v G04SUY20BxLSiOZZV9z/fx9tj1XlLoYB+I/Sgw3ZusxOtgqIPdflgYUdhCG53CCu YI603WWa4cHBTx4V4abccOD4yruL6mN0BS8I7uV35c3609GJt6r/Q5IHZ0z1awca gMvEcQF8wTqxY9Hwx6Q7qmtArpauvM8ewXSgeo4dIjIRV1WnxEkjmAxCZ8g40FE/ ctsyfFRSVVARCb+/Qr27lmp5sOdlYj2auBnWjMh1JoAeWiowLwHxt/6JeWgdknE5 N3x5oIt2WkdCyEwoUXKSAMA9dQG9J3Y= -----END CERTIFICATE-----Generated at Sat Jan 10 19:15:24 2026 by rpki-client