This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa File: 3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa (raw, json) Hash identifier: iYZFbEdpWzUlsLo8/4VNTK0UZsmlWs1E0XbUtIConLU= Subject key identifier: 0B:65:8C:C1:7A:E4:C5:BF:25:69:3F:C0:EE:32:DA:9A:36:35:59:89 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584C996704B1CC82E5E66FBCF400 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 30238 IP address blocks: 23.90.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:67:04:b1:cc:82:e5:e6:6f:bc:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=ea52d848-117c-4607-9bbd-ee427c75054f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:db:34:d0:bc:f2:3e:96:e3:f9:ef:3f:13: f5:a9:55:83:ed:9f:e4:bc:39:e9:48:3a:2a:48:5c: 2a:d5:1c:44:ca:4f:8f:b2:42:6c:74:ee:ce:6c:02: 74:09:5c:47:d8:df:9a:f1:4c:cc:b6:67:1b:38:89: 3c:44:57:47:93:3b:b6:a1:be:ce:29:4b:6c:b7:b7: 74:77:e5:6b:cd:0d:48:97:3d:d1:24:fd:2a:b0:4b: b7:1a:8e:dd:64:3b:97:2b:6a:bc:a1:a1:e4:a2:5d: 96:b7:b4:18:d7:5a:b0:d5:be:24:b6:f1:a4:8f:43: 92:60:24:e9:04:ea:fc:a2:73:a4:18:5a:44:08:90: 01:70:17:d7:3d:f2:40:ef:7f:57:3b:d4:6e:7d:31: 57:92:94:15:98:74:07:f1:8c:7b:84:b8:c2:cc:ba: 99:2a:66:b0:2f:0e:3d:c8:af:e0:a5:de:45:bd:8f: ae:04:08:d9:c3:53:ec:55:8e:b5:b1:44:58:49:69: e0:d8:c2:36:50:5f:07:5a:69:34:ea:d4:1b:1e:64: 57:85:5c:ba:8e:75:f3:fa:f0:eb:22:50:bb:4c:55: d0:56:d7:79:1e:8b:b3:77:1f:3a:12:11:be:39:df: 39:9d:26:63:c1:18:45:8d:b0:66:e7:9c:40:1b:28: fb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:65:8C:C1:7A:E4:C5:BF:25:69:3F:C0:EE:32:DA:9A:36:35:59:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3378795a-a2e1-3e64-9eeb-71fc09ebddfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 23.90.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:88:36:59:8c:11:ca:c2:fc:05:f6:d4:9e:9b:32:aa:9e:9a: 4c:fc:4a:07:ec:68:f8:0f:5a:36:42:48:ae:3e:24:0d:69:ae: bc:b9:9e:9b:71:52:1e:4f:94:fc:6b:8b:64:09:04:10:05:4f: e6:22:aa:bb:37:6f:14:0c:96:00:eb:f4:ad:c8:fb:ca:bb:52: 9e:2e:5a:4e:5f:b1:83:af:63:fb:e1:56:70:a5:2f:fa:0d:eb: 82:af:b8:60:16:8f:86:1b:bb:d1:4d:60:f5:20:4f:f2:43:bc: ae:9c:77:72:b2:21:3e:3e:da:13:0e:17:db:37:c1:a1:f2:6c: 5b:ff:b1:73:e2:94:ec:a9:c7:b3:45:fd:5c:09:11:dd:20:71: 75:73:22:4a:73:44:35:38:8f:a9:b4:eb:65:63:75:93:d4:08: 3d:88:c9:4c:68:52:ca:e6:e4:86:d2:d2:0d:57:b0:fe:04:78: 82:39:ff:75:f4:cc:0f:ba:b2:99:f2:f2:0f:1b:ef:62:82:8f: 5e:ff:d3:12:fe:7b:b3:e5:77:43:69:a4:d6:15:8b:7f:d2:56: d5:1d:c9:7f:0e:64:cf:43:02:42:69:1c:9b:a6:f0:61:8e:7c: 1c:0a:a5:ff:4a:c9:2e:33:ed:18:26:4c:dc:73:c5:e4:fa:be: 52:d5:f0:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZwSxzILl5m+89AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk ZWE1MmQ4NDgtMTE3Yy00NjA3LTliYmQtZWU0MjdjNzUwNTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug7bNNC88j6W4/nvPxP1qVWD7Z/kvDnpSDoq SFwq1RxEyk+PskJsdO7ObAJ0CVxH2N+a8UzMtmcbOIk8RFdHkzu2ob7OKUtst7d0 d+VrzQ1Ilz3RJP0qsEu3Go7dZDuXK2q8oaHkol2Wt7QY11qw1b4ktvGkj0OSYCTp BOr8onOkGFpECJABcBfXPfJA739XO9RufTFXkpQVmHQH8Yx7hLjCzLqZKmawLw49 yK/gpd5FvY+uBAjZw1PsVY61sURYSWng2MI2UF8HWmk06tQbHmRXhVy6jnXz+vDr IlC7TFXQVtd5Houzdx86EhG+Od85nSZjwRhFjbBm55xAGyj7fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtljMF65MW/JWk/wO4y2po2NVmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMzM3ODc5NWEtYTJlMS0z ZTY0LTllZWItNzFmYzA5ZWJkZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKINlmMEcrC/AX21J6bMqqemkz8SgfsaPgPWjZCSK4+JA1prry5nptx Uh5PlPxri2QJBBAFT+Yiqrs3bxQMlgDr9K3I+8q7Up4uWk5fsYOvY/vhVnClL/oN 64KvuGAWj4Ybu9FNYPUgT/JDvK6cd3KyIT4+2hMOF9s3waHybFv/sXPilOypx7NF /VwJEd0gcXVzIkpzRDU4j6m062VjdZPUCD2IyUxoUsrm5IbS0g1XsP4EeII5/3X0 zA+6spny8g8b72KCj17/0xL+e7Pld0NppNYVi3/SVtUdyX8OZM9DAkJpHJum8GGO fBwKpf9KyS4z7RgmTNxzxeT6vlLV8A8= -----END CERTIFICATE-----Generated at Fri Jan 30 14:54:27 2026 by rpki-client