This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa File: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (raw, json) Hash identifier: 0kr8XYrbUDr24Qoi9f5QHf0U+2Q0ahZW+LGizjUPB44= Subject key identifier: 42:1A:8D:6C:9B:D4:3A:20:C3:5F:53:A1:95:A6:41:DE:C3:CE:93:14 Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F4328584C4E067D32A20FF7401C35DBC0 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 21748 IP address blocks: 104.37.232.0/21 maxlen: 24 2606:8b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 31 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:7d:32:a2:0f:f7:40:1c:35:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=e97b18e9-97d8-45d1-9885-b1abd5bb233d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:10:69:ad:cd:d0:bd:79:4b:28:b0:a4:23: cc:f7:be:a5:29:4a:0f:ec:0e:c6:dc:36:17:34:47: 7f:1d:34:30:85:df:bf:73:28:ac:4d:87:82:13:01: e7:3b:ec:c3:cc:42:03:cc:d2:59:09:c4:7e:dc:40: 72:0c:cf:f7:fb:f3:7a:3a:63:a7:26:36:66:a1:a5: 93:fd:7e:1b:9b:c9:bd:8e:be:c0:13:72:2c:1c:c3: 92:17:77:8e:7b:91:44:9b:d4:9d:f9:a2:1b:fe:fd: 4d:c5:8e:86:c8:34:31:09:cd:fe:60:6b:0b:1f:05: 8a:cd:76:08:5d:7f:b2:16:54:79:47:c7:62:1b:d0: 39:fb:5e:7e:6c:39:57:0d:25:a5:8e:99:50:3a:2f: fb:b1:9a:ba:e8:92:f7:f5:0f:fe:6b:81:d6:72:fc: de:36:cc:1e:93:a5:0d:39:ab:66:82:c6:be:78:a2: cf:0e:19:c6:9e:53:e0:3e:fa:f2:32:b8:d7:fa:ad: f9:6f:b8:7a:23:a8:db:3d:c1:2b:0e:67:d3:7c:1c: 9e:3d:54:e0:e3:e9:7f:06:da:b6:76:42:d8:53:fc: 38:2b:61:76:d2:c9:e4:c6:59:39:97:18:4c:48:af: 77:10:4f:79:6a:0d:e1:77:5e:41:1b:4f:e3:57:a5: a7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1A:8D:6C:9B:D4:3A:20:C3:5F:53:A1:95:A6:41:DE:C3:CE:93:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: 104.37.232.0/21 IPv6: 2606:8b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:be:c5:e6:b9:9b:b5:f4:a0:3b:1a:bd:eb:fc:f1:60:37:fe: c8:81:b5:81:8b:90:57:1c:f6:e5:ed:7f:dc:e2:44:81:64:e0: c9:66:c1:ac:95:31:98:83:ef:02:27:bb:03:cb:c3:5a:64:00: e4:1f:42:88:ab:1d:bd:f4:fc:c6:03:ad:24:b9:97:6c:9f:74: 80:c7:89:3a:17:46:cf:38:85:a0:8e:cf:86:37:f1:fd:7a:51: f1:12:81:e8:15:92:3c:73:82:79:20:9d:d3:1f:4a:5e:70:a0: 64:0b:95:68:6f:7c:17:d6:57:18:aa:d4:c3:b1:58:97:59:3e: fd:cc:90:14:16:cc:cf:f4:20:ee:bc:3d:93:06:65:37:41:b0: 5f:2b:b9:fe:59:6e:c8:bd:58:44:d4:77:2a:02:8e:93:57:45: f4:35:4b:63:bd:d2:24:a2:3c:27:a4:e5:c5:75:d0:96:31:8c: 12:24:b1:f3:af:9f:54:5e:fd:cd:b6:74:24:98:14:31:f7:d6: 75:9f:7c:49:e5:be:7b:3f:22:a4:d5:2f:52:12:b9:37:4c:5d: 45:72:89:8b:97:f3:b0:a8:af:0b:9d:bf:0a:f1:2a:29:ed:71: 99:ae:51:a8:dd:b7:b4:32:e3:00:c9:93:3b:f0:76:d0:82:28: a7:f9:a1:77 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWExOBn0yog/3QBw128AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk ZTk3YjE4ZTktOTdkOC00NWQxLTk4ODUtYjFhYmQ1YmIyMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzogQaa3N0L15SyiwpCPM976lKUoP7A7G3DYX NEd/HTQwhd+/cyisTYeCEwHnO+zDzEIDzNJZCcR+3EByDM/3+/N6OmOnJjZmoaWT /X4bm8m9jr7AE3IsHMOSF3eOe5FEm9Sd+aIb/v1NxY6GyDQxCc3+YGsLHwWKzXYI XX+yFlR5R8diG9A5+15+bDlXDSWljplQOi/7sZq66JL39Q/+a4HWcvzeNswek6UN Oatmgsa+eKLPDhnGnlPgPvryMrjX+q35b7h6I6jbPcErDmfTfByePVTg4+l/Btq2 dkLYU/w4K2F20snkxlk5lxhMSK93EE95ag3hd15BG0/jV6WnjQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEIajWyb1Dogw19ToZWmQd7DzpMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvOGYyYzUwN2YtOTg4MC0z YTBhLThlNmEtMmQ5Y2M1ZDFlOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaCXoMA0E AgACMAcDBQAmBotAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHy+xea5m7X0oDsavev88WA3/siBtYGLkFcc 9uXtf9ziRIFk4MlmwayVMZiD7wInuwPLw1pkAOQfQoirHb30/MYDrSS5l2yfdIDH iToXRs84haCOz4Y38f16UfESgegVkjxzgnkgndMfSl5woGQLlWhvfBfWVxiq1MOx WJdZPv3MkBQWzM/0IO68PZMGZTdBsF8ruf5Zbsi9WETUdyoCjpNXRfQ1S2O90iSi PCek5cV10JYxjBIksfOvn1Re/c22dCSYFDH31nWffEnlvns/IqTVL1ISuTdMXUVy iYuX87CorwudvwrxKintcZmuUajdt7Qy4wDJkzvwdtCCKKf5oXc= -----END CERTIFICATE-----Generated at Tue Dec 30 04:53:44 2025 by rpki-client