This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dff79b36-5727-394e-a010-ff4a59d965b6.roa File: dff79b36-5727-394e-a010-ff4a59d965b6.roa (raw, json) Hash identifier: B/gPlG+V7Gc2aRObou8m6HMboEAX4YkuIRFDe6rWl38= Subject key identifier: 5A:FA:4A:B7:42:1C:A2:6F:A6:21:67:16:92:18:93:9F:13:32:23:6C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584C5EBA132822E0C28BF6F6BF00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dff79b36-5727-394e-a010-ff4a59d965b6.roa Signing time: Wed 31 Dec 2025 13:35:32 +0000 ROA not before: Wed 31 Dec 2025 13:35:32 +0000 ROA not after: Tue 31 Mar 2026 12:35:32 +0000 asID: 397563 IP address blocks: 104.250.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Jan 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:ba:13:28:22:e0:c2:8b:f6:f6:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Dec 31 13:35:32 2025 GMT Not After : Mar 31 12:35:32 2026 GMT Subject: CN=5a900ae8-6972-4067-8293-fc58be67f8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:92:82:71:46:07:62:70:8e:a7:91:96:30: 6b:97:79:b6:63:a0:f4:90:72:ea:b2:29:f4:f2:fb: 94:73:b7:73:ce:51:ca:83:10:69:8b:43:e0:c4:5f: 6e:19:45:ef:70:34:a9:a0:0e:e0:a1:04:a8:af:c4: ec:ec:c0:04:1d:09:eb:a6:e4:97:a2:61:75:a3:b6: 21:35:3b:a9:41:2f:f1:2b:46:01:ea:0a:96:ad:52: 9a:61:6f:22:50:66:73:0d:18:9e:63:2d:d8:0b:f9: 7c:95:0d:5a:9c:1a:33:83:17:c2:8d:3b:ca:16:6a: b2:3c:8a:90:cc:39:bf:70:4c:fd:4e:04:2b:a5:2b: 6d:24:a0:83:6e:9d:c5:8c:cf:a3:65:40:9e:f7:80: 5f:53:85:cd:65:22:ed:42:0d:9b:b2:eb:8d:43:3d: 95:d7:87:7e:16:09:b7:a9:65:72:2f:34:5f:f5:6f: 8d:c8:25:b0:46:0e:e8:b4:04:28:28:fc:03:38:82: b4:63:6b:06:0f:4b:6e:14:f9:56:3e:7e:07:68:e1: 09:c5:b2:7c:eb:45:5d:19:af:1a:e2:79:84:c7:52: 48:35:e0:f2:e9:1f:f2:de:44:b3:2b:d0:8b:48:5f: 76:94:20:ab:6e:f7:72:27:5b:f9:11:98:32:a8:1c: b5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FA:4A:B7:42:1C:A2:6F:A6:21:67:16:92:18:93:9F:13:32:23:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dff79b36-5727-394e-a010-ff4a59d965b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:f8:88:67:63:c6:74:25:a3:20:fb:bb:de:cd:b4:c0:25:81: fa:ff:ae:75:d3:6c:3e:16:e8:52:43:eb:39:55:c2:a0:33:21: a2:b6:14:c8:0a:71:65:10:98:3e:75:79:ce:13:76:f2:84:03: cc:44:6f:8e:c4:9a:2e:b3:48:8c:6f:cc:7a:c0:91:76:cc:26: d9:41:a4:a4:86:ca:e0:d3:8d:63:c4:a9:48:5c:e5:cb:6a:a8: 0d:72:54:d8:4b:d8:68:91:51:c0:ef:23:6b:e3:0e:7c:10:61: ae:8e:69:08:c3:24:cf:b7:c6:cd:4b:8d:eb:c9:bf:ea:cf:af: c2:09:6a:ce:96:58:8b:16:8b:84:87:8f:23:41:b6:db:e6:86: fe:04:53:00:7c:2c:b2:c6:00:cb:2a:72:ac:b4:63:53:19:c6: d5:fe:a9:2b:bb:c7:5b:cb:9e:80:65:f0:6b:ed:2c:5c:ab:80: 38:9e:ae:36:3a:ce:94:6c:b7:92:08:8c:05:29:16:ff:3c:02: 5b:85:f4:10:80:e7:69:f5:5d:9e:df:6f:78:72:75:09:46:11: 72:44:a3:e1:f6:52:30:8a:39:87:c8:99:31:da:b8:ec:de:c2: 4f:31:aa:9c:e0:fe:9b:a7:5d:f9:b0:a8:75:d1:ae:68:7d:6d: f6:00:dd:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExeuhMoIuDCi/b2vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTIzMTEzMzUzMloXDTI2MDMzMTEyMzUzMlowLzEtMCsGA1UEAxMk NWE5MDBhZTgtNjk3Mi00MDY3LTgyOTMtZmM1OGJlNjdmOGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMOSgnFGB2JwjqeRljBrl3m2Y6D0kHLqsin0 8vuUc7dzzlHKgxBpi0PgxF9uGUXvcDSpoA7goQSor8Ts7MAEHQnrpuSXomF1o7Yh NTupQS/xK0YB6gqWrVKaYW8iUGZzDRieYy3YC/l8lQ1anBozgxfCjTvKFmqyPIqQ zDm/cEz9TgQrpSttJKCDbp3FjM+jZUCe94BfU4XNZSLtQg2bsuuNQz2V14d+Fgm3 qWVyLzRf9W+NyCWwRg7otAQoKPwDOIK0Y2sGD0tuFPlWPn4HaOEJxbJ860VdGa8a 4nmEx1JINeDy6R/y3kSzK9CLSF92lCCrbvdyJ1v5EZgyqBy1QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr6SrdCHKJvpiFnFpIYk58TMiNsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGZmNzliMzYtNTcyNy0z OTRlLWEwMTAtZmY0YTU5ZDk2NWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHT4iGdjxnQloyD7u97NtMAlgfr/rnXTbD4W6FJD6zlVwqAzIaK2FMgK cWUQmD51ec4TdvKEA8xEb47Emi6zSIxvzHrAkXbMJtlBpKSGyuDTjWPEqUhc5ctq qA1yVNhL2GiRUcDvI2vjDnwQYa6OaQjDJM+3xs1LjevJv+rPr8IJas6WWIsWi4SH jyNBttvmhv4EUwB8LLLGAMsqcqy0Y1MZxtX+qSu7x1vLnoBl8GvtLFyrgDierjY6 zpRst5IIjAUpFv88AluF9BCA52n1XZ7fb3hydQlGEXJEo+H2UjCKOYfImTHauOze wk8xqpzg/punXfmwqHXRrmh9bfYA3f8= -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:59 2026 by rpki-client