This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b9e5e856-0e70-3874-9e0b-46d0b5d9298a.roa File: b9e5e856-0e70-3874-9e0b-46d0b5d9298a.roa (raw, json) Hash identifier: +Yb/W9/Va/3+S6zIEhOtY+mDIcsFC+CsuPXCYxaKmZQ= Subject key identifier: 5D:FD:23:5B:04:F9:22:37:F3:AC:DD:D7:D9:4D:F1:25:F1:D0:73:8B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C0C6B4F835EA8C58CF6724B40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b9e5e856-0e70-3874-9e0b-46d0b5d9298a.roa Signing time: Tue 02 Dec 2025 02:00:30 +0000 ROA not before: Tue 02 Dec 2025 02:00:30 +0000 ROA not after: Mon 02 Mar 2026 02:00:30 +0000 asID: 13335 IP address blocks: 104.23.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:6b:4f:83:5e:a8:c5:8c:f6:72:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 2 02:00:30 2025 GMT Not After : Mar 2 02:00:30 2026 GMT Subject: CN=5783d94e-51bf-4aac-b0c7-a95792a739ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5d:22:42:10:ae:ab:13:c0:f6:dc:63:63:5e: d4:94:c7:f6:73:a8:f5:51:69:17:02:c6:a9:5d:dc: 66:d1:40:67:cb:79:df:c6:62:c5:d6:9c:1b:5f:8d: c2:66:d6:67:50:a7:e8:36:e7:a7:f3:e6:a8:6e:80: e2:33:fc:9d:c1:07:78:f9:e6:22:d9:f1:55:8f:86: 3c:30:06:35:7d:4e:d7:c6:54:c1:a4:de:66:f8:d2: 93:37:03:58:6e:84:ca:64:f0:70:0d:2a:dc:3a:41: c0:0d:aa:63:8f:e5:e4:16:bb:25:1d:d4:1a:c0:6a: 99:ac:73:81:08:d5:e2:b0:d5:95:13:12:50:70:4e: 17:ca:ec:de:b7:aa:45:6a:da:43:d1:4c:6f:38:82: 51:fa:8d:28:5c:56:18:a2:66:e0:48:83:21:19:0c: dd:76:a0:19:f9:9a:bf:cc:e7:9c:29:77:08:f4:c1: 41:21:4d:80:62:0e:a8:7f:3c:84:b8:9a:5e:9a:aa: 61:c9:19:52:66:1a:ea:11:8f:00:f1:4e:de:b4:94: b8:64:58:87:fd:32:c6:c7:7c:db:b5:31:e0:28:9a: da:8c:82:e8:82:2b:c6:b9:d9:7e:09:32:88:0f:66: b8:ad:8a:63:f7:65:46:de:2b:a0:0e:69:48:51:c2: 86:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FD:23:5B:04:F9:22:37:F3:AC:DD:D7:D9:4D:F1:25:F1:D0:73:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b9e5e856-0e70-3874-9e0b-46d0b5d9298a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:76:50:af:a2:bc:1d:05:39:76:34:12:02:70:48:03:72:96: 2f:bd:16:d9:b9:13:3e:0f:f8:38:0d:6a:8b:4c:a3:76:d4:d3: 68:49:1a:b2:ab:8d:37:26:a7:b6:07:15:47:f1:0c:2c:a7:04: 97:36:c7:4a:30:31:95:51:cb:a6:51:32:c6:db:8e:23:2c:11: a0:2e:b2:8e:74:6f:20:36:b4:5a:fd:01:d3:06:a6:24:07:7c: b0:93:b4:02:e6:ac:66:a3:8c:a9:38:31:ac:45:45:a5:c4:bb: 50:b1:60:8c:5a:ff:bb:45:20:e8:3c:20:d5:3e:84:df:7b:eb: 91:6a:1a:b3:cd:29:d2:b7:db:c7:a4:7f:f3:22:31:16:97:29: 38:63:f2:6e:23:6b:88:2c:ee:9e:aa:80:04:06:e0:0c:13:f0: e6:90:ac:aa:84:89:ae:8f:6a:e8:1f:bb:dd:1c:e9:b4:22:4f: 48:23:10:3a:90:b3:9b:52:bc:ba:0f:c3:44:17:6e:7c:69:b0: 92:47:fd:8b:99:e8:1f:2f:f8:d6:f1:ec:21:36:b0:b9:9a:a6: a6:1e:22:37:8e:24:5e:a1:a2:52:94:9f:41:43:7d:71:d4:03: 1d:0f:ff:1d:e0:73:6b:58:91:a0:f7:92:d9:c1:9a:4d:54:f8: 54:54:64:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwMa0+DXqjFjPZyS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTIwMjAyMDAzMFoXDTI2MDMwMjAyMDAzMFowLzEtMCsGA1UEAxMk NTc4M2Q5NGUtNTFiZi00YWFjLWIwYzctYTk1NzkyYTczOWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV0iQhCuqxPA9txjY17UlMf2c6j1UWkXAsap Xdxm0UBny3nfxmLF1pwbX43CZtZnUKfoNuen8+aoboDiM/ydwQd4+eYi2fFVj4Y8 MAY1fU7XxlTBpN5m+NKTNwNYboTKZPBwDSrcOkHADapjj+XkFrslHdQawGqZrHOB CNXisNWVExJQcE4Xyuzet6pFatpD0UxvOIJR+o0oXFYYombgSIMhGQzddqAZ+Zq/ zOecKXcI9MFBIU2AYg6ofzyEuJpemqphyRlSZhrqEY8A8U7etJS4ZFiH/TLGx3zb tTHgKJrajILogivGudl+CTKID2a4rYpj92VG3iugDmlIUcKGMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF39I1sE+SI386zd19lN8SXx0HOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjllNWU4NTYtMGU3MC0z ODc0LTllMGItNDZkMGI1ZDkyOThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL92UK+ivB0FOXY0EgJwSANyli+9Ftm5Ez4P+DgNaotMo3bU02hJGrKr jTcmp7YHFUfxDCynBJc2x0owMZVRy6ZRMsbbjiMsEaAuso50byA2tFr9AdMGpiQH fLCTtALmrGajjKk4MaxFRaXEu1CxYIxa/7tFIOg8INU+hN9765FqGrPNKdK328ek f/MiMRaXKThj8m4ja4gs7p6qgAQG4AwT8OaQrKqEia6Paugfu90c6bQiT0gjEDqQ s5tSvLoPw0QXbnxpsJJH/YuZ6B8v+Nbx7CE2sLmapqYeIjeOJF6holKUn0FDfXHU Ax0P/x3gc2tYkaD3ktnBmk1U+FRUZK0= -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:02 2025 by rpki-client