This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95b4db20-bf2b-37ba-955b-17709a9dbfd6.roa File: 95b4db20-bf2b-37ba-955b-17709a9dbfd6.roa (raw, json) Hash identifier: iE7iKclKRZQQHI/RKZhjJpxDBiAf0Vd7g36Lz1twAjs= Subject key identifier: 9E:9D:FE:95:86:A0:C9:1A:6B:89:44:0D:E8:CB:74:86:3E:2E:EC:F8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C87418297C1A2EA7C8A135200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95b4db20-bf2b-37ba-955b-17709a9dbfd6.roa Signing time: Thu 15 Jan 2026 02:00:31 +0000 ROA not before: Thu 15 Jan 2026 02:00:31 +0000 ROA not after: Wed 15 Apr 2026 01:00:31 +0000 asID: 13335 IP address blocks: 104.25.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:87:41:82:97:c1:a2:ea:7c:8a:13:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 15 02:00:31 2026 GMT Not After : Apr 15 01:00:31 2026 GMT Subject: CN=50f6a091-5efb-4cff-a250-b2ddcd300aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3e:18:0d:9d:25:72:19:4c:4a:d0:a5:ec:0a: d4:7d:5a:1b:02:2f:ad:f8:90:e7:ef:a5:0c:c1:36: 23:3f:c6:ad:6e:61:18:d6:46:99:bb:b1:11:8f:91: f2:0f:ff:1e:16:86:55:4b:3f:c3:74:64:b0:53:d0: 69:0e:00:1c:3a:64:40:8a:94:77:09:f2:a9:6b:4f: ba:af:54:7f:ec:bf:14:a5:02:66:4e:47:08:96:79: 1b:2d:c8:59:42:00:23:03:0d:36:a3:ef:d2:91:c4: 9c:35:78:48:36:4f:c3:e8:f9:be:f5:64:23:1c:df: fc:4d:ed:11:21:8b:8f:f7:a5:10:55:80:67:a3:dc: 8a:cb:05:33:8a:c6:7b:da:1e:d3:19:f3:b1:4e:cc: 03:53:d2:bf:03:12:24:88:23:a3:7c:13:e0:1e:a8: 63:e8:18:54:3d:dd:06:31:45:be:ba:0e:d6:b9:56: ad:f5:63:24:8f:9d:53:ab:75:36:34:d7:52:5b:79: 02:4a:14:38:30:74:61:a4:dd:3b:84:7e:73:72:3f: f0:46:83:02:59:18:00:35:e7:25:03:8e:6b:32:c5: b5:c3:00:10:79:38:fa:5f:8f:c1:35:1c:a3:90:6f: 82:2d:d5:de:d4:fe:3d:64:69:20:cb:16:49:fd:0c: cb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9D:FE:95:86:A0:C9:1A:6B:89:44:0D:E8:CB:74:86:3E:2E:EC:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95b4db20-bf2b-37ba-955b-17709a9dbfd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.25.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:7f:38:7b:6a:33:25:db:8a:30:ac:46:22:92:3a:0f:dc:e4: 79:12:f9:9e:66:56:48:3b:5a:4a:bf:22:40:2a:60:e5:f0:9e: f1:2d:f1:e2:56:7b:72:4a:8d:69:ed:bd:4c:4e:60:38:be:5c: 58:27:47:3d:c3:25:16:4e:7b:49:6c:96:bf:0f:25:3a:d3:85: 2e:22:d6:cd:a7:7c:3f:3d:73:16:01:c4:e2:c1:3c:30:b3:61: 42:c6:cc:38:2b:a9:00:86:45:05:f2:8e:ba:5c:6f:30:f6:04: e6:ab:6c:29:ad:e0:0b:00:89:ed:f5:64:54:87:4d:f8:e7:59: 8b:a5:08:a8:1b:2e:02:b9:64:37:a2:a9:de:a0:88:f8:8d:2a: 6a:8f:e1:7f:b7:60:f5:27:0b:4a:ed:04:29:81:45:ef:a6:7d: 38:b6:2d:1c:8d:09:83:19:fd:f0:9d:6e:0e:e6:6a:1c:63:06: c8:2b:3b:84:67:bd:72:9c:a1:0c:ef:61:f8:b7:ea:65:18:97: 31:89:9b:ae:1d:10:c6:a2:97:ec:58:13:37:e1:2c:0a:5d:d2: 3f:3d:96:e5:52:63:bb:89:5f:99:c8:fc:17:8b:e2:42:38:48: aa:aa:c9:a0:8b:c1:cd:12:eb:c3:c6:7a:de:b5:c2:c8:32:5a: 73:0f:a7:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyHQYKXwaLqfIoTUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExNTAyMDAzMVoXDTI2MDQxNTAxMDAzMVowLzEtMCsGA1UEAxMk NTBmNmEwOTEtNWVmYi00Y2ZmLWEyNTAtYjJkZGNkMzAwYWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j4YDZ0lchlMStCl7ArUfVobAi+t+JDn76UM wTYjP8atbmEY1kaZu7ERj5HyD/8eFoZVSz/DdGSwU9BpDgAcOmRAipR3CfKpa0+6 r1R/7L8UpQJmTkcIlnkbLchZQgAjAw02o+/SkcScNXhINk/D6Pm+9WQjHN/8Te0R IYuP96UQVYBno9yKywUzisZ72h7TGfOxTswDU9K/AxIkiCOjfBPgHqhj6BhUPd0G MUW+ug7WuVat9WMkj51Tq3U2NNdSW3kCShQ4MHRhpN07hH5zcj/wRoMCWRgANecl A45rMsW1wwAQeTj6X4/BNRyjkG+CLdXe1P49ZGkgyxZJ/QzLbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6d/pWGoMkaa4lEDejLdIY+Luz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTViNGRiMjAtYmYyYi0z N2JhLTk1NWItMTc3MDlhOWRiZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ/OHtqMyXbijCsRiKSOg/c5HkS+Z5mVkg7Wkq/IkAqYOXwnvEt8eJW e3JKjWntvUxOYDi+XFgnRz3DJRZOe0lslr8PJTrThS4i1s2nfD89cxYBxOLBPDCz YULGzDgrqQCGRQXyjrpcbzD2BOarbCmt4AsAie31ZFSHTfjnWYulCKgbLgK5ZDei qd6giPiNKmqP4X+3YPUnC0rtBCmBRe+mfTi2LRyNCYMZ/fCdbg7mahxjBsgrO4Rn vXKcoQzvYfi36mUYlzGJm64dEMail+xYEzfhLApd0j89luVSY7uJX5nI/BeL4kI4 SKqqyaCLwc0S68PGet61wsgyWnMPp+w= -----END CERTIFICATE-----Generated at Sun Jan 18 11:07:06 2026 by rpki-client