This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48fd3cdd-b7d2-3a64-bf54-6192a118b466.roa File: 48fd3cdd-b7d2-3a64-bf54-6192a118b466.roa (raw, json) Hash identifier: nxh/y1BQc7waxpf4Qo2M4uw7gOzU//H9S8DZShQjW/I= Subject key identifier: D4:4B:09:74:0B:FA:AD:1C:EF:85:F9:57:A6:3D:86:F5:6B:17:11:FB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C33812C14DFB5C6F564A8A960 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48fd3cdd-b7d2-3a64-bf54-6192a118b466.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 13335 IP address blocks: 104.29.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:2c:14:df:b5:c6:f5:64:a8:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=cf945a20-ac6d-4e01-9296-4a89910a206f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:35:bb:e1:36:d2:97:fc:b2:d6:ce:55:f9: c3:06:7c:2a:e9:52:82:49:b8:05:83:91:fc:b0:0b: 13:e4:20:79:0f:e1:22:a0:f7:67:d4:56:74:17:85: 9a:c5:a5:b3:6a:9b:37:91:41:ee:a9:d6:aa:dd:e2: 4c:7b:d8:4e:84:18:7b:14:8d:2e:79:4f:22:9d:81: e5:8f:3a:7a:e2:07:8f:b4:b2:5c:1c:e5:92:e0:90: 53:4b:e9:8f:20:1c:3e:f0:5f:90:87:20:31:20:9a: 64:81:df:c1:ba:a4:ec:16:36:ba:f6:86:1c:02:8e: 47:7c:ee:f1:54:a7:a4:a8:85:68:10:39:bb:f1:43: 7c:47:4b:7e:55:1a:7c:73:70:d2:f3:bd:f9:bc:fe: 16:16:bf:5c:a6:86:54:85:a6:e9:17:64:4e:eb:8f: f6:94:6b:15:35:9e:6a:2f:d6:be:c6:31:a6:2a:1c: b3:ce:29:16:2b:4b:9f:cc:4b:d3:8f:9c:99:f0:ca: 05:c3:36:b9:50:35:af:f0:e7:c0:f7:29:83:6c:69: c6:11:77:b6:4c:c0:fd:4c:b9:9e:32:9c:27:29:53: 9c:74:05:2f:6c:e2:cf:4e:6f:77:6b:eb:2f:aa:5b: ad:37:fd:a5:7b:6a:28:19:75:6c:55:52:6b:a8:58: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4B:09:74:0B:FA:AD:1C:EF:85:F9:57:A6:3D:86:F5:6B:17:11:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/48fd3cdd-b7d2-3a64-bf54-6192a118b466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:cd:a4:71:d9:28:b1:73:7c:7a:df:d1:ea:d0:10:06:27:3e: 1b:6f:4f:f8:07:55:23:54:8b:51:70:39:25:0a:a7:15:a9:9b: 37:3e:e2:0a:3c:02:8f:7d:a2:02:5f:22:a6:00:54:03:d8:6a: d1:c6:80:99:80:ed:c1:31:17:d9:1e:76:54:b2:37:e5:6e:5b: 20:90:8a:54:b5:22:23:46:06:da:f5:27:bc:ce:66:9b:e7:e1: a7:0d:71:41:d6:2a:74:20:1d:d2:02:1e:38:10:b9:04:d3:51: 28:ba:bd:3f:78:5b:7b:84:78:67:8a:e2:24:06:89:56:47:ba: 84:63:b3:8e:c0:65:cc:68:db:60:5e:41:64:b3:06:12:5f:5a: 49:4e:38:dd:9a:fc:8d:3f:02:46:c9:5a:d1:f2:06:18:c4:fd: 6c:b1:52:65:b8:95:68:4e:1b:1d:63:13:96:23:13:60:af:6d: c8:f8:44:d0:f6:f7:a6:1a:ab:4b:89:b8:9d:63:d4:83:ab:39: 57:5a:18:89:1c:ea:e4:47:da:07:86:a8:e3:66:0e:8b:9b:7b: f0:dc:86:dd:48:ad:7a:ed:0b:6e:75:c3:21:b4:5a:10:a2:b2: 11:12:dc:6d:8e:6c:6f:c3:70:84:b6:4e:ce:31:43:90:3f:e6: 01:5d:01:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgSwU37XG9WSoqWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk Y2Y5NDVhMjAtYWM2ZC00ZTAxLTkyOTYtNGE4OTkxMGEyMDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf01u+E20pf8stbOVfnDBnwq6VKCSbgFg5H8 sAsT5CB5D+EioPdn1FZ0F4WaxaWzaps3kUHuqdaq3eJMe9hOhBh7FI0ueU8inYHl jzp64gePtLJcHOWS4JBTS+mPIBw+8F+QhyAxIJpkgd/BuqTsFja69oYcAo5HfO7x VKekqIVoEDm78UN8R0t+VRp8c3DS8735vP4WFr9cpoZUhabpF2RO64/2lGsVNZ5q L9a+xjGmKhyzzikWK0ufzEvTj5yZ8MoFwza5UDWv8OfA9ymDbGnGEXe2TMD9TLme MpwnKVOcdAUvbOLPTm93a+svqlutN/2le2ooGXVsVVJrqFgLhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRLCXQL+q0c74X5V6Y9hvVrFxH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDhmZDNjZGQtYjdkMi0z YTY0LWJmNTQtNjE5MmExMThiNDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7NpHHZKLFzfHrf0erQEAYnPhtvT/gHVSNUi1FwOSUKpxWpmzc+4go8 Ao99ogJfIqYAVAPYatHGgJmA7cExF9kedlSyN+VuWyCQilS1IiNGBtr1J7zOZpvn 4acNcUHWKnQgHdICHjgQuQTTUSi6vT94W3uEeGeK4iQGiVZHuoRjs47AZcxo22Be QWSzBhJfWklOON2a/I0/AkbJWtHyBhjE/WyxUmW4lWhOGx1jE5YjE2Cvbcj4RND2 96Yaq0uJuJ1j1IOrOVdaGIkc6uRH2geGqONmDoube/Dcht1IrXrtC251wyG0WhCi shES3G2ObG/DcIS2Ts4xQ5A/5gFdAZ0= -----END CERTIFICATE-----Generated at Fri Dec 19 07:51:54 2025 by rpki-client