This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a12fe58-3c27-36fa-a832-e174aac82eda.roa File: 1a12fe58-3c27-36fa-a832-e174aac82eda.roa (raw, json) Hash identifier: NIS1TEXk4WXInk5yQfiZAH1MfEWjhIq20icSirSvHFw= Subject key identifier: B5:9F:AD:BF:71:6D:C7:4F:36:59:BC:DF:52:EE:AD:AA:73:9B:72:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BFA45F2FF1C14668ABBB19000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a12fe58-3c27-36fa-a832-e174aac82eda.roa Signing time: Tue 25 Nov 2025 14:00:36 +0000 ROA not before: Tue 25 Nov 2025 14:00:36 +0000 ROA not after: Mon 23 Feb 2026 14:00:36 +0000 asID: 13335 IP address blocks: 104.23.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:45:f2:ff:1c:14:66:8a:bb:b1:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 25 14:00:36 2025 GMT Not After : Feb 23 14:00:36 2026 GMT Subject: CN=c53a3ffe-eaf7-4c4b-976b-eed42262b74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ff:24:1f:1a:c9:df:77:c6:b7:e1:85:fe:98: 9d:d6:a0:d1:aa:1a:29:0a:7d:6a:51:7c:fa:dd:68: 6f:86:f7:ba:ef:28:6d:1b:d2:4d:aa:f9:83:88:f7: dd:db:e8:5c:b7:36:69:59:a7:76:7b:5e:71:38:d1: cb:be:75:0e:dd:a5:f4:b1:95:f1:8d:85:c8:54:b0: 74:e6:a1:07:32:cb:fd:27:be:b0:07:9a:56:99:36: 2f:9e:26:0f:05:68:66:4d:a3:59:9f:b3:eb:ea:d4: e1:17:3b:c0:6e:f5:de:9e:16:51:b1:27:8d:8b:88: 4d:ea:64:d6:62:9e:e9:11:35:9d:52:39:f8:b1:8c: da:4a:d1:6a:84:98:59:8e:55:56:3e:8f:74:78:56: 03:15:e8:e7:ab:aa:da:af:b9:17:01:5f:c8:d4:99: b0:07:09:90:f1:9b:54:31:06:10:ad:20:07:50:a6: a8:61:d4:c5:a3:c6:7f:c9:87:c0:d1:2d:b7:eb:d8: ee:29:bd:35:32:bc:fe:d4:b1:90:94:50:d5:61:45: b5:4a:d2:02:4e:5b:d5:47:90:9b:de:ab:c9:ce:cb: 5c:32:6d:66:c7:9e:31:e5:25:fc:fc:5b:d6:2a:b6: 3e:98:3d:6e:a6:07:76:ec:11:9f:66:c6:74:21:36: 8d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9F:AD:BF:71:6D:C7:4F:36:59:BC:DF:52:EE:AD:AA:73:9B:72:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1a12fe58-3c27-36fa-a832-e174aac82eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:69:04:1a:fd:32:8c:5a:8e:49:c7:ee:8c:6e:20:38:4a:8f: be:ca:6c:c5:67:c2:af:7f:87:e1:ef:eb:8a:53:ce:7b:e1:45: 83:dc:0f:83:9a:87:d9:06:06:be:30:64:99:9c:a5:87:51:5c: 7d:cb:b3:39:37:f6:20:77:24:8c:55:ba:a2:1a:2a:c8:98:87: eb:df:01:88:8f:9e:04:bc:9a:c6:cc:8e:91:1d:90:47:5a:be: b4:f9:3e:f2:ea:fc:6e:69:31:01:cf:a3:31:7b:e5:77:48:5d: a4:61:29:8d:84:ec:15:ea:33:a6:04:4d:23:9c:b2:1a:75:26: 05:70:15:30:a7:24:a5:c9:5d:a4:b8:31:1d:2a:fe:d4:5a:06: 77:da:fa:46:9c:99:d3:40:39:c7:7f:ae:da:88:00:11:c8:8d: 5f:a0:2f:0d:8f:10:e9:52:dd:ed:78:1c:a9:3c:5c:17:9c:85: 6f:f7:3e:c7:e0:5c:a2:ee:48:6a:4b:9d:16:98:cb:f5:a0:35: d4:ac:4b:26:76:1a:00:fd:f3:88:b8:ed:9b:e1:4a:39:aa:30: a8:98:ae:e4:40:39:7d:c0:dc:58:82:ed:c3:20:2d:fd:80:4d: 46:8e:46:cc:96:d0:64:d3:aa:80:9b:1e:8d:0a:f2:3f:7b:71: 58:69:0e:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv6RfL/HBRmiruxkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTEyNTE0MDAzNloXDTI2MDIyMzE0MDAzNlowLzEtMCsGA1UEAxMk YzUzYTNmZmUtZWFmNy00YzRiLTk3NmItZWVkNDIyNjJiNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif8kHxrJ33fGt+GF/pid1qDRqhopCn1qUXz6 3Whvhve67yhtG9JNqvmDiPfd2+hctzZpWad2e15xONHLvnUO3aX0sZXxjYXIVLB0 5qEHMsv9J76wB5pWmTYvniYPBWhmTaNZn7Pr6tThFzvAbvXenhZRsSeNi4hN6mTW Yp7pETWdUjn4sYzaStFqhJhZjlVWPo90eFYDFejnq6rar7kXAV/I1JmwBwmQ8ZtU MQYQrSAHUKaoYdTFo8Z/yYfA0S2369juKb01Mrz+1LGQlFDVYUW1StICTlvVR5Cb 3qvJzstcMm1mx54x5SX8/FvWKrY+mD1upgd27BGfZsZ0ITaNOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWfrb9xbcdPNlm831Lurapzm3JmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWExMmZlNTgtM2MyNy0z NmZhLWE4MzItZTE3NGFhYzgyZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5pBBr9MoxajknH7oxuIDhKj77KbMVnwq9/h+Hv64pTznvhRYPcD4Oa h9kGBr4wZJmcpYdRXH3Lszk39iB3JIxVuqIaKsiYh+vfAYiPngS8msbMjpEdkEda vrT5PvLq/G5pMQHPozF75XdIXaRhKY2E7BXqM6YETSOcshp1JgVwFTCnJKXJXaS4 MR0q/tRaBnfa+kacmdNAOcd/rtqIABHIjV+gLw2PEOlS3e14HKk8XBechW/3Psfg XKLuSGpLnRaYy/WgNdSsSyZ2GgD984i47ZvhSjmqMKiYruRAOX3A3FiC7cMgLf2A TUaORsyW0GTTqoCbHo0K8j97cVhpDtU= -----END CERTIFICATE-----Generated at Sat Dec 6 11:26:34 2025 by rpki-client