This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18307d49-fa73-3f26-966c-cec9e529ba9c.roa File: 18307d49-fa73-3f26-966c-cec9e529ba9c.roa (raw, json) Hash identifier: w28k/OrRNPr6KpVPWAM7KziMCqrI3hXc8ch69sL4l0A= Subject key identifier: 3D:9F:7F:96:BF:8C:CD:20:50:82:C3:64:E3:78:58:68:9A:F9:42:0A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BFA45F849CDD8D835C1D7B680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18307d49-fa73-3f26-966c-cec9e529ba9c.roa Signing time: Tue 25 Nov 2025 14:00:36 +0000 ROA not before: Tue 25 Nov 2025 14:00:36 +0000 ROA not after: Mon 23 Feb 2026 14:00:36 +0000 asID: 13335 IP address blocks: 104.23.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:45:f8:49:cd:d8:d8:35:c1:d7:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 25 14:00:36 2025 GMT Not After : Feb 23 14:00:36 2026 GMT Subject: CN=6618a72b-16c0-478f-9127-9ee36b553527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:72:e1:b0:2f:48:dd:71:f6:7e:fe:aa:9a: 38:5c:04:06:43:c8:56:12:9b:2c:80:bc:84:54:a9: 2c:92:d6:14:58:d1:63:f1:d8:d9:22:c8:34:23:82: 46:e2:71:90:43:b4:06:e6:5f:a9:14:9a:4e:ea:3a: 61:52:2d:49:69:f0:7b:97:53:6c:d2:d8:9c:79:83: 27:28:6e:7f:eb:6e:a8:46:f9:33:43:09:59:1b:42: 3c:2f:67:99:8e:fa:94:75:e5:28:36:36:48:ac:f7: de:8b:8c:c0:aa:f1:c6:70:2f:33:86:e9:82:50:3f: 02:f3:85:04:88:1d:ba:76:86:f2:b5:d5:db:af:1b: 63:37:a2:35:3f:fd:57:97:26:74:f3:ff:9a:b6:99: ec:b3:1a:01:09:c2:9e:4d:5e:67:f4:d4:e6:d1:7a: e2:a1:76:86:90:bf:03:d9:cd:5b:35:eb:af:bc:60: 07:00:b3:7c:d8:e7:a0:03:ae:21:a6:3e:a8:d9:c3: 65:dc:03:c3:7f:26:d8:da:93:94:ac:d8:12:98:58: 2a:1a:6d:0a:b8:69:d4:c1:1e:65:0e:6c:13:ed:81: 91:30:66:5d:bf:8d:80:61:ff:5b:2b:58:ff:eb:11: 31:e6:2e:5d:f5:2d:04:d3:54:ab:a1:fa:75:c7:05: fd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9F:7F:96:BF:8C:CD:20:50:82:C3:64:E3:78:58:68:9A:F9:42:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18307d49-fa73-3f26-966c-cec9e529ba9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:5d:b2:da:9b:80:90:15:30:4e:34:84:56:9e:f5:9c:18:43: bf:1d:fd:a2:65:ef:56:98:a7:d9:af:f4:a2:7d:cf:f3:c5:cc: e9:bf:be:13:af:0c:5b:36:28:af:91:04:fe:14:f3:55:40:2c: 0b:07:a2:d5:99:24:5b:19:6b:08:63:c9:9a:5c:81:83:59:29: 49:67:7b:26:bd:ef:1e:a9:19:15:06:eb:8d:cb:97:7b:b6:47: 2c:0b:db:fb:e4:c7:ae:c9:89:37:54:e9:33:9d:e8:c3:0f:b0: 79:b0:a2:73:b8:f4:fe:65:8d:4d:ea:e6:99:0f:90:93:c4:57: 88:72:b0:d2:2f:bd:93:e8:11:66:5b:9d:78:0f:72:42:a3:67: b0:99:54:1a:ca:8f:80:c6:48:c3:ce:20:64:53:e7:1f:ac:00: fb:c4:f1:a9:05:0e:09:fe:4b:5d:fe:19:ef:ca:49:61:c2:eb: 89:56:da:03:52:dd:16:6d:52:65:be:52:67:40:65:cd:1c:3d: 39:f8:79:df:de:16:5a:3a:da:57:ae:ca:be:eb:e9:49:75:a8: 6d:85:b2:80:62:10:88:59:90:c8:37:98:6f:d0:72:a7:4b:07: 06:b9:b3:31:3a:66:45:56:93:9b:22:94:61:1d:11:31:26:29: 4e:70:b5:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv6RfhJzdjYNcHXtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEyNTE0MDAzNloXDTI2MDIyMzE0MDAzNlowLzEtMCsGA1UEAxMk NjYxOGE3MmItMTZjMC00NzhmLTkxMjctOWVlMzZiNTUzNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1xy4bAvSN1x9n7+qpo4XAQGQ8hWEpssgLyE VKksktYUWNFj8djZIsg0I4JG4nGQQ7QG5l+pFJpO6jphUi1JafB7l1Ns0ticeYMn KG5/626oRvkzQwlZG0I8L2eZjvqUdeUoNjZIrPfei4zAqvHGcC8zhumCUD8C84UE iB26dobytdXbrxtjN6I1P/1XlyZ08/+atpnssxoBCcKeTV5n9NTm0XrioXaGkL8D 2c1bNeuvvGAHALN82OegA64hpj6o2cNl3APDfybY2pOUrNgSmFgqGm0KuGnUwR5l DmwT7YGRMGZdv42AYf9bK1j/6xEx5i5d9S0E01Srofp1xwX90QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2ff5a/jM0gUILDZON4WGia+UIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTgzMDdkNDktZmE3My0z ZjI2LTk2NmMtY2VjOWU1MjliYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERdstqbgJAVME40hFae9ZwYQ78d/aJl71aYp9mv9KJ9z/PFzOm/vhOv DFs2KK+RBP4U81VALAsHotWZJFsZawhjyZpcgYNZKUlneya97x6pGRUG643Ll3u2 RywL2/vkx67JiTdU6TOd6MMPsHmwonO49P5ljU3q5pkPkJPEV4hysNIvvZPoEWZb nXgPckKjZ7CZVBrKj4DGSMPOIGRT5x+sAPvE8akFDgn+S13+Ge/KSWHC64lW2gNS 3RZtUmW+UmdAZc0cPTn4ed/eFlo62leuyr7r6Ul1qG2FsoBiEIhZkMg3mG/QcqdL Bwa5szE6ZkVWk5silGEdETEmKU5wtQs= -----END CERTIFICATE-----Generated at Sat Dec 6 11:26:04 2025 by rpki-client