This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/25115bad-c7e4-3044-905c-ba78145afba5.roa File: 25115bad-c7e4-3044-905c-ba78145afba5.roa (raw, json) Hash identifier: 4ONBoCljHYbjpkuylBHXiQFRS3TU1MAGvlPsfbxIWL0= Subject key identifier: 3E:5C:7E:4D:D1:8A:93:E7:97:B6:39:58:07:A8:D8:46:24:C0:74:77 Certificate issuer: /CN=4568d7ed-0cba-4999-8689-06708c0baea6 Certificate serial: 010D0C9F4328584C59312F585FD10CCFFCA55600 Authority key identifier: 45:9B:3B:DF:F9:74:DD:70:E1:F6:86:60:0E:C7:CC:4C:7E:60:A6:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/25115bad-c7e4-3044-905c-ba78145afba5.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 399384 IP address blocks: 104.249.168.0/24 maxlen: 24 2620:94:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/4568d7ed-0cba-4999-8689-06708c0baea6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/4568d7ed-0cba-4999-8689-06708c0baea6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:2f:58:5f:d1:0c:cf:fc:a5:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4568d7ed-0cba-4999-8689-06708c0baea6 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=97065c2b-9d43-4c8d-8e24-b82702caa67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:7e:54:90:23:7f:97:82:cc:85:bf:c8:7e: 08:95:5d:aa:f4:95:9c:36:f4:cd:df:4b:00:ba:73: 6b:22:97:09:53:1f:ae:40:37:7f:18:56:ae:4d:8f: 74:f2:18:7f:24:8f:04:76:a7:89:b8:67:62:f1:35: 22:db:c6:76:c1:76:d8:67:65:a2:b5:bb:b3:2d:8e: e4:e9:c7:b4:e4:bd:dc:54:64:f0:bf:af:00:18:10: cf:67:fb:83:2a:f6:e4:ce:c1:b2:17:33:e1:21:c0: 86:c8:8f:3b:2a:28:d0:e1:cb:52:54:ff:76:95:3a: 65:e1:34:4a:65:ed:93:9f:f0:c3:6a:85:7f:82:d8: d6:46:b3:98:8d:31:d0:75:94:13:b5:25:01:c0:3e: c8:ee:f2:25:cb:f5:4f:a7:a5:e2:a3:c7:b6:7d:0f: 86:a2:ac:aa:66:0c:71:47:20:f9:c4:78:93:3c:f7: 20:eb:04:03:25:7f:31:e4:41:c1:cf:d4:e9:83:f9: d1:09:bf:bd:6a:f0:2e:2a:20:5d:c7:18:62:62:95: 85:60:a7:22:2e:11:02:9d:3a:48:03:06:cb:93:d0: 4f:2e:7b:3b:66:d8:8a:ba:45:ec:50:6d:4f:2d:d3: 3f:06:e8:e5:ea:75:9f:62:41:17:00:4b:ed:53:4a: c5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5C:7E:4D:D1:8A:93:E7:97:B6:39:58:07:A8:D8:46:24:C0:74:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/25115bad-c7e4-3044-905c-ba78145afba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6/4568d7ed-0cba-4999-8689-06708c0baea6.crl X509v3 Authority Key Identifier: keyid:45:9B:3B:DF:F9:74:DD:70:E1:F6:86:60:0E:C7:CC:4C:7E:60:A6:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4568d7ed-0cba-4999-8689-06708c0baea6.cer sbgp-ipAddrBlock: critical IPv4: 104.249.168.0/24 IPv6: 2620:94:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:9a:02:b6:1e:49:98:a3:3a:16:6a:a1:5c:fd:88:d0:ec:67: fd:eb:d5:0a:45:3d:2c:18:ff:3e:c3:6e:15:bd:e3:0e:86:0d: 4f:be:b0:01:92:13:b7:54:b5:22:7f:9c:32:8c:dd:1d:0e:3c: 29:06:86:79:0e:c0:6e:2c:e4:a8:61:ea:c6:f3:95:3e:52:6e: b3:3f:36:82:42:45:85:55:58:8c:d2:51:8f:e2:ff:a9:3c:71: 11:21:7d:81:ac:a5:25:07:62:ad:31:95:3e:5b:06:34:ea:ab: 8a:36:1b:2b:d1:82:1a:6d:2d:95:d2:cd:b2:5d:ad:94:37:47: 99:2f:38:4f:33:87:72:71:0d:07:16:d0:0d:c9:3f:79:14:dc: 3d:fb:a0:38:5d:e5:66:1e:17:3c:24:a6:e7:7c:db:05:6d:85: 65:c3:f4:23:c6:1c:1a:12:c0:6e:4c:54:4f:dd:a9:75:f0:03: 93:3f:4e:1e:19:df:67:fd:34:7b:24:58:13:42:ee:09:55:92: b8:c6:0b:0b:c4:64:59:9b:40:d5:cc:29:47:d2:89:57:f5:cd: 1a:85:ad:1c:aa:b6:a3:dc:ba:51:2a:8b:94:85:c0:80:ed:79: 5e:d7:d5:5b:42:6e:d0:8c:dc:11:f7:b0:10:44:a3:dd:7a:e4: 3d:57:69:db -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWExZMS9YX9EMz/ylVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU2OGQ3ZWQtMGNiYS00OTk5LTg2ODktMDY3MDhjMGJh ZWE2MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk OTcwNjVjMmItOWQ0My00YzhkLThlMjQtYjgyNzAyY2FhNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8p+VJAjf5eCzIW/yH4IlV2q9JWcNvTN30sA unNrIpcJUx+uQDd/GFauTY908hh/JI8EdqeJuGdi8TUi28Z2wXbYZ2WitbuzLY7k 6ce05L3cVGTwv68AGBDPZ/uDKvbkzsGyFzPhIcCGyI87KijQ4ctSVP92lTpl4TRK Ze2Tn/DDaoV/gtjWRrOYjTHQdZQTtSUBwD7I7vIly/VPp6Xio8e2fQ+GoqyqZgxx RyD5xHiTPPcg6wQDJX8x5EHBz9Tpg/nRCb+9avAuKiBdxxhiYpWFYKciLhECnTpI AwbLk9BPLns7ZtiKukXsUG1PLdM/Bujl6nWfYkEXAEvtU0rF+QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFD5cfk3RipPnl7Y5WAeo2EYkwHR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80NTY4 ZDdlZC0wY2JhLTQ5OTktODY4OS0wNjcwOGMwYmFlYTYvMjUxMTViYWQtYzdlNC0z MDQ0LTkwNWMtYmE3ODE0NWFmYmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDU2OGQ3ZWQtMGNiYS00OTk5LTg2 ODktMDY3MDhjMGJhZWE2LzQ1NjhkN2VkLTBjYmEtNDk5OS04Njg5LTA2NzA4YzBi YWVhNi5jcmwwHwYDVR0jBBgwFoAURZs73/l03XDh9oZgDsfMTH5gpiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80NTY4ZDdlZC0wY2JhLTQ5OTktODY4OS0wNjcw OGMwYmFlYTYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAaPmoMA8E AgACMAkDBwAmIACUYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAkJoCth5JmKM6FmqhXP2I0Oxn/evVCkU9 LBj/PsNuFb3jDoYNT76wAZITt1S1In+cMozdHQ48KQaGeQ7AbizkqGHqxvOVPlJu sz82gkJFhVVYjNJRj+L/qTxxESF9gaylJQdirTGVPlsGNOqrijYbK9GCGm0tldLN sl2tlDdHmS84TzOHcnENBxbQDck/eRTcPfugOF3lZh4XPCSm53zbBW2FZcP0I8Yc GhLAbkxUT92pdfADkz9OHhnfZ/00eyRYE0LuCVWSuMYLC8RkWZtA1cwpR9KJV/XN GoWtHKq2o9y6USqLlIXAgO15XtfVW0Ju0IzcEfewEESj3XrkPVdp2w== -----END CERTIFICATE-----Generated at Sat Jan 10 14:13:56 2026 by rpki-client