This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aac69805-db9c-3d5e-8a6c-61855f417b0e.roa File: aac69805-db9c-3d5e-8a6c-61855f417b0e.roa (raw, json) Hash identifier: XWoD4s7mDoilDtxQ8M2yzE/qJgXr+mFwJuzPpTjJb/g= Subject key identifier: EA:91:D8:0A:BC:1A:9F:44:41:96:B2:23:81:91:91:99:45:05:70:6E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C50D194F8C49EE75DBB58A100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aac69805-db9c-3d5e-8a6c-61855f417b0e.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 14789 IP address blocks: 104.29.29.0/24 maxlen: 24 172.71.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:94:f8:c4:9e:e7:5d:bb:58:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=9f33cdd6-917d-4698-a2ef-547a595b5b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:a0:50:3f:3c:45:ad:fd:30:6c:c1:af:35: 70:89:dd:7f:f1:b6:98:62:73:d2:8f:cc:27:5b:57: 2e:9c:19:7b:f8:fc:4d:6f:6c:a9:40:f1:ad:ee:e8: ab:30:88:3e:d8:1c:e4:05:4e:f8:b5:f2:d9:40:61: b5:16:00:a5:90:78:a8:6a:08:d0:ac:79:69:75:72: 64:44:5a:3f:27:30:de:b6:6a:d6:58:4b:80:f5:b9: 7a:01:5b:f2:94:28:82:cc:ff:0a:23:50:77:e6:54: 74:47:8b:0c:b6:8c:c5:5b:c9:20:5f:8c:b4:80:d3: 36:ad:b0:98:39:4b:8d:a7:62:d1:2c:2d:c8:6b:86: 34:00:be:1d:f9:85:cb:3f:7b:bc:7c:fb:a3:c4:be: 88:d9:fe:9e:0a:e5:9c:69:02:b6:b8:15:06:70:7c: d7:1c:1b:63:10:b0:29:0f:fa:d2:0c:7e:e2:82:4a: 6d:86:f3:7a:a1:e5:3a:8a:4e:77:8a:d3:84:de:c9: ee:e1:a3:6a:bd:7e:df:d4:12:06:9a:06:2d:ec:f3: a3:98:18:4d:b8:16:72:38:54:ca:9e:9c:cf:71:e6: bb:76:ed:77:d7:e6:9b:17:25:52:6d:0c:65:88:3e: f9:a0:ef:26:93:71:73:81:48:d8:12:ec:79:e8:e9: 3d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:91:D8:0A:BC:1A:9F:44:41:96:B2:23:81:91:91:99:45:05:70:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/aac69805-db9c-3d5e-8a6c-61855f417b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.29.0/24 172.71.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:c2:d1:74:2b:b9:17:77:91:ca:b2:f1:91:2a:a3:5e:f4:9f: 1b:8d:70:00:0f:d1:48:10:a9:db:f9:d2:56:89:f8:36:be:82: 7e:14:3c:9f:9b:dd:8b:ad:55:4b:0c:23:93:43:8b:5f:f5:0b: a1:ab:e0:bf:e0:39:21:e2:59:52:52:68:2c:78:44:2b:6f:e5: 78:fd:2d:73:be:99:b7:4a:bc:67:e9:c4:0f:e8:c1:66:b0:4e: 77:95:60:09:90:e9:cc:e8:74:10:ee:a7:0a:75:7c:1e:ff:d5: fd:79:8d:e7:74:07:a6:4d:46:c0:72:5a:61:95:53:ae:0c:7e: 0c:01:82:58:34:fa:56:b8:b8:8c:15:6d:09:5f:b4:8d:36:f9: 68:eb:cd:7b:de:c8:24:4c:24:0b:c4:74:38:cc:56:01:01:23: a6:9e:8f:46:07:2a:8e:af:c3:8c:e3:90:96:f4:ba:6c:7b:96: 1c:dd:dd:56:80:79:3b:34:09:9b:f4:93:9f:3e:fc:93:c0:ca: 35:2f:70:62:98:ae:f8:91:69:d4:cf:eb:ba:25:d1:00:66:50: 8e:2a:37:da:b1:90:a1:e9:d1:91:30:bc:e2:3b:8f:38:cf:93: d7:b9:8d:f2:27:5a:28:b3:af:50:15:0c:63:4f:fe:dd:e4:4c: b8:e6:08:a9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWExQ0ZT4xJ7nXbtYoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk OWYzM2NkZDYtOTE3ZC00Njk4LWEyZWYtNTQ3YTU5NWI1YjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgKgUD88Ra39MGzBrzVwid1/8baYYnPSj8wn W1cunBl7+PxNb2ypQPGt7uirMIg+2BzkBU74tfLZQGG1FgClkHioagjQrHlpdXJk RFo/JzDetmrWWEuA9bl6AVvylCiCzP8KI1B35lR0R4sMtozFW8kgX4y0gNM2rbCY OUuNp2LRLC3Ia4Y0AL4d+YXLP3u8fPujxL6I2f6eCuWcaQK2uBUGcHzXHBtjELAp D/rSDH7igkpthvN6oeU6ik53itOE3snu4aNqvX7f1BIGmgYt7POjmBhNuBZyOFTK npzPcea7du131+abFyVSbQxliD75oO8mk3FzgUjYEux56Ok9kQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOqR2Aq8Gp9EQZayI4GRkZlFBXBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWFjNjk4MDUtZGI5Yy0z ZDVlLThhNmMtNjE4NTVmNDE3YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaB0dAwQA rEcCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALDC0XQruRd3kcqy8ZEqo170nxuNcAAP0UgQqdv50laJ+Da+ gn4UPJ+b3YutVUsMI5NDi1/1C6Gr4L/gOSHiWVJSaCx4RCtv5Xj9LXO+mbdKvGfp xA/owWawTneVYAmQ6czodBDupwp1fB7/1f15jed0B6ZNRsByWmGVU64MfgwBglg0 +la4uIwVbQlftI02+WjrzXveyCRMJAvEdDjMVgEBI6aej0YHKo6vw4zjkJb0umx7 lhzd3VaAeTs0CZv0k58+/JPAyjUvcGKYrviRadTP67ol0QBmUI4qN9qxkKHp0ZEw vOI7jzjPk9e5jfInWiizr1AVDGNP/t3kTLjmCKk= -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:28 2026 by rpki-client