This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87047fdd-e83e-3526-a38e-6e704a5c2c0d.roa File: 87047fdd-e83e-3526-a38e-6e704a5c2c0d.roa (raw, json) Hash identifier: x5h9xxB0ptJ5tF3ZLDYWXwWqv0i3LyZ8T9AZSFl64wE= Subject key identifier: A9:20:DC:B4:D3:6C:B4:54:E7:F5:11:C2:04:75:01:53:29:4D:50:D5 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584BEC50A45A2E2596C4EAF920E0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87047fdd-e83e-3526-a38e-6e704a5c2c0d.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 54858 IP address blocks: 104.152.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:a4:5a:2e:25:96:c4:ea:f9:20:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=d1a19f96-ec24-4428-8330-d4c6934f9d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bf:e1:ff:9e:05:76:66:e2:8d:af:dc:6d:1e: 44:1e:4b:5a:96:59:60:41:0e:0e:ee:d7:b6:4d:7c: 03:86:b6:6c:a1:73:0c:f6:89:39:bf:7b:03:68:d0: 7f:b5:62:da:b6:85:0b:cc:4a:68:ce:8d:1c:10:d2: 35:6f:64:90:d5:59:4f:da:c8:78:a4:64:a1:1f:3a: 87:07:70:9d:ea:17:75:fa:2e:ea:02:ef:f2:f8:84: 8d:75:4d:6f:5e:58:bc:e0:46:9f:11:d6:1d:3f:a5: a1:f7:42:14:97:15:7c:5c:56:4c:0d:3f:c4:ba:8c: f5:98:db:01:ab:f5:f4:6c:42:2d:be:0c:e3:c2:5f: 5a:7e:a7:64:06:11:b6:bb:56:b5:e0:87:95:ed:26: 71:07:79:37:c8:a5:a5:c2:ca:9e:c6:b8:48:fe:0c: 97:ff:d9:10:8f:8c:7d:17:58:cc:0d:09:f8:d7:ae: c9:5b:ff:5f:d1:6f:b1:96:53:b2:54:93:99:54:9a: e4:fc:38:ed:49:12:92:40:11:c0:92:7d:35:62:61: 17:aa:35:b6:93:4a:89:20:dc:2a:30:3b:e7:25:3f: d4:a4:df:bc:0f:eb:ef:d2:4d:16:c2:c0:9d:99:a5: 24:a6:1a:69:f8:d3:bb:bf:49:ea:a1:f4:34:c2:cd: 19:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:20:DC:B4:D3:6C:B4:54:E7:F5:11:C2:04:75:01:53:29:4D:50:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/87047fdd-e83e-3526-a38e-6e704a5c2c0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.152.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6d:52:16:5a:af:1d:0b:e7:18:21:f8:d0:cb:b3:d3:66:b6: 3e:6c:9e:13:36:86:69:56:67:bd:96:97:cb:4b:28:99:f0:35: d5:fd:52:b3:4f:0f:62:3d:f7:c6:01:a7:84:4c:b8:f4:03:2e: e4:67:92:fc:c5:31:c2:06:26:f2:bc:10:d9:82:99:6b:11:aa: 4a:a0:df:13:29:00:76:eb:a8:ca:1e:8b:86:35:37:18:62:45: e3:f3:d8:58:06:27:6c:b7:e2:fc:0a:7a:2f:37:50:7d:1b:93: 87:2d:e7:c7:2f:4c:27:a5:d1:d7:a1:99:11:ac:9e:0f:2b:01: 0f:b3:68:6f:4d:ae:77:17:f3:55:21:75:a4:8e:d3:34:22:0c: 0f:4e:d1:f5:25:8d:45:8f:d6:a2:06:82:22:05:b7:69:24:e1: 66:64:74:eb:79:24:ad:17:7a:84:48:48:e4:e4:b1:cd:66:a2: 57:8e:79:bf:14:0e:14:f6:56:e7:ae:db:0b:33:95:58:4f:42: e2:39:46:1f:c5:9d:44:d0:1f:ed:29:ce:46:6a:85:80:6c:3e: 8a:23:f3:a2:37:04:30:6c:7e:1e:6e:5a:b5:f1:a5:c3:2a:0f: 79:23:9c:6b:94:0f:32:f4:24:03:47:8f:b0:05:b1:b8:25:df: 6a:77:89:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsUKRaLiWWxOr5IOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk ZDFhMTlmOTYtZWMyNC00NDI4LTgzMzAtZDRjNjkzNGY5ZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb/h/54Fdmbija/cbR5EHktalllgQQ4O7te2 TXwDhrZsoXMM9ok5v3sDaNB/tWLatoULzEpozo0cENI1b2SQ1VlP2sh4pGShHzqH B3Cd6hd1+i7qAu/y+ISNdU1vXli84EafEdYdP6Wh90IUlxV8XFZMDT/Euoz1mNsB q/X0bEItvgzjwl9afqdkBhG2u1a14IeV7SZxB3k3yKWlwsqexrhI/gyX/9kQj4x9 F1jMDQn4167JW/9f0W+xllOyVJOZVJrk/DjtSRKSQBHAkn01YmEXqjW2k0qJINwq MDvnJT/UpN+8D+vv0k0WwsCdmaUkphpp+NO7v0nqofQ0ws0ZyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkg3LTTbLRU5/URwgR1AVMpTVDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODcwNDdmZGQtZTgzZS0z NTI2LWEzOGUtNmU3MDRhNWMyYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVtUhZarx0L5xgh+NDLs9Nmtj5snhM2hmlWZ72Wl8tLKJnwNdX9UrNP D2I998YBp4RMuPQDLuRnkvzFMcIGJvK8ENmCmWsRqkqg3xMpAHbrqMoei4Y1Nxhi RePz2FgGJ2y34vwKei83UH0bk4ct58cvTCel0dehmRGsng8rAQ+zaG9NrncX81Uh daSO0zQiDA9O0fUljUWP1qIGgiIFt2kk4WZkdOt5JK0XeoRISOTksc1moleOeb8U DhT2Vueu2wszlVhPQuI5Rh/FnUTQH+0pzkZqhYBsPooj86I3BDBsfh5uWrXxpcMq D3kjnGuUDzL0JANHj7AFsbgl32p3ibw= -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:03 2025 by rpki-client