This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a49562f-0d6c-30d2-a8c3-df3423cbb988.roa File: 0a49562f-0d6c-30d2-a8c3-df3423cbb988.roa (raw, json) Hash identifier: 1oc70Sdm/rG2QhQBnBFtUynPnv6Jd8lt7fnhL7iodmA= Subject key identifier: 87:40:D9:C7:13:17:3B:21:95:13:C0:EB:79:3E:7F:8B:1B:AB:50:3F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C0F361D98E4F8A1D6C493DC30 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a49562f-0d6c-30d2-a8c3-df3423cbb988.roa Signing time: Wed 03 Dec 2025 02:00:30 +0000 ROA not before: Wed 03 Dec 2025 02:00:30 +0000 ROA not after: Tue 03 Mar 2026 02:00:30 +0000 asID: 13335 IP address blocks: 104.23.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0f:36:1d:98:e4:f8:a1:d6:c4:93:dc:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 3 02:00:30 2025 GMT Not After : Mar 3 02:00:30 2026 GMT Subject: CN=ed5a50dd-9e0a-42d8-b77e-78a3a615c5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ef:86:a3:80:03:5b:98:38:72:f9:e7:f0:7e: 72:cc:c4:e9:f5:3b:9d:1a:92:d8:20:71:c0:39:36: dc:60:30:e3:6a:47:07:f7:0a:e8:89:ca:bb:1a:e9: bc:0e:61:57:9e:0d:83:02:df:a9:d0:a5:64:e9:cd: 18:31:b6:1e:12:7c:b2:e6:3b:20:0d:88:cf:37:d1: 29:25:7d:b0:69:c2:ba:9e:13:eb:cf:51:88:92:0d: 4f:28:c8:c0:72:c3:bb:44:ff:da:d4:c6:23:a8:c8: e6:a1:1d:ad:f3:96:2b:3f:ec:c6:00:a0:e9:43:4a: 9c:c3:8f:50:1b:1f:df:71:74:56:40:99:ec:13:db: af:b4:51:bf:01:f6:34:d6:20:82:93:4a:83:ec:74: 3a:3b:be:a6:a7:25:21:08:f5:97:1b:37:e7:1c:6f: dd:71:e6:47:88:d7:4f:91:4e:2b:8d:a3:4d:9c:d8: 73:8a:fa:c3:d0:27:a2:9d:bf:2c:a5:ad:6d:23:a6: 70:0d:80:9b:93:fa:48:63:51:2f:2e:8e:b3:66:83: 22:fc:54:6b:9b:13:ab:1c:c5:42:15:9d:4e:5c:9b: 38:73:c7:9d:8e:a8:a0:ff:cf:4f:df:d8:62:61:db: 6a:e6:71:82:0d:15:8c:03:7c:54:ad:a5:81:74:dd: 24:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:40:D9:C7:13:17:3B:21:95:13:C0:EB:79:3E:7F:8B:1B:AB:50:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a49562f-0d6c-30d2-a8c3-df3423cbb988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:87:c9:81:2d:5d:e6:f7:b7:61:a3:25:15:6f:82:25:e9:93: 8a:dd:85:09:58:90:c6:1a:e9:dd:7f:2d:b0:4b:f7:0a:d0:23: 7d:38:41:4a:6d:6a:87:55:3c:d9:03:51:03:5b:8e:6a:34:95: 94:39:75:77:69:e0:ca:52:dc:43:03:71:27:fe:3b:d8:3c:e5: e4:fa:97:7c:8b:06:b6:78:99:5c:90:95:63:d1:94:bc:ac:5a: 5a:d6:34:d4:09:3f:93:00:3f:ba:69:bc:27:5b:87:ef:14:f3: a5:bc:ae:0b:05:48:41:b7:77:12:ad:16:79:f4:54:d2:24:e1: 41:66:0d:29:8a:e9:a5:62:d6:f8:66:48:03:85:23:bd:c2:23: 6d:6f:0f:84:76:f0:8c:f1:cf:aa:f5:27:7a:a2:8a:bd:3d:fd: b5:4a:21:b6:e6:6b:6b:65:e9:1f:b7:f3:ea:8d:b8:2c:d0:64: 26:e5:76:e0:76:22:b3:fd:39:7f:11:69:0f:74:1b:7d:ac:31: 0a:76:ad:8f:6f:30:6f:a0:86:e6:5e:a1:68:2d:1a:83:30:46: de:f0:4b:dd:60:54:72:4b:f0:b2:06:e3:98:9b:e9:5c:db:38: 01:90:58:05:fc:55:26:77:da:77:cc:5e:c0:38:39:39:a0:30: 8d:f4:55:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwPNh2Y5Pih1sST3DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTIwMzAyMDAzMFoXDTI2MDMwMzAyMDAzMFowLzEtMCsGA1UEAxMk ZWQ1YTUwZGQtOWUwYS00MmQ4LWI3N2UtNzhhM2E2MTVjNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz++Go4ADW5g4cvnn8H5yzMTp9TudGpLYIHHA OTbcYDDjakcH9wroicq7Gum8DmFXng2DAt+p0KVk6c0YMbYeEnyy5jsgDYjPN9Ep JX2wacK6nhPrz1GIkg1PKMjAcsO7RP/a1MYjqMjmoR2t85YrP+zGAKDpQ0qcw49Q Gx/fcXRWQJnsE9uvtFG/AfY01iCCk0qD7HQ6O76mpyUhCPWXGzfnHG/dceZHiNdP kU4rjaNNnNhzivrD0Ceinb8spa1tI6ZwDYCbk/pIY1EvLo6zZoMi/FRrmxOrHMVC FZ1OXJs4c8edjqig/89P39hiYdtq5nGCDRWMA3xUraWBdN0kdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdA2ccTFzshlRPA63k+f4sbq1A/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGE0OTU2MmYtMGQ2Yy0z MGQyLWE4YzMtZGYzNDIzY2JiOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBf2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2HyYEtXeb3t2GjJRVvgiXpk4rdhQlYkMYa6d1/LbBL9wrQI304QUpt aodVPNkDUQNbjmo0lZQ5dXdp4MpS3EMDcSf+O9g85eT6l3yLBrZ4mVyQlWPRlLys WlrWNNQJP5MAP7ppvCdbh+8U86W8rgsFSEG3dxKtFnn0VNIk4UFmDSmK6aVi1vhm SAOFI73CI21vD4R28Izxz6r1J3qiir09/bVKIbbma2tl6R+38+qNuCzQZCblduB2 IrP9OX8RaQ90G32sMQp2rY9vMG+ghuZeoWgtGoMwRt7wS91gVHJL8LIG45ib6Vzb OAGQWAX8VSZ32nfMXsA4OTmgMI30VSA= -----END CERTIFICATE-----Generated at Sat Dec 6 19:54:31 2025 by rpki-client