This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/cf64dd3f-c7b9-3d06-b121-e72c561a89da.roa File: cf64dd3f-c7b9-3d06-b121-e72c561a89da.roa (raw, json) Hash identifier: Z2GNIwIWzs1PmnipknEUdn56xQhKohKNmjIb020iRmI= Subject key identifier: 40:0F:B0:82:17:A7:F7:9C:92:CE:D5:C2:B9:CA:52:3D:6C:F8:44:98 Certificate issuer: /CN=b32ded34-63dd-4272-9a22-5524e5e4ab15 Certificate serial: 010D0C9F4328584C6E217243B1AF6019B86DB940 Authority key identifier: 95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/cf64dd3f-c7b9-3d06-b121-e72c561a89da.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 14618 IP address blocks: 104.171.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:72:43:b1:af:60:19:b8:6d:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32ded34-63dd-4272-9a22-5524e5e4ab15 Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=c8147dce-5f96-4e9e-96f3-0e0b3d7638ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:31:7a:12:c7:c3:79:ec:e4:e3:47:04:b7:39: 04:7b:20:16:42:de:41:ae:d0:c0:9d:14:6d:cd:0b: 04:d9:e4:d9:86:ab:34:3c:27:bb:a4:7e:21:5e:ad: 6f:a5:a7:bc:bb:10:02:cc:1b:ea:d4:8f:aa:74:be: d4:8c:57:b2:e1:38:0f:cc:ea:ee:e5:4d:34:6b:31: 93:19:4d:5c:5c:19:b7:50:d3:96:da:00:12:0b:12: 96:e5:8d:b2:d2:c9:5c:c1:19:7d:90:cf:5e:43:91: 14:c5:b1:87:1a:2b:51:8b:67:d0:e5:35:25:cc:27: b0:2c:de:fc:84:df:74:59:3a:29:00:b9:1b:3c:6b: bb:38:59:8d:52:32:df:c5:f8:04:97:01:f0:6a:d8: 0c:70:a6:16:53:17:d5:bd:87:02:8e:8c:71:7d:ac: 3c:15:02:84:77:d1:2f:ea:b1:93:7b:5d:14:b6:30: a1:0e:ec:e4:a2:f1:cb:28:f7:ab:c4:bd:9f:12:10: b8:85:5e:3a:d4:2f:6b:b8:75:d8:4d:22:34:18:77: cc:10:9a:f3:c9:a8:f6:d1:5a:b4:75:59:16:a6:91: 43:f8:b4:37:22:c1:61:e0:de:86:a0:e4:06:61:d8: ac:b9:01:24:03:b7:fa:d6:b5:26:8b:76:8a:2c:21: 47:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0F:B0:82:17:A7:F7:9C:92:CE:D5:C2:B9:CA:52:3D:6C:F8:44:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/cf64dd3f-c7b9-3d06-b121-e72c561a89da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15/b32ded34-63dd-4272-9a22-5524e5e4ab15.crl X509v3 Authority Key Identifier: keyid:95:F6:91:74:F3:9D:AA:FF:0E:3E:47:55:39:37:38:C3:90:74:6B:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b32ded34-63dd-4272-9a22-5524e5e4ab15.cer sbgp-ipAddrBlock: critical IPv4: 104.171.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:75:2f:0a:59:fa:49:50:3b:f6:06:1a:70:ed:70:10:b0:50: 55:b0:9b:d8:97:c7:d6:9c:1f:9b:55:f0:17:09:88:be:4e:9d: 4e:30:e7:35:d7:f0:a7:01:0a:ca:03:14:76:74:16:27:95:d1: 8c:f3:73:2d:d3:4e:59:85:8c:cc:b6:16:15:b0:a5:10:f3:74: e5:74:a4:e5:cb:8a:bc:08:85:3e:1f:fa:9b:b2:79:f1:eb:e0: 27:13:a8:a8:56:25:dc:d9:38:bc:f2:0c:9a:d0:4f:12:68:f4: e5:65:b6:19:f8:a6:1a:d3:8b:83:d9:c9:3e:eb:ee:56:ec:09: e8:24:40:ce:ba:b7:a1:63:1f:60:ef:92:19:0e:41:e5:69:6b: 9a:2c:2c:c5:94:54:27:b5:b8:25:1d:3b:ca:40:b9:f2:67:85: a2:eb:89:5b:24:43:12:d1:e5:67:d9:fd:29:8e:3b:5a:ec:f1: 1b:ba:4a:46:c9:37:28:5f:ff:2f:ac:84:c8:d4:cb:4b:1a:aa: e8:ad:7c:58:8e:80:2e:9d:1a:f7:07:1c:6b:19:ba:f6:c1:f0: 62:2c:80:26:d7:3c:54:66:b9:3d:94:61:8c:5b:76:5c:6a:df: e3:7e:bb:15:2b:36:94:b4:c7:3e:01:3d:88:02:57:62:59:fa: 1c:f7:42:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExuIXJDsa9gGbhtuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyZGVkMzQtNjNkZC00MjcyLTlhMjItNTUyNGU1ZTRh YjE1MB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk YzgxNDdkY2UtNWY5Ni00ZTllLTk2ZjMtMGUwYjNkNzYzOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTF6EsfDeezk40cEtzkEeyAWQt5BrtDAnRRt zQsE2eTZhqs0PCe7pH4hXq1vpae8uxACzBvq1I+qdL7UjFey4TgPzOru5U00azGT GU1cXBm3UNOW2gASCxKW5Y2y0slcwRl9kM9eQ5EUxbGHGitRi2fQ5TUlzCewLN78 hN90WTopALkbPGu7OFmNUjLfxfgElwHwatgMcKYWUxfVvYcCjoxxfaw8FQKEd9Ev 6rGTe10UtjChDuzkovHLKPerxL2fEhC4hV461C9ruHXYTSI0GHfMEJrzyaj20Vq0 dVkWppFD+LQ3IsFh4N6GoOQGYdisuQEkA7f61rUmi3aKLCFHnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAPsIIXp/ecks7VwrnKUj1s+ESYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJk ZWQzNC02M2RkLTQyNzItOWEyMi01NTI0ZTVlNGFiMTUvY2Y2NGRkM2YtYzdiOS0z ZDA2LWIxMjEtZTcyYzU2MWE4OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjMyZGVkMzQtNjNkZC00MjcyLTlh MjItNTUyNGU1ZTRhYjE1L2IzMmRlZDM0LTYzZGQtNDI3Mi05YTIyLTU1MjRlNWU0 YWIxNS5jcmwwHwYDVR0jBBgwFoAUlfaRdPOdqv8OPkdVOTc4w5B0a5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMzJkZWQzNC02M2RkLTQyNzItOWEyMi01NTI0 ZTVlNGFiMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKvGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh1LwpZ+klQO/YGGnDtcBCwUFWwm9iXx9acH5tV8BcJiL5OnU4w5zXX 8KcBCsoDFHZ0FieV0Yzzcy3TTlmFjMy2FhWwpRDzdOV0pOXLirwIhT4f+puyefHr 4CcTqKhWJdzZOLzyDJrQTxJo9OVlthn4phrTi4PZyT7r7lbsCegkQM66t6FjH2Dv khkOQeVpa5osLMWUVCe1uCUdO8pAufJnhaLriVskQxLR5WfZ/SmOO1rs8Ru6SkbJ Nyhf/y+shMjUy0saquitfFiOgC6dGvcHHGsZuvbB8GIsgCbXPFRmuT2UYYxbdlxq 3+N+uxUrNpS0xz4BPYgCV2JZ+hz3Qts= -----END CERTIFICATE-----Generated at Fri Jan 9 01:02:59 2026 by rpki-client