This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa File: af12d4d2-eba1-3225-9761-d1d0bcd90937.roa (raw, json) Hash identifier: eq1VfCwI/W9Zv8E9RZsiPReC9vz3yf2M21cfe68sOIs= Subject key identifier: 3B:42:D2:24:54:23:CF:91:4A:4E:7D:3A:BF:AB:50:C9:F1:47:A3:8C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C874180E12BAD8B8EB5AE1FC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa Signing time: Thu 15 Jan 2026 02:00:31 +0000 ROA not before: Thu 15 Jan 2026 02:00:31 +0000 ROA not after: Wed 15 Apr 2026 01:00:31 +0000 asID: 13335 IP address blocks: 104.20.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:87:41:80:e1:2b:ad:8b:8e:b5:ae:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 15 02:00:31 2026 GMT Not After : Apr 15 01:00:31 2026 GMT Subject: CN=24814e65-58e3-46e3-b85c-36ff9bcb02c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6c:52:d1:1d:56:c0:fa:d9:e9:05:33:5d:96: b1:69:3a:f0:2f:0f:f0:65:0d:d5:18:67:6e:f4:c0: cb:46:02:82:4f:37:c4:c6:ff:5b:92:41:82:c1:c5: d1:a9:0e:e8:1a:ea:2d:7c:dd:eb:41:ff:27:d5:ae: ae:14:7f:a2:f0:21:e2:8a:00:5e:5e:e5:05:fc:5e: 14:af:21:f5:3d:4e:de:dc:9c:e9:dd:60:d6:91:fe: 1b:13:87:2e:7c:08:ec:0c:31:60:05:9a:4e:06:4d: b4:d9:ce:ec:a9:50:e1:f7:41:71:3c:35:e1:a2:7e: 3b:64:3d:ef:36:b3:ee:e1:12:8d:ae:f6:0d:d7:a1: 1e:ef:e9:26:13:fe:f0:68:d1:8b:0c:81:0a:66:5c: 7d:6b:36:f1:25:97:ed:00:e0:88:c4:03:eb:c5:db: fa:07:47:78:d5:4e:e0:15:0b:fe:f4:bd:eb:17:ce: e2:f7:14:c5:db:a5:69:cf:a6:28:04:14:58:46:33: 92:ea:12:2a:4b:98:92:a3:c9:67:7a:71:8b:ff:cb: ff:3f:5c:85:1d:c3:9c:fb:3d:fa:5f:b2:62:7e:6a: 69:65:25:aa:a9:bc:12:1a:6f:34:71:a8:55:dc:eb: 18:1e:39:92:19:4d:ae:08:bf:1e:c2:73:44:19:4c: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:42:D2:24:54:23:CF:91:4A:4E:7D:3A:BF:AB:50:C9:F1:47:A3:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/af12d4d2-eba1-3225-9761-d1d0bcd90937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:c6:18:57:0c:27:14:ba:d8:d8:12:95:db:03:88:d4:2d:a6: 3a:2e:ed:38:f3:47:0b:13:5f:76:b3:dc:b7:52:2d:d0:46:dd: 63:ff:db:76:1c:b7:b0:92:fe:cd:22:21:a3:07:09:f5:8e:bb: a1:8e:be:58:7d:b5:35:4b:ff:08:3b:74:69:02:50:23:cc:0e: 47:a7:94:f2:f8:ea:8e:1d:76:fc:17:83:e7:8e:77:51:4b:67: 4f:87:88:59:3e:3d:80:3b:5c:64:1d:7c:18:ab:55:ff:8d:fa: 74:9d:44:9a:2b:21:fe:5c:5e:b1:34:e6:63:3f:99:3a:61:3a: 96:6b:f7:d4:a8:65:46:8f:81:93:aa:e2:29:e1:80:95:37:0d: ec:b7:3e:08:d9:21:0e:34:55:ed:db:fc:d2:92:53:c1:0a:57: 96:31:ec:9a:b1:2f:b4:b0:3c:56:76:e4:ae:b9:b7:fd:e0:7a: 26:42:bf:de:7c:8e:71:9e:57:12:3c:99:ce:6e:cf:3a:b4:c4: 7c:82:02:8b:6e:01:92:8a:0a:cc:67:fe:3c:bc:c7:ed:65:e8: 85:cc:0b:71:27:35:8b:4b:d1:29:48:ba:68:d3:a1:19:a9:08: 85:08:5b:13:3e:4c:35:a9:50:c3:53:a3:e5:4d:13:43:12:b1: f5:b6:fc:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyHQYDhK62LjrWuH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExNTAyMDAzMVoXDTI2MDQxNTAxMDAzMVowLzEtMCsGA1UEAxMk MjQ4MTRlNjUtNThlMy00NmUzLWI4NWMtMzZmZjliY2IwMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32xS0R1WwPrZ6QUzXZaxaTrwLw/wZQ3VGGdu 9MDLRgKCTzfExv9bkkGCwcXRqQ7oGuotfN3rQf8n1a6uFH+i8CHiigBeXuUF/F4U ryH1PU7e3Jzp3WDWkf4bE4cufAjsDDFgBZpOBk202c7sqVDh90FxPDXhon47ZD3v NrPu4RKNrvYN16Ee7+kmE/7waNGLDIEKZlx9azbxJZftAOCIxAPrxdv6B0d41U7g FQv+9L3rF87i9xTF26Vpz6YoBBRYRjOS6hIqS5iSo8lnenGL/8v/P1yFHcOc+z36 X7JifmppZSWqqbwSGm80cahV3OsYHjmSGU2uCL8ewnNEGUzoEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtC0iRUI8+RSk59Or+rUMnxR6OMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWYxMmQ0ZDItZWJhMS0z MjI1LTk3NjEtZDFkMGJjZDkwOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/GGFcMJxS62NgSldsDiNQtpjou7TjzRwsTX3az3LdSLdBG3WP/23Yc t7CS/s0iIaMHCfWOu6GOvlh9tTVL/wg7dGkCUCPMDkenlPL46o4ddvwXg+eOd1FL Z0+HiFk+PYA7XGQdfBirVf+N+nSdRJorIf5cXrE05mM/mTphOpZr99SoZUaPgZOq 4inhgJU3Dey3PgjZIQ40Ve3b/NKSU8EKV5Yx7JqxL7SwPFZ25K65t/3geiZCv958 jnGeVxI8mc5uzzq0xHyCAotuAZKKCsxn/jy8x+1l6IXMC3EnNYtL0SlIumjToRmp CIUIWxM+TDWpUMNTo+VNE0MSsfW2/E8= -----END CERTIFICATE-----Generated at Sun Jan 18 11:07:49 2026 by rpki-client