This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa File: c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa (raw, json) Hash identifier: 3U330ikOyL+Ijg8tysFPPBuOkz3WK3mKurNIyUXB9kg= Subject key identifier: D6:77:07:85:86:C9:B8:DF:57:68:6A:BC:FA:DD:76:63:07:ED:35:74 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C87418BB9D377C4334982ACC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa Signing time: Thu 15 Jan 2026 02:00:31 +0000 ROA not before: Thu 15 Jan 2026 02:00:31 +0000 ROA not after: Wed 15 Apr 2026 01:00:31 +0000 asID: 13335 IP address blocks: 104.20.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:87:41:8b:b9:d3:77:c4:33:49:82:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 15 02:00:31 2026 GMT Not After : Apr 15 01:00:31 2026 GMT Subject: CN=2715fd47-c652-40ab-8945-e8604a7e1793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:eb:06:1f:e5:a2:43:a1:53:2c:31:2b:3e: 6b:33:80:82:5a:12:76:e5:40:a6:ee:14:d3:d7:58: ea:aa:95:cb:6f:d3:05:bf:0c:d7:6e:fe:9b:31:fd: ba:df:cb:d0:ca:fe:79:56:e3:b4:fd:b5:d8:0e:27: 54:00:5b:29:c1:6f:24:9a:59:66:54:23:e4:4b:7b: 1b:58:61:bc:d9:76:83:6f:47:39:6c:15:8f:dc:c1: 96:4d:44:c0:67:83:6d:91:82:7b:1d:f1:9d:71:37: ea:12:6d:91:a6:00:e2:40:c0:05:3c:33:b4:7f:48: fd:57:0d:af:bf:c2:25:12:fb:31:d5:1e:e7:41:d1: 6c:08:c9:ca:e1:97:c6:4b:6c:60:e5:1a:18:92:41: 5d:8b:7c:d1:11:87:5f:18:33:b9:4a:2f:80:91:22: 6e:e8:af:1e:0b:f6:b4:90:94:d4:0b:92:ad:6b:69: aa:92:23:23:c4:00:6e:d7:9d:b6:98:3f:09:23:12: 8d:1e:58:ce:c6:44:69:06:eb:e5:19:d0:90:b4:37: fd:7a:10:42:75:3a:57:32:2c:b3:79:f2:dc:50:1f: 7c:bf:45:27:25:f5:8e:0d:3d:bf:d2:fc:74:f2:f5: 1e:50:a5:cf:79:3e:72:aa:ec:18:d8:6d:08:2a:a5: f7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:77:07:85:86:C9:B8:DF:57:68:6A:BC:FA:DD:76:63:07:ED:35:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c24cf897-3221-3583-a6f8-97d6a2a6ea0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.20.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:fd:fd:e1:16:15:e8:18:4a:d4:13:09:4f:8a:53:73:2b:ab: 73:f5:19:81:ed:ab:bc:59:39:2e:93:4b:c4:ed:9c:14:d2:fc: 86:58:77:cb:20:a7:cd:a6:5b:ae:71:69:fc:2d:54:b9:38:01: 07:42:b3:7a:1e:89:59:9e:b9:f9:01:0b:2b:0c:66:e2:d3:a2: b9:1e:40:19:6e:70:57:c1:50:fc:bc:dd:b6:08:7a:2f:6d:af: 57:f0:33:87:02:35:96:07:31:b7:0a:71:ed:d7:44:7d:a2:ef: 80:eb:d1:bf:6e:4d:50:8e:ac:41:60:5d:65:11:d8:95:8e:47: 75:5e:84:f0:45:73:8e:94:14:5b:07:f1:2c:3d:2c:78:9d:45: 72:fa:2d:99:57:21:c4:47:bb:e1:5a:2a:3f:45:4c:f3:62:9d: 3d:1b:9f:b1:be:9f:55:2f:94:9a:1f:7f:ae:dd:52:8e:e8:6f: c1:2e:56:91:a4:5f:4b:c6:76:8a:f3:c6:6a:69:29:0b:01:7a: 00:b8:ee:23:5a:37:de:5c:87:70:5e:0f:dc:26:29:ee:3e:6a: 70:d1:24:9c:c9:ed:d2:e8:74:ff:b2:50:96:d0:49:cc:20:3f: 50:98:24:95:65:6d:7c:23:fe:a3:3c:b7:82:69:72:01:0d:42: c3:67:9c:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyHQYu503fEM0mCrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExNTAyMDAzMVoXDTI2MDQxNTAxMDAzMVowLzEtMCsGA1UEAxMk MjcxNWZkNDctYzY1Mi00MGFiLTg5NDUtZTg2MDRhN2UxNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/HrBh/lokOhUywxKz5rM4CCWhJ25UCm7hTT 11jqqpXLb9MFvwzXbv6bMf2638vQyv55VuO0/bXYDidUAFspwW8kmllmVCPkS3sb WGG82XaDb0c5bBWP3MGWTUTAZ4NtkYJ7HfGdcTfqEm2RpgDiQMAFPDO0f0j9Vw2v v8IlEvsx1R7nQdFsCMnK4ZfGS2xg5RoYkkFdi3zREYdfGDO5Si+AkSJu6K8eC/a0 kJTUC5Kta2mqkiMjxABu1522mD8JIxKNHljOxkRpBuvlGdCQtDf9ehBCdTpXMiyz efLcUB98v0UnJfWODT2/0vx08vUeUKXPeT5yquwY2G0IKqX3+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZ3B4WGybjfV2hqvPrddmMH7TV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzI0Y2Y4OTctMzIyMS0z NTgzLWE2ZjgtOTdkNmEyYTZlYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB79/eEWFegYStQTCU+KU3Mrq3P1GYHtq7xZOS6TS8TtnBTS/IZYd8sg p82mW65xafwtVLk4AQdCs3oeiVmeufkBCysMZuLTorkeQBlucFfBUPy83bYIei9t r1fwM4cCNZYHMbcKce3XRH2i74Dr0b9uTVCOrEFgXWUR2JWOR3VehPBFc46UFFsH 8Sw9LHidRXL6LZlXIcRHu+FaKj9FTPNinT0bn7G+n1UvlJoff67dUo7ob8EuVpGk X0vGdorzxmppKQsBegC47iNaN95ch3BeD9wmKe4+anDRJJzJ7dLodP+yUJbQScwg P1CYJJVlbXwj/qM8t4JpcgENQsNnnCo= -----END CERTIFICATE-----Generated at Sun Jan 18 11:07:56 2026 by rpki-client