This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/4fa2c668-4824-3485-a970-ba019a4f4f2f.roa File: 4fa2c668-4824-3485-a970-ba019a4f4f2f.roa (raw, json) Hash identifier: CGplOfbyU6FrXO86gNCmLZVuGc3HJvGLUM2Je9xSx6Q= Subject key identifier: AA:A4:6F:4A:70:47:89:AC:BD:5D:67:06:10:1A:7E:17:E2:A1:DC:28 Certificate issuer: /CN=e1c66f08-5c7f-40e3-8548-bff01ed700d5 Certificate serial: 010D0C9F4328584C50D194B61955BE23DFFB4B80 Authority key identifier: 2B:01:3A:6A:59:99:92:D2:4B:EF:36:05:2F:65:6B:EC:D2:D7:1E:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/4fa2c668-4824-3485-a970-ba019a4f4f2f.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 3257 IP address blocks: 23.140.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:94:b6:19:55:be:23:df:fb:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1c66f08-5c7f-40e3-8548-bff01ed700d5 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=0813dc00-8a55-4578-a4f0-6ae5b154b656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:eb:3b:8b:fd:83:0d:b4:99:af:eb:44:86: 18:e8:1f:62:af:7d:46:e5:83:d7:e1:c0:51:4f:a7: 31:aa:12:9b:af:ce:ea:6d:97:fb:60:6e:32:72:f9: be:bf:d0:ee:2e:02:28:14:98:3b:ed:13:66:96:96: ef:55:c4:bd:77:a5:30:06:0b:1b:09:39:a0:21:07: cf:75:90:30:cd:ad:2e:50:3e:c0:ea:0a:58:a7:1e: 60:de:b0:28:18:b4:3f:cd:12:79:60:55:ce:38:e1: 7a:81:65:70:10:a6:81:c9:de:19:43:ed:50:29:06: 8c:06:4e:13:9b:06:5c:4f:50:b0:f8:2f:f3:14:b1: 2a:88:4e:a4:5f:28:a5:28:12:55:9f:f6:4e:e4:6d: b1:d2:5e:52:10:44:d5:25:02:63:f3:e6:26:64:2f: 85:85:14:ad:66:9c:54:fb:06:cf:dc:0a:be:dc:fa: be:d7:87:18:72:b5:db:a9:41:82:91:de:3e:ee:f1: f5:82:2b:a3:12:f8:e3:5e:3d:30:69:3b:76:0b:b6: 98:dd:c0:db:26:4a:3a:e0:7f:6a:a8:ab:c1:cb:3f: e2:67:4d:9e:c2:e0:23:5f:91:87:99:48:0d:4e:4c: d3:f2:ee:66:70:63:8c:e7:91:bf:17:1f:7e:21:8a: bf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A4:6F:4A:70:47:89:AC:BD:5D:67:06:10:1A:7E:17:E2:A1:DC:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/4fa2c668-4824-3485-a970-ba019a4f4f2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.crl X509v3 Authority Key Identifier: keyid:2B:01:3A:6A:59:99:92:D2:4B:EF:36:05:2F:65:6B:EC:D2:D7:1E:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer sbgp-ipAddrBlock: critical IPv4: 23.140.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:be:72:04:08:92:16:cd:9d:eb:39:95:7b:3c:22:ea:fa:05: e4:cb:b1:dd:19:96:36:95:02:f5:91:92:49:0b:82:b6:cd:2d: 9e:7c:c6:12:f9:7e:59:3d:66:33:74:e0:16:20:4a:08:0a:4f: aa:83:49:05:97:81:fd:75:02:16:69:e3:e5:91:91:c8:de:59: 27:b9:f5:44:01:32:84:a2:80:ec:71:ea:ea:dd:49:1d:6a:51: e5:fa:6f:30:b5:b5:48:92:b0:33:3f:34:fa:d6:a0:3f:f9:6b: bb:e5:d0:87:64:97:ba:ff:da:90:29:b8:79:82:ef:cc:1d:6b: 30:16:5c:66:d8:5a:95:a1:3c:93:34:3b:c3:41:0d:a3:6d:53: c8:4b:72:8b:1a:97:1d:68:75:fd:6d:bf:ed:75:f6:0c:ef:29: fc:fc:0c:e4:d8:9c:1c:8c:eb:86:b0:c1:8d:4e:a7:b5:b1:a5: 9b:83:48:f3:21:ee:29:19:03:51:c7:41:07:89:77:42:75:7c: bd:f9:3d:58:5b:24:75:89:aa:6a:f4:8d:5b:d8:58:1c:66:b6: db:22:47:fe:8f:98:6a:04:c5:b3:e6:b2:f7:2f:f2:e3:97:f6: 0d:e5:36:a8:b8:bd:51:1a:4f:e1:26:3e:cf:df:de:d0:78:84: 4b:99:28:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0ZS2GVW+I9/7S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTFjNjZmMDgtNWM3Zi00MGUzLTg1NDgtYmZmMDFlZDcw MGQ1MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk MDgxM2RjMDAtOGE1NS00NTc4LWE0ZjAtNmFlNWIxNTRiNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYPrO4v9gw20ma/rRIYY6B9ir31G5YPX4cBR T6cxqhKbr87qbZf7YG4ycvm+v9DuLgIoFJg77RNmlpbvVcS9d6UwBgsbCTmgIQfP dZAwza0uUD7A6gpYpx5g3rAoGLQ/zRJ5YFXOOOF6gWVwEKaByd4ZQ+1QKQaMBk4T mwZcT1Cw+C/zFLEqiE6kXyilKBJVn/ZO5G2x0l5SEETVJQJj8+YmZC+FhRStZpxU +wbP3Aq+3Pq+14cYcrXbqUGCkd4+7vH1giujEvjjXj0waTt2C7aY3cDbJko64H9q qKvByz/iZ02ewuAjX5GHmUgNTkzT8u5mcGOM55G/Fx9+IYq/ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqkb0pwR4msvV1nBhAafhfiodwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMWM2 NmYwOC01YzdmLTQwZTMtODU0OC1iZmYwMWVkNzAwZDUvNGZhMmM2NjgtNDgyNC0z NDg1LWE5NzAtYmEwMTlhNGY0ZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTFjNjZmMDgtNWM3Zi00MGUzLTg1 NDgtYmZmMDFlZDcwMGQ1L2UxYzY2ZjA4LTVjN2YtNDBlMy04NTQ4LWJmZjAxZWQ3 MDBkNS5jcmwwHwYDVR0jBBgwFoAUKwE6almZktJL7zYFL2Vr7NLXHvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMWM2NmYwOC01YzdmLTQwZTMtODU0OC1iZmYw MWVkNzAwZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4zMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW+cgQIkhbNnes5lXs8Iur6BeTLsd0ZljaVAvWRkkkLgrbNLZ58xhL5 flk9ZjN04BYgSggKT6qDSQWXgf11AhZp4+WRkcjeWSe59UQBMoSigOxx6urdSR1q UeX6bzC1tUiSsDM/NPrWoD/5a7vl0Idkl7r/2pApuHmC78wdazAWXGbYWpWhPJM0 O8NBDaNtU8hLcosalx1odf1tv+119gzvKfz8DOTYnByM64awwY1Op7WxpZuDSPMh 7ikZA1HHQQeJd0J1fL35PVhbJHWJqmr0jVvYWBxmttsiR/6PmGoExbPmsvcv8uOX 9g3lNqi4vVEaT+EmPs/f3tB4hEuZKAs= -----END CERTIFICATE-----Generated at Sat Jan 10 14:01:30 2026 by rpki-client