This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa File: a54a8459-0e0e-3ac7-a09c-54965f63560e.roa (raw, json) Hash identifier: YbiOQlaO9vS/gLucg/WZG6Dd0mvliovk6KzKQKzn0ZQ= Subject key identifier: 19:45:84:60:02:94:AE:02:24:20:60:FF:14:C9:7B:1B:AF:57:29:0F Certificate issuer: /CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647 Certificate serial: 010D0C9F4328584C5667056268001F0A20E6F680 Authority key identifier: 17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 30562 IP address blocks: 168.100.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:05:62:68:00:1f:0a:20:e6:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=8abe249f-f88c-4c22-8c3c-d9fe7f5af272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:72:b3:ef:02:de:34:3e:be:ba:48:67:58: b2:b6:cb:3b:59:83:07:03:af:47:30:32:46:91:03: 12:a0:de:15:27:23:f6:26:1c:8a:55:75:13:5f:79: 63:a3:06:67:b9:03:e8:38:69:2d:76:e5:bd:b0:0b: 3d:f0:a2:44:18:68:dd:37:be:3c:3c:ed:65:9a:fa: 8d:f2:55:06:ba:05:7f:df:ea:99:f8:f5:e0:e4:32: 31:5b:8a:d6:04:f7:fa:90:6f:47:92:fe:60:c7:9e: 7d:13:ce:f8:e0:45:31:fc:ef:1d:88:7f:e3:1a:a7: fb:98:c8:76:09:01:16:57:30:d7:78:7d:b5:72:53: 16:29:9d:11:9d:d5:c1:d4:02:7b:88:86:b3:fb:98: d9:22:f9:aa:58:82:d8:d1:85:17:54:4d:41:28:8d: 89:0e:3b:d4:30:29:4b:4c:37:87:b7:f2:7c:1d:36: ea:6f:fd:f6:dc:9f:30:6d:5a:53:50:f1:05:c5:d8: e3:2e:8e:8c:73:96:52:65:06:11:5d:e6:c0:58:05: 2b:91:60:09:75:72:7c:4e:87:ba:58:dd:b2:90:04: 27:a9:f9:dd:5f:37:09:81:20:17:86:bf:8c:bf:c2: fe:d7:89:c4:9c:aa:6f:e4:38:bd:e5:99:c0:82:bf: 62:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:45:84:60:02:94:AE:02:24:20:60:FF:14:C9:7B:1B:AF:57:29:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/a54a8459-0e0e-3ac7-a09c-54965f63560e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl X509v3 Authority Key Identifier: keyid:17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer sbgp-ipAddrBlock: critical IPv4: 168.100.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fd:fb:a1:ea:c7:70:5d:c7:9a:9f:1c:d2:50:34:14:f3:85: aa:e9:23:99:21:a5:e0:90:f1:5a:07:f2:3a:3c:51:2f:79:c1: dd:a2:b9:22:e3:d6:42:03:cc:4e:19:58:e8:25:ca:7b:e2:65: 40:af:b1:41:93:a0:82:34:93:a9:35:1c:1a:11:73:90:e9:ba: 26:d1:88:0c:6f:a5:5d:de:06:45:39:76:cb:e8:0d:ce:91:bb: 58:b5:c1:aa:15:12:3f:22:58:40:aa:92:e5:6d:ac:f6:cb:81: a7:72:69:e1:f9:43:82:e7:a8:2e:78:41:ee:c9:6b:1a:af:7e: 2f:95:9e:aa:00:26:2d:3f:4b:74:81:13:eb:3c:28:01:2f:1f: d9:3f:3c:45:c0:04:dc:fb:78:31:c0:65:ec:cf:24:5f:ee:68: f7:0b:4b:7c:c0:e5:f1:4c:88:54:ef:86:f6:78:d8:59:8e:aa: c8:80:ac:83:d2:41:63:7e:2d:29:fd:f0:a1:ae:3f:ac:90:3f: 6b:d4:e3:2c:a2:70:9b:0a:e1:9d:12:03:ea:b4:38:0c:62:16: 69:0c:4c:1b:5a:9e:47:8d:db:ee:34:5f:5d:d2:60:2c:22:3a: 98:5d:ec:49:49:af:4c:4c:8d:b7:66:7b:1a:df:29:44:4b:b7: 44:9c:c3:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZwViaAAfCiDm9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZiYTNlMTUtM2ZlMS00NjM0LThlM2ItODM4ZTlmMmFl NjQ3MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk OGFiZTI0OWYtZjg4Yy00YzIyLThjM2MtZDlmZTdmNWFmMjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRlys+8C3jQ+vrpIZ1iytss7WYMHA69HMDJG kQMSoN4VJyP2JhyKVXUTX3ljowZnuQPoOGktduW9sAs98KJEGGjdN748PO1lmvqN 8lUGugV/3+qZ+PXg5DIxW4rWBPf6kG9Hkv5gx559E8744EUx/O8diH/jGqf7mMh2 CQEWVzDXeH21clMWKZ0RndXB1AJ7iIaz+5jZIvmqWILY0YUXVE1BKI2JDjvUMClL TDeHt/J8HTbqb/323J8wbVpTUPEFxdjjLo6Mc5ZSZQYRXebAWAUrkWAJdXJ8Toe6 WN2ykAQnqfndXzcJgSAXhr+Mv8L+14nEnKpv5Di95ZnAgr9i+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlFhGAClK4CJCBg/xTJexuvVykPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmJh M2UxNS0zZmUxLTQ2MzQtOGUzYi04MzhlOWYyYWU2NDcvYTU0YTg0NTktMGUwZS0z YWM3LWEwOWMtNTQ5NjVmNjM1NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZiYTNlMTUtM2ZlMS00NjM0LThl M2ItODM4ZTlmMmFlNjQ3L2NmYmEzZTE1LTNmZTEtNDYzNC04ZTNiLTgzOGU5ZjJh ZTY0Ny5jcmwwHwYDVR0jBBgwFoAUF4osSiJcdbt6e/SwjjBRtyARNSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmJhM2UxNS0zZmUxLTQ2MzQtOGUzYi04Mzhl OWYyYWU2NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD9+6Hqx3Bdx5qfHNJQNBTzharpI5khpeCQ8VoH8jo8US95wd2iuSLj 1kIDzE4ZWOglynviZUCvsUGToII0k6k1HBoRc5DpuibRiAxvpV3eBkU5dsvoDc6R u1i1waoVEj8iWECqkuVtrPbLgadyaeH5Q4LnqC54Qe7Jaxqvfi+VnqoAJi0/S3SB E+s8KAEvH9k/PEXABNz7eDHAZezPJF/uaPcLS3zA5fFMiFTvhvZ42FmOqsiArIPS QWN+LSn98KGuP6yQP2vU4yyicJsK4Z0SA+q0OAxiFmkMTBtankeN2+40X13SYCwi Ophd7ElJr0xMjbdmexrfKURLt0Scw+c= -----END CERTIFICATE-----Generated at Sun Jan 11 04:57:49 2026 by rpki-client