This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37aa74d1-cc51-3786-9d2a-6aa300c7cf51.roa File: 37aa74d1-cc51-3786-9d2a-6aa300c7cf51.roa (raw, json) Hash identifier: +FT1HJ1yGUgtWRfUZtsZUIleLd0q1M+8OKoVfiMW2Zg= Subject key identifier: F1:C9:1A:31:66:89:21:9C:D2:7A:FC:C2:60:08:21:FD:E2:51:36:A4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C33810669794DAA7C42E77400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37aa74d1-cc51-3786-9d2a-6aa300c7cf51.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 13335 IP address blocks: 104.29.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:06:69:79:4d:aa:7c:42:e7:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=8ebaaa5c-c218-4444-8a29-e389812c4ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:f4:4a:65:d9:ac:af:01:70:ae:37:48:bb: 16:dd:b2:b7:51:33:12:7c:f4:35:09:b5:8a:ab:1f: 73:ae:0a:4d:6f:6f:be:d1:09:06:c3:a3:70:67:2c: 8a:05:25:78:29:fc:5f:27:41:52:ca:81:95:df:c1: bf:f2:d9:78:49:6d:12:aa:c5:57:f8:4b:ab:08:61: 7a:58:c9:ea:a8:dd:90:20:96:ee:68:a7:2a:05:76: 9e:47:11:02:9e:5a:72:cc:b3:49:f5:3a:07:b6:95: d4:fa:f6:b4:a5:5e:36:96:80:41:ba:e3:06:bb:4f: 01:ea:2b:cf:9b:98:37:1c:56:28:d0:71:6b:7f:33: 59:04:0f:c6:af:00:32:f8:18:28:1f:f2:2d:11:3d: f1:9d:61:38:b6:75:62:13:46:54:23:b1:eb:eb:67: a6:6c:9c:b7:60:7c:6e:a8:49:57:a9:39:65:67:47: c5:ce:72:00:be:02:7a:ef:8c:06:a1:77:9b:78:6d: 1e:52:2d:20:4a:be:69:b9:eb:b1:e8:0a:6e:93:72: 29:3e:07:b7:c1:de:da:3b:41:36:41:64:e4:f6:5a: 40:d8:1e:a6:af:a1:97:54:09:0c:b9:7e:bf:88:48: 3a:22:a9:14:83:9f:91:66:7d:11:3d:d8:b3:2c:cf: c1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C9:1A:31:66:89:21:9C:D2:7A:FC:C2:60:08:21:FD:E2:51:36:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37aa74d1-cc51-3786-9d2a-6aa300c7cf51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:32:61:84:a7:d9:46:45:9c:3e:38:aa:f7:3a:ac:32:a4:a8: b7:cc:08:f2:a9:d9:2e:d2:dd:b4:a0:ba:7f:3f:21:1e:44:d6: 9c:23:67:81:25:01:ed:6d:b5:6d:c3:a7:12:28:94:57:48:de: 52:86:af:05:87:c0:0e:c4:3f:34:65:82:ea:95:ef:5e:45:71: b0:b4:e7:5c:b3:e9:3d:d4:ca:27:e2:46:c0:56:15:6d:2d:96: 10:38:9b:ff:93:92:30:ea:a7:40:c3:1f:62:21:36:29:c8:57: 02:8c:9d:7e:6d:c1:28:84:26:cd:21:9d:61:93:7c:32:9e:c6: 56:39:ec:cc:f9:16:c7:08:e1:e7:7d:69:33:a4:f9:e5:60:65: 5c:a8:18:4c:81:6d:a1:2d:1a:13:8c:eb:f1:09:95:07:eb:4c: b8:c3:f0:81:39:fc:76:d3:a9:4a:53:96:f8:10:d7:a0:56:c9: 34:37:0a:90:96:a5:ae:91:da:62:34:b3:92:30:94:67:74:9e: 8e:c1:14:1a:51:8f:68:c3:ff:fe:af:68:45:a9:32:6f:88:1e: cb:00:3d:e5:c5:11:24:71:fc:e6:7f:1f:c4:23:df:9b:1f:e2: 51:1f:f8:3e:5e:aa:2e:65:42:75:db:b9:c3:61:32:f8:1b:a8: 01:50:1a:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgQZpeU2qfELndAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk OGViYWFhNWMtYzIxOC00NDQ0LThhMjktZTM4OTgxMmM0YWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrj0SmXZrK8BcK43SLsW3bK3UTMSfPQ1CbWK qx9zrgpNb2++0QkGw6NwZyyKBSV4KfxfJ0FSyoGV38G/8tl4SW0SqsVX+EurCGF6 WMnqqN2QIJbuaKcqBXaeRxECnlpyzLNJ9ToHtpXU+va0pV42loBBuuMGu08B6ivP m5g3HFYo0HFrfzNZBA/GrwAy+BgoH/ItET3xnWE4tnViE0ZUI7Hr62embJy3YHxu qElXqTllZ0fFznIAvgJ674wGoXebeG0eUi0gSr5pueux6Apuk3IpPge3wd7aO0E2 QWTk9lpA2B6mr6GXVAkMuX6/iEg6IqkUg5+RZn0RPdizLM/B+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHJGjFmiSGc0nr8wmAIIf3iUTakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzdhYTc0ZDEtY2M1MS0z Nzg2LTlkMmEtNmFhMzAwYzdjZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkyYYSn2UZFnD44qvc6rDKkqLfMCPKp2S7S3bSgun8/IR5E1pwjZ4El Ae1ttW3DpxIolFdI3lKGrwWHwA7EPzRlguqV715FcbC051yz6T3UyifiRsBWFW0t lhA4m/+TkjDqp0DDH2IhNinIVwKMnX5twSiEJs0hnWGTfDKexlY57Mz5FscI4ed9 aTOk+eVgZVyoGEyBbaEtGhOM6/EJlQfrTLjD8IE5/HbTqUpTlvgQ16BWyTQ3CpCW pa6R2mI0s5IwlGd0no7BFBpRj2jD//6vaEWpMm+IHssAPeXFESRx/OZ/H8Qj35sf 4lEf+D5eqi5lQnXbucNhMvgbqAFQGg8= -----END CERTIFICATE-----Generated at Fri Dec 19 13:38:08 2025 by rpki-client