This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c85f498-5f81-3daf-8b31-9a39f95c38a5.roa File: 9c85f498-5f81-3daf-8b31-9a39f95c38a5.roa (raw, json) Hash identifier: woHSF56qp5cxAkuULnxRUsqFenbu4c1vA8PTUPRaz0o= Subject key identifier: E7:39:63:91:1A:BB:2C:51:E2:35:4B:60:C7:D4:5C:24:5B:6B:50:40 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BDA2AFB087449D6F5F4CA5C00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c85f498-5f81-3daf-8b31-9a39f95c38a5.roa Signing time: Fri 14 Nov 2025 02:00:30 +0000 ROA not before: Fri 14 Nov 2025 02:00:30 +0000 ROA not after: Thu 12 Feb 2026 02:00:30 +0000 asID: 13335 IP address blocks: 104.23.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:2a:fb:08:74:49:d6:f5:f4:ca:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Nov 14 02:00:30 2025 GMT Not After : Feb 12 02:00:30 2026 GMT Subject: CN=20a700e7-d348-4d6e-9a74-fafc60f4486a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:85:1f:f8:ca:25:ef:69:6b:03:37:7e:55:35: 37:cc:0c:b7:52:6d:83:7b:68:c1:49:54:f8:dc:77: 75:72:8b:0f:74:78:a9:52:d0:58:64:56:93:6d:32: e8:39:ed:45:3d:de:68:4b:91:de:86:04:0c:c2:83: bb:74:9e:d7:72:e2:12:21:f6:07:9e:aa:c5:36:84: df:1f:61:82:cf:1d:6c:ac:28:18:c8:3e:e2:fb:ef: ab:42:24:4b:8a:ee:d2:25:aa:bb:4c:bb:6b:ab:fe: e1:30:23:46:af:eb:8a:ea:cd:2a:d8:c4:1f:16:ea: 0f:94:e3:42:1b:b1:69:7a:3d:db:65:82:d1:c4:d6: 52:bf:c6:d6:bf:07:7d:6b:7c:7b:36:0f:7a:5c:52: 8f:55:b9:68:d7:fe:d5:c7:99:f8:6c:d5:2d:23:e6: 67:65:08:f0:11:bd:98:f3:e5:ff:cd:bd:76:47:85: 2c:3d:f9:fe:0c:45:35:a5:0e:cd:ba:16:bb:98:51: a9:22:28:4f:2c:db:90:d3:f5:c7:71:38:d7:2e:95: 26:79:d3:02:98:2d:7c:88:07:dd:56:f5:17:5a:50: c9:1d:a5:cc:ed:80:f9:1e:8a:ca:75:b7:97:1d:05: 22:21:7d:00:aa:7f:c4:0f:e4:c4:61:16:fa:b4:0e: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:39:63:91:1A:BB:2C:51:E2:35:4B:60:C7:D4:5C:24:5B:6B:50:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c85f498-5f81-3daf-8b31-9a39f95c38a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:d3:c3:0f:49:ce:eb:9c:a6:bf:10:3a:30:12:a7:0b:4d:49: 27:44:43:3b:31:b4:bf:fb:d2:8a:8f:f1:8e:a4:08:7e:0d:c0: de:26:26:56:9e:37:f5:e6:54:4d:ff:34:df:3b:97:74:7f:d5: 7e:44:7d:77:cb:05:88:d8:40:92:de:78:53:2c:63:21:58:af: fa:ff:19:60:98:76:64:ac:1b:ae:ce:ef:c4:ae:51:3c:95:70: 80:47:06:a4:e8:69:ef:38:12:75:82:fb:bb:97:a3:d9:4b:e6: 15:2d:bc:f2:9a:8c:c7:7e:d9:69:2d:fe:2b:21:05:e1:c3:2e: 58:d2:17:75:9d:8e:4d:9e:23:51:1b:5e:85:ee:5c:22:1f:7b: 52:4a:6f:6f:23:9e:7e:9a:68:e7:4d:2e:df:56:80:19:a7:be: 72:52:b1:3f:95:2d:b7:cf:3d:c7:66:a1:56:75:a4:95:83:22: 49:76:af:d2:6a:42:5a:ce:d2:8e:42:ad:43:8d:66:f8:a7:19: 2f:0c:ee:ad:4d:0c:d4:c4:0c:7b:00:ec:c5:27:20:fb:88:fe: 2d:8d:0d:41:d8:30:f1:c2:4e:b8:bb:1f:7c:f7:55:63:e4:33: 66:7e:a1:2b:29:cb:cb:9c:49:74:a5:51:08:24:8f:78:60:99: 0f:01:be:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvaKvsIdEnW9fTKXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk MjBhNzAwZTctZDM0OC00ZDZlLTlhNzQtZmFmYzYwZjQ0ODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioUf+Mol72lrAzd+VTU3zAy3Um2De2jBSVT4 3Hd1cosPdHipUtBYZFaTbTLoOe1FPd5oS5HehgQMwoO7dJ7XcuISIfYHnqrFNoTf H2GCzx1srCgYyD7i+++rQiRLiu7SJaq7TLtrq/7hMCNGr+uK6s0q2MQfFuoPlONC G7Fpej3bZYLRxNZSv8bWvwd9a3x7Ng96XFKPVblo1/7Vx5n4bNUtI+ZnZQjwEb2Y 8+X/zb12R4UsPfn+DEU1pQ7Nuha7mFGpIihPLNuQ0/XHcTjXLpUmedMCmC18iAfd VvUXWlDJHaXM7YD5HorKdbeXHQUiIX0Aqn/ED+TEYRb6tA6+8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOc5Y5EauyxR4jVLYMfUXCRba1BAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWM4NWY0OTgtNWY4MS0z ZGFmLThiMzEtOWEzOWY5NWMzOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXTww9Jzuucpr8QOjASpwtNSSdEQzsxtL/70oqP8Y6kCH4NwN4mJlae N/XmVE3/NN87l3R/1X5EfXfLBYjYQJLeeFMsYyFYr/r/GWCYdmSsG67O78SuUTyV cIBHBqToae84EnWC+7uXo9lL5hUtvPKajMd+2Wkt/ishBeHDLljSF3Wdjk2eI1Eb XoXuXCIfe1JKb28jnn6aaOdNLt9WgBmnvnJSsT+VLbfPPcdmoVZ1pJWDIkl2r9Jq QlrO0o5CrUONZvinGS8M7q1NDNTEDHsA7MUnIPuI/i2NDUHYMPHCTri7H3z3VWPk M2Z+oSspy8ucSXSlUQgkj3hgmQ8BvjI= -----END CERTIFICATE-----Generated at Sat Dec 6 11:29:22 2025 by rpki-client