This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa File: aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa (raw, json) Hash identifier: 3c5SDj4vNRRVbWfb09zCqMlAP8xXi/tKnCU7MTnPw3E= Subject key identifier: 9B:60:BB:9B:15:B8:A6:78:E4:12:7F:03:F7:62:56:D8:3C:D5:15:93 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584BD5FB0A05633429120C3A1200 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 63023 IP address blocks: 104.156.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:0a:05:63:34:29:12:0c:3a:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=6f758ca1-3cdf-4e61-b9c5-efdfaef86100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:4a:4e:d5:58:bc:29:14:58:3f:e4:40:6f: 6d:ab:4a:f6:8c:7a:e5:b9:d2:c7:95:8b:83:f7:91: 0e:be:be:bf:6b:f3:8b:5d:e7:14:7f:39:27:42:ec: 83:d0:14:ff:04:7f:51:a7:92:85:9a:6e:18:bd:04: 75:20:db:55:a4:8b:67:fd:cf:b0:d9:f9:8f:9e:63: 0a:a4:90:c7:24:86:97:ad:5a:56:2f:51:fc:e4:fb: c3:da:e1:77:78:39:72:2f:fa:71:40:57:1d:69:15: f2:4e:38:bd:6a:f0:07:9a:6a:85:09:d2:15:6c:6c: 49:48:f4:4b:58:4e:d5:51:8f:5d:23:57:0e:c5:47: bf:d3:c9:ae:0d:b9:93:61:db:60:af:70:07:44:53: b4:db:9d:a9:f6:3b:d8:2e:ca:1d:e8:dd:3f:b6:ec: 4e:51:23:31:ce:40:16:4c:01:7c:81:47:8c:70:99: 30:1f:9c:fe:35:41:11:74:e0:bf:0d:12:c6:88:50: 57:b8:cf:68:68:41:de:fb:48:d2:65:11:ce:e0:f7: c3:e7:ec:2c:47:75:59:e8:6b:02:df:f8:25:d8:ee: f0:95:14:04:3f:72:2a:9f:3e:d6:57:c7:36:9c:87: 01:0c:84:96:bb:4e:76:fb:90:7b:39:08:25:63:23: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:60:BB:9B:15:B8:A6:78:E4:12:7F:03:F7:62:56:D8:3C:D5:15:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/aba5a6a1-ead9-33fe-a1b4-a9e2fb900817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 104.156.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:cd:de:9c:99:49:52:51:50:5f:88:15:7f:ae:c6:55:36:fb: ac:68:f8:66:1a:0c:b8:be:42:10:50:42:f0:e4:b1:78:34:96: 62:b5:e7:cc:09:19:eb:6b:29:df:8d:37:7c:50:9b:4a:9e:c2: 09:01:d2:98:f1:1b:50:16:89:c8:7d:69:55:db:19:98:0e:26: 1b:08:2e:b1:5e:fa:47:f3:e9:fa:3b:74:22:74:ae:e9:e1:2b: 53:96:ff:9b:68:5a:b3:13:0b:2b:c6:4c:f4:e6:0b:20:ad:bf: 66:4e:57:fc:6e:42:6d:e7:6a:45:a0:c9:f1:e4:aa:ee:6f:8f: f6:3f:a8:29:91:ee:19:0e:74:b3:d6:6f:58:28:0f:b4:60:3d: 1e:80:0b:3b:68:33:56:10:ab:cf:68:07:bf:d0:9f:cc:db:8d: 4b:b4:e6:5c:fd:04:c7:f9:2a:f9:2a:83:88:6b:8b:79:a3:dc: 34:45:24:13:b1:6b:07:9e:29:e3:58:37:3c:a4:e5:c6:44:b7: f8:c6:0d:83:dd:61:0f:0c:15:c2:71:7a:5b:d1:86:29:c2:a9: b9:2f:88:ba:bc:bf:0c:02:a4:40:ce:25:6d:6d:f8:b0:2a:50: 41:a4:9f:8c:50:b7:d8:66:a2:34:05:d7:f7:3d:fb:ad:e4:70: 28:3f:4b:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+woFYzQpEgw6EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk NmY3NThjYTEtM2NkZi00ZTYxLWI5YzUtZWZkZmFlZjg2MTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQtKTtVYvCkUWD/kQG9tq0r2jHrludLHlYuD 95EOvr6/a/OLXecUfzknQuyD0BT/BH9Rp5KFmm4YvQR1INtVpItn/c+w2fmPnmMK pJDHJIaXrVpWL1H85PvD2uF3eDlyL/pxQFcdaRXyTji9avAHmmqFCdIVbGxJSPRL WE7VUY9dI1cOxUe/08muDbmTYdtgr3AHRFO0252p9jvYLsod6N0/tuxOUSMxzkAW TAF8gUeMcJkwH5z+NUERdOC/DRLGiFBXuM9oaEHe+0jSZRHO4PfD5+wsR3VZ6GsC 3/gl2O7wlRQEP3Iqnz7WV8c2nIcBDISWu052+5B7OQglYyPo7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtgu5sVuKZ45BJ/A/diVtg81RWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvYWJhNWE2YTEtZWFkOS0z M2ZlLWExYjQtYTllMmZiOTAwODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3N3pyZSVJRUF+IFX+uxlU2+6xo+GYaDLi+QhBQQvDksXg0lmK158wJ GetrKd+NN3xQm0qewgkB0pjxG1AWich9aVXbGZgOJhsILrFe+kfz6fo7dCJ0runh K1OW/5toWrMTCyvGTPTmCyCtv2ZOV/xuQm3nakWgyfHkqu5vj/Y/qCmR7hkOdLPW b1goD7RgPR6ACztoM1YQq89oB7/Qn8zbjUu05lz9BMf5Kvkqg4hri3mj3DRFJBOx aweeKeNYNzyk5cZEt/jGDYPdYQ8MFcJxelvRhinCqbkviLq8vwwCpEDOJW1t+LAq UEGkn4xQt9hmojQF1/c9+63kcCg/S84= -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:12 2025 by rpki-client