This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/c8df01e7-3e13-3c93-908b-5a89ee54b342.roa File: c8df01e7-3e13-3c93-908b-5a89ee54b342.roa (raw, json) Hash identifier: Vejq0fTpc5LfWY5MRHlC+0JCBS4eJy8jIyJvEN7cClw= Subject key identifier: 18:08:C7:2E:24:4B:C7:28:5D:BA:B0:0F:05:9A:02:F7:8A:C1:6A:EC Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297 Certificate serial: 010D0C9F4328584C751C20F6435DC77B7A3D9BE0 Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/c8df01e7-3e13-3c93-908b-5a89ee54b342.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 21887 IP address blocks: 43.243.84.0/22 maxlen: 24 45.78.64.0/20 maxlen: 24 46.254.88.0/22 maxlen: 24 64.64.224.0/19 maxlen: 24 65.49.130.0/23 maxlen: 24 65.49.132.0/22 maxlen: 24 65.49.144.0/23 maxlen: 24 65.49.150.0/23 maxlen: 24 65.49.192.0/19 maxlen: 24 65.49.224.0/20 maxlen: 24 66.98.112.0/20 maxlen: 24 67.216.192.0/19 maxlen: 24 67.218.128.0/19 maxlen: 24 67.230.160.0/19 maxlen: 24 68.168.128.0/20 maxlen: 24 69.171.64.0/20 maxlen: 24 69.194.8.0/21 maxlen: 24 74.82.192.0/19 maxlen: 24 74.120.168.0/21 maxlen: 24 74.211.96.0/19 maxlen: 24 80.251.208.0/20 maxlen: 24 89.208.240.0/20 maxlen: 24 93.179.96.0/21 maxlen: 24 93.179.112.0/21 maxlen: 24 93.179.124.0/22 maxlen: 24 94.103.4.0/22 maxlen: 24 95.163.192.0/20 maxlen: 24 95.169.0.0/19 maxlen: 24 95.181.188.0/22 maxlen: 24 96.45.176.0/20 maxlen: 24 97.64.16.0/20 maxlen: 24 97.64.32.0/20 maxlen: 24 97.64.80.0/22 maxlen: 24 97.64.104.0/21 maxlen: 24 97.64.120.0/21 maxlen: 24 98.142.128.0/20 maxlen: 24 104.36.64.0/21 maxlen: 24 104.36.184.0/22 maxlen: 24 104.129.180.0/22 maxlen: 24 104.129.184.0/22 maxlen: 24 104.153.96.0/21 maxlen: 24 104.225.144.0/20 maxlen: 24 104.225.232.0/21 maxlen: 24 104.243.16.0/20 maxlen: 24 104.244.88.0/21 maxlen: 24 104.245.40.0/21 maxlen: 24 104.245.188.0/22 maxlen: 24 107.182.16.0/20 maxlen: 24 144.34.128.0/17 maxlen: 24 150.242.88.0/22 maxlen: 24 162.211.220.0/22 maxlen: 24 162.219.120.0/21 maxlen: 24 162.244.240.0/22 maxlen: 24 172.93.32.0/20 maxlen: 24 172.96.16.0/22 maxlen: 24 172.96.192.0/18 maxlen: 24 173.242.112.0/20 maxlen: 24 174.137.48.0/20 maxlen: 24 176.122.128.0/18 maxlen: 24 184.170.208.0/20 maxlen: 24 185.180.16.0/22 maxlen: 24 185.199.240.0/22 maxlen: 24 185.205.180.0/22 maxlen: 24 185.212.56.0/22 maxlen: 24 192.69.88.0/21 maxlen: 24 198.181.32.0/20 maxlen: 24 198.181.56.0/22 maxlen: 24 199.19.104.0/21 maxlen: 24 199.115.228.0/22 maxlen: 24 199.168.136.0/21 maxlen: 24 199.180.112.0/21 maxlen: 24 199.193.124.0/22 maxlen: 24 206.190.232.0/21 maxlen: 24 216.24.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:20:f6:43:5d:c7:7b:7a:3d:9b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=a8303013-20e5-47c5-be8d-e36f7f4b5ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0e:51:75:03:1c:12:e3:3b:68:6c:2c:d5:ec: 8c:13:72:f2:c9:59:f2:a9:75:b3:d2:ce:cb:ab:17: 78:9f:b1:51:56:a3:69:d0:2f:b6:15:25:c2:e1:eb: 9e:24:c6:60:63:74:99:c5:de:bc:80:9c:98:7f:c5: 4f:15:c5:10:dc:9a:a1:4e:d9:20:d1:aa:f4:95:47: 60:36:b2:27:78:2b:1e:29:e4:30:ab:1a:00:ec:ec: d9:b8:4f:ea:e2:5f:f7:6c:4e:2d:8b:ad:2b:1b:2b: c8:32:30:88:2a:d5:b9:bb:1d:d5:a4:b5:7f:94:e7: 41:c0:84:8e:e0:6b:aa:8b:15:9b:57:d1:33:2f:11: 91:0f:44:27:bc:16:5d:ec:5d:ca:01:d2:59:35:21: 46:27:62:2c:6b:77:e4:c1:8a:df:90:9f:93:ca:7e: 2f:98:35:30:8b:83:9e:49:70:81:77:e1:a1:39:8a: a2:c4:ce:f8:4f:c3:cb:f6:81:2f:17:f0:4b:db:55: 27:da:ae:20:0a:7f:90:f9:39:07:39:8a:16:0b:1c: 8d:98:82:42:6c:29:fe:46:29:70:82:54:e3:ff:42: fb:ad:74:71:03:6b:c7:40:d8:93:81:35:09:85:5a: 43:ef:87:62:5f:09:39:40:12:c6:43:da:4e:34:df: a8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:08:C7:2E:24:4B:C7:28:5D:BA:B0:0F:05:9A:02:F7:8A:C1:6A:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/c8df01e7-3e13-3c93-908b-5a89ee54b342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl X509v3 Authority Key Identifier: keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer sbgp-ipAddrBlock: critical IPv4: 43.243.84.0/22 45.78.64.0/20 46.254.88.0/22 64.64.224.0/19 65.49.130.0-65.49.135.255 65.49.144.0/23 65.49.150.0/23 65.49.192.0-65.49.239.255 66.98.112.0/20 67.216.192.0/19 67.218.128.0/19 67.230.160.0/19 68.168.128.0/20 69.171.64.0/20 69.194.8.0/21 74.82.192.0/19 74.120.168.0/21 74.211.96.0/19 80.251.208.0/20 89.208.240.0/20 93.179.96.0/21 93.179.112.0/21 93.179.124.0/22 94.103.4.0/22 95.163.192.0/20 95.169.0.0/19 95.181.188.0/22 96.45.176.0/20 97.64.16.0-97.64.47.255 97.64.80.0/22 97.64.104.0/21 97.64.120.0/21 98.142.128.0/20 104.36.64.0/21 104.36.184.0/22 104.129.180.0-104.129.187.255 104.153.96.0/21 104.225.144.0/20 104.225.232.0/21 104.243.16.0/20 104.244.88.0/21 104.245.40.0/21 104.245.188.0/22 107.182.16.0/20 144.34.128.0/17 150.242.88.0/22 162.211.220.0/22 162.219.120.0/21 162.244.240.0/22 172.93.32.0/20 172.96.16.0/22 172.96.192.0/18 173.242.112.0/20 174.137.48.0/20 176.122.128.0/18 184.170.208.0/20 185.180.16.0/22 185.199.240.0/22 185.205.180.0/22 185.212.56.0/22 192.69.88.0/21 198.181.32.0/20 198.181.56.0/22 199.19.104.0/21 199.115.228.0/22 199.168.136.0/21 199.180.112.0/21 199.193.124.0/22 206.190.232.0/21 216.24.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:77:1a:c0:ed:4e:70:00:56:66:90:3b:83:cd:91:9e:6c:90: cc:06:25:80:14:3d:fa:1c:06:f1:60:6c:36:5c:96:d5:a2:91: b7:39:0f:d9:54:72:36:15:ab:b4:ba:e9:ac:e7:71:02:35:3c: 42:23:04:1a:76:9f:b6:73:0f:0e:7e:f8:e6:95:c7:1f:01:76: 3a:a8:e2:7b:c3:dc:66:07:ce:90:bb:3c:e0:47:59:9e:0c:ae: 17:62:d2:42:3d:07:c1:9f:cc:0b:ab:c7:e8:74:3a:04:75:5c: cb:98:ad:19:df:9c:2d:c6:a4:85:9d:00:36:58:64:dd:38:4f: 28:0e:90:5c:9d:34:b0:ec:12:73:c7:31:66:f8:f2:7c:18:fe: b2:e0:8d:bc:0c:3b:f4:75:93:c6:8e:25:98:05:f5:60:43:1b: ad:85:6c:a7:dc:74:8e:f7:01:32:d7:6e:86:28:1a:c0:94:d1: 9f:a8:80:44:b7:f2:38:1e:97:3a:80:69:71:cf:22:6d:41:f0: 9a:f3:1d:2d:a4:37:60:33:41:1e:5e:26:28:38:78:ac:ca:16: 5b:80:c1:e6:38:5d:fa:8a:a8:e2:0a:e8:9b:69:97:ed:bc:be: 24:35:19:7a:36:84:80:fb:82:4f:e8:b6:58:97:3c:c3:95:43: 7f:ec:9c:07 -----BEGIN CERTIFICATE----- MIIICzCCBvOgAwIBAgIUAQ0Mn0MoWEx1HCD2Q13He3o9m+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwMWIyOGEtNDM2ZC00MmRkLTg3NTAtNTM2MWYyMzA5 Mjk3MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk YTgzMDMwMTMtMjBlNS00N2M1LWJlOGQtZTM2ZjdmNGI1Y2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ5RdQMcEuM7aGws1eyME3LyyVnyqXWz0s7L qxd4n7FRVqNp0C+2FSXC4eueJMZgY3SZxd68gJyYf8VPFcUQ3JqhTtkg0ar0lUdg NrIneCseKeQwqxoA7OzZuE/q4l/3bE4ti60rGyvIMjCIKtW5ux3VpLV/lOdBwISO 4GuqixWbV9EzLxGRD0QnvBZd7F3KAdJZNSFGJ2Isa3fkwYrfkJ+Tyn4vmDUwi4Oe SXCBd+GhOYqixM74T8PL9oEvF/BL21Un2q4gCn+Q+TkHOYoWCxyNmIJCbCn+Rilw glTj/0L7rXRxA2vHQNiTgTUJhVpD74diXwk5QBLGQ9pONN+oMwIDAQABo4IFHTCC BRkwHQYDVR0OBBYEFBgIxy4kS8coXbqwDwWaAveKwWrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYjAx YjI4YS00MzZkLTQyZGQtODc1MC01MzYxZjIzMDkyOTcvYzhkZjAxZTctM2UxMy0z YzkzLTkwOGItNWE4OWVlNTRiMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2IwMWIyOGEtNDM2ZC00MmRkLTg3 NTAtNTM2MWYyMzA5Mjk3L2NiMDFiMjhhLTQzNmQtNDJkZC04NzUwLTUzNjFmMjMw OTI5Ny5jcmwwHwYDVR0jBBgwFoAUoD/XgfdrhiAFQLOw8V5XSYqIHsQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYjAxYjI4YS00MzZkLTQyZGQtODc1MC01MzYx ZjIzMDkyOTcuY2VyMIIB5QYIKwYBBQUHAQcBAf8EggHUMIIB0DCCAcwEAgABMIIB xAMEAivzVAMEBC1OQAMEAi7+WAMEBUBA4DAMAwQBQTGCAwQDQTGAAwQBQTGQAwQB QTGWMAwDBAZBMcADBARBMeADBARCYnADBAVD2MADBAVD2oADBAVD5qADBAREqIAD BARFq0ADBANFwggDBAVKUsADBANKeKgDBAVK02ADBARQ+9ADBARZ0PADBANds2AD BANds3ADBAJds3wDBAJeZwQDBARfo8ADBAVfqQADBAJftbwDBARgLbAwDAMEBGFA EAMEBGFAIAMEAmFAUAMEA2FAaAMEA2FAeAMEBGKOgAMEA2gkQAMEAmgkuDAMAwQC aIG0AwQCaIG4AwQDaJlgAwQEaOGQAwQDaOHoAwQEaPMQAwQDaPRYAwQDaPUoAwQC aPW8AwQEa7YQAwQHkCKAAwQClvJYAwQCotPcAwQDott4AwQCovTwAwQErF0gAwQC rGAQAwQGrGDAAwQErfJwAwQErokwAwQGsHqAAwQEuKrQAwQCubQQAwQCucfwAwQC uc20AwQCudQ4AwQDwEVYAwQExrUgAwQCxrU4AwQDxxNoAwQCx3PkAwQDx6iIAwQD x7RwAwQCx8F8AwQDzr7oAwQE2BiwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFx3GsDtTnAAVmaQO4PNkZ5s kMwGJYAUPfocBvFgbDZcltWikbc5D9lUcjYVq7S66azncQI1PEIjBBp2n7ZzDw5+ +OaVxx8Bdjqo4nvD3GYHzpC7POBHWZ4Mrhdi0kI9B8GfzAurx+h0OgR1XMuYrRnf nC3GpIWdADZYZN04TygOkFydNLDsEnPHMWb48nwY/rLgjbwMO/R1k8aOJZgF9WBD G62FbKfcdI73ATLXboYoGsCU0Z+ogES38jgelzqAaXHPIm1B8JrzHS2kN2AzQR5e Jig4eKzKFluAweY4XfqKqOIK6Jtpl+28viQ1GXo2hID7gk/otliXPMOVQ3/snAc= -----END CERTIFICATE-----Generated at Sat Jan 10 20:27:25 2026 by rpki-client