This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28306f0e-ea25-3c0e-83a8-fab04ee68b8a.roa File: 28306f0e-ea25-3c0e-83a8-fab04ee68b8a.roa (raw, json) Hash identifier: UnuIpfm825bJWuV1Zu04zw+Zc/CPYFCUiijsbw93D10= Subject key identifier: E4:B9:13:CD:1C:24:B0:3F:15:5F:AE:B8:DF:55:D9:83:2D:D6:0F:9E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C3380E2A44AD88F2438989500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28306f0e-ea25-3c0e-83a8-fab04ee68b8a.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 13335 IP address blocks: 104.29.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:80:e2:a4:4a:d8:8f:24:38:98:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=405bb3c9-3677-4b82-888c-c5f81eb12f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7f:aa:bc:ab:d4:df:4f:69:9a:96:bd:e5:17: ef:24:f2:c8:5c:7a:3c:bc:86:ae:31:25:fa:b4:ce: 29:0c:35:5d:f2:f6:47:68:69:e2:88:f8:42:3f:70: 3c:e5:7d:d6:9e:b2:9c:2b:ba:4c:e6:85:93:c0:db: 38:64:19:87:d8:12:6e:42:82:d2:79:b9:ed:66:d4: 48:5e:bd:e6:2b:6e:c4:fa:e0:f4:1d:89:28:80:c1: 50:9f:d4:75:b1:13:f7:69:1e:2f:a4:3b:37:ce:76: bc:06:96:91:95:20:63:ee:01:c7:c0:40:7f:c3:95: fa:f2:2b:8d:2d:ea:e4:91:39:31:86:c3:40:13:e8: 00:2d:c6:48:c2:73:15:89:0e:fe:b7:bb:ba:56:f6: 88:8f:d7:36:5d:d0:bf:3a:74:cd:9f:64:27:aa:84: c0:a8:b4:e5:e9:8e:5f:27:9d:43:5b:2f:e3:2e:1b: a9:46:7b:77:49:5d:62:9c:5d:63:07:ed:74:6f:c6: 71:b7:50:ff:7b:d8:97:2b:f5:53:66:45:c7:69:9f: 0b:4a:c3:0f:3a:bd:db:2a:4a:0a:ea:e9:97:eb:7a: aa:6d:f1:14:85:e7:7b:b1:1e:5e:5d:8c:37:85:83: 6b:48:17:15:12:b9:b7:85:9a:20:c0:2e:af:4c:d2: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B9:13:CD:1C:24:B0:3F:15:5F:AE:B8:DF:55:D9:83:2D:D6:0F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/28306f0e-ea25-3c0e-83a8-fab04ee68b8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f0:cb:16:29:6e:63:0f:b9:3b:da:8e:25:0d:18:6e:36:1c: 3c:cb:8a:c8:29:ce:96:5a:11:16:dd:8b:c3:fd:4a:87:96:0d: 22:4a:41:3f:b8:fc:46:0a:c9:de:b1:20:b5:47:24:16:d5:ad: b0:7b:b7:91:98:ae:6b:cb:47:99:31:15:94:69:5f:6e:6d:9c: 9e:ed:55:d6:62:24:d7:5e:fd:f9:a0:d3:21:7b:05:45:50:77: fb:56:98:84:4f:aa:44:66:37:e7:d3:80:2a:6c:31:2e:a5:1b: a5:be:ee:30:10:d7:53:a7:16:20:4b:89:e8:e3:d5:3c:fb:71: 52:64:41:4e:bf:7f:0f:33:21:40:52:f9:75:ce:13:33:ac:9e: f8:8a:91:03:36:81:a6:16:01:49:1a:b5:a7:a3:fa:2a:a5:45: 01:38:64:ca:ff:2f:0f:53:57:66:8f:94:01:e4:7f:89:f0:c4: 88:52:c7:7b:82:3d:bb:52:f2:0a:58:9d:82:61:af:89:de:b1: 7c:dc:96:47:f8:97:06:1a:43:a8:c3:6f:c1:37:eb:9b:5a:ee: 22:37:1e:be:22:a8:8f:f8:38:d6:5a:28:2a:d5:e5:f0:b0:8d: 1b:5e:47:ed:79:b4:7b:6e:f0:bd:7f:ed:b3:a0:dc:0d:d4:91: b5:8c:e9:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgOKkStiPJDiYlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk NDA1YmIzYzktMzY3Ny00YjgyLTg4OGMtYzVmODFlYjEyZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn+qvKvU309pmpa95RfvJPLIXHo8vIauMSX6 tM4pDDVd8vZHaGniiPhCP3A85X3WnrKcK7pM5oWTwNs4ZBmH2BJuQoLSebntZtRI Xr3mK27E+uD0HYkogMFQn9R1sRP3aR4vpDs3zna8BpaRlSBj7gHHwEB/w5X68iuN LerkkTkxhsNAE+gALcZIwnMViQ7+t7u6VvaIj9c2XdC/OnTNn2QnqoTAqLTl6Y5f J51DWy/jLhupRnt3SV1inF1jB+10b8Zxt1D/e9iXK/VTZkXHaZ8LSsMPOr3bKkoK 6umX63qqbfEUhed7sR5eXYw3hYNrSBcVErm3hZogwC6vTNJkvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOS5E80cJLA/FV+uuN9V2YMt1g+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjgzMDZmMGUtZWEyNS0z YzBlLTgzYTgtZmFiMDRlZTY4YjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfwyxYpbmMPuTvajiUNGG42HDzLisgpzpZaERbdi8P9SoeWDSJKQT+4 /EYKyd6xILVHJBbVrbB7t5GYrmvLR5kxFZRpX25tnJ7tVdZiJNde/fmg0yF7BUVQ d/tWmIRPqkRmN+fTgCpsMS6lG6W+7jAQ11OnFiBLiejj1Tz7cVJkQU6/fw8zIUBS +XXOEzOsnviKkQM2gaYWAUkataej+iqlRQE4ZMr/Lw9TV2aPlAHkf4nwxIhSx3uC PbtS8gpYnYJhr4nesXzclkf4lwYaQ6jDb8E365ta7iI3Hr4iqI/4ONZaKCrV5fCw jRteR+15tHtu8L1/7bOg3A3UkbWM6Tg= -----END CERTIFICATE-----Generated at Thu Dec 18 22:39:04 2025 by rpki-client