This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43fecc3a-0603-3673-9ec2-4f3054c50aac.roa File: 43fecc3a-0603-3673-9ec2-4f3054c50aac.roa (raw, json) Hash identifier: DKVGyrXO2cMx4+mge1r3fzMjOGPH3QjueID5jZaBxq0= Subject key identifier: DA:60:BD:74:1E:44:30:B6:86:68:21:25:C7:95:A9:51:BF:D4:0C:03 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C29BB8F0B745563CBE52B8A70 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43fecc3a-0603-3673-9ec2-4f3054c50aac.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 13335 IP address blocks: 104.23.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:8f:0b:74:55:63:cb:e5:2b:8a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=5f75ecd1-3cff-4d94-8696-4f85125dd017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:71:bb:be:bc:eb:f9:1e:9b:a5:b1:4d:fa:d5: 1c:ee:86:d7:e5:65:78:96:9f:a3:6a:49:c6:08:13: 85:d1:59:af:03:a0:0e:ef:85:e8:c7:4e:57:05:21: 00:2c:7b:45:1a:21:2b:35:b3:58:c6:30:01:4f:fe: da:1f:f5:78:2b:45:31:39:a0:e8:06:d9:a6:c0:f7: 14:d5:c6:3f:40:b4:78:e3:fe:7c:ce:4b:9c:df:0a: 32:d8:5f:79:f2:be:e6:8a:d4:96:ac:eb:50:78:5e: 91:e3:4d:e1:0f:54:0b:61:7c:60:e1:90:d3:73:0b: 54:6b:57:41:f0:4d:7b:60:2f:4a:5a:f5:4b:10:38: ae:b3:e5:78:f1:e3:96:85:79:3e:b8:8c:6e:b1:f5: 8c:69:89:67:6e:98:1d:d9:eb:35:44:fd:57:19:a4: 01:ac:38:a5:40:34:34:04:f8:1c:9a:d1:bb:2b:78: 61:8e:6f:02:1a:cb:4f:4b:89:28:d4:66:d7:c4:8f: a0:bc:47:7b:2f:76:10:b6:70:db:cc:01:8f:92:aa: 22:6a:2d:68:89:75:e6:91:b4:75:07:15:95:e3:79: 6e:fa:6f:3c:41:b7:fd:27:51:4c:ec:68:e0:00:49: 63:f4:63:8b:3e:69:2f:0e:a8:81:d8:58:b0:f7:58: ba:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:60:BD:74:1E:44:30:B6:86:68:21:25:C7:95:A9:51:BF:D4:0C:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43fecc3a-0603-3673-9ec2-4f3054c50aac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:12:16:1b:76:e8:54:70:f7:30:12:3f:61:f5:9e:d8:b6:09: b0:ee:8c:e4:8e:77:18:89:b2:9f:f5:c4:1f:7f:88:2b:37:52: 27:c0:4d:1e:b8:95:e9:43:82:6b:15:67:07:c6:58:b7:45:de: b7:6c:f5:98:cc:72:df:6c:b3:4a:e7:03:94:c8:18:e7:55:a7: 4e:cf:66:92:71:24:b9:1a:a1:66:a8:e9:90:d7:d3:7e:51:2f: 30:3e:cf:35:66:92:37:4f:7c:0d:3a:ab:1d:64:89:f1:66:09: 16:51:73:c5:82:c0:3d:39:e1:62:26:05:b4:c0:e6:9d:e3:84: de:ef:26:86:8e:48:3b:f5:d5:87:1e:95:9f:ce:98:ca:c9:b7: d5:51:bd:ae:8b:22:d1:af:b1:68:71:f6:e0:a8:b6:61:77:3b: 80:bf:3b:24:bb:24:46:80:c7:7c:af:04:ed:d6:0d:24:3c:ad: 88:19:f0:08:2d:09:1f:82:97:19:da:ac:55:3e:40:3e:c8:33: e6:f3:bc:fb:a2:c6:7e:13:93:82:f2:0b:f8:84:af:f0:8b:44: e8:b9:c1:13:85:20:88:1b:01:b4:a2:48:f5:3a:6d:da:2a:1b: b6:e4:9c:89:09:24:3a:0b:2d:f7:db:35:6b:e7:3d:e5:c7:16: fd:4b:05:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwpu48LdFVjy+UrinAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk NWY3NWVjZDEtM2NmZi00ZDk0LTg2OTYtNGY4NTEyNWRkMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3G7vrzr+R6bpbFN+tUc7obX5WV4lp+jaknG CBOF0VmvA6AO74Xox05XBSEALHtFGiErNbNYxjABT/7aH/V4K0UxOaDoBtmmwPcU 1cY/QLR44/58zkuc3woy2F958r7mitSWrOtQeF6R403hD1QLYXxg4ZDTcwtUa1dB 8E17YC9KWvVLEDius+V48eOWhXk+uIxusfWMaYlnbpgd2es1RP1XGaQBrDilQDQ0 BPgcmtG7K3hhjm8CGstPS4ko1GbXxI+gvEd7L3YQtnDbzAGPkqoiai1oiXXmkbR1 BxWV43lu+m88Qbf9J1FM7GjgAElj9GOLPmkvDqiB2Fiw91i6fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpgvXQeRDC2hmghJceVqVG/1AwDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDNmZWNjM2EtMDYwMy0z NjczLTllYzItNGYzMDU0YzUwYWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUSFht26FRw9zASP2H1nti2CbDujOSOdxiJsp/1xB9/iCs3UifATR64 lelDgmsVZwfGWLdF3rds9ZjMct9ss0rnA5TIGOdVp07PZpJxJLkaoWao6ZDX035R LzA+zzVmkjdPfA06qx1kifFmCRZRc8WCwD054WImBbTA5p3jhN7vJoaOSDv11Yce lZ/OmMrJt9VRva6LItGvsWhx9uCotmF3O4C/OyS7JEaAx3yvBO3WDSQ8rYgZ8Agt CR+ClxnarFU+QD7IM+bzvPuixn4Tk4LyC/iEr/CLROi5wROFIIgbAbSiSPU6bdoq G7bknIkJJDoLLffbNWvnPeXHFv1LBVM= -----END CERTIFICATE-----Generated at Sun Jan 18 11:09:08 2026 by rpki-client