This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d9cbf549-c804-3103-8d7b-223b337db7cb.roa File: d9cbf549-c804-3103-8d7b-223b337db7cb.roa (raw, json) Hash identifier: Do8Wj5t74gsLzOcM9kTAg1y8AZTLTbO7i4vBcDy8Aqg= Subject key identifier: 5C:31:E5:36:64:57:43:08:0D:7E:E0:D8:0A:60:A6:08:CA:3B:28:3C Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584BEC50A48F4F228A06EEF4B980 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d9cbf549-c804-3103-8d7b-223b337db7cb.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 54858 IP address blocks: 104.232.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:a4:8f:4f:22:8a:06:ee:f4:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=83a47036-9d40-45e4-a3f9-d8486b2b297d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:95:e4:6a:cd:af:bf:a3:ea:da:75:82:b4:a3: 25:1e:88:77:a1:6c:da:d2:79:08:c9:3e:6e:f0:1b: e9:de:6e:8d:46:f2:1d:30:a5:8a:13:6a:7c:1a:91: c4:38:8e:61:43:8b:1b:a4:5e:29:15:67:64:85:be: f2:d0:14:0f:67:38:7b:ad:d2:df:99:63:05:7f:75: 93:9b:65:e5:45:6a:18:2c:c5:2f:87:d2:4f:9f:05: 94:d7:fd:69:61:fc:0c:1b:33:aa:cb:14:6f:92:c5: 2c:e8:bf:87:93:e0:1d:52:d1:58:1b:d9:11:8e:34: 22:35:4f:5a:84:a0:2b:f7:bb:71:45:2c:64:31:ef: b0:09:16:5e:9b:17:d0:98:c4:b0:eb:ac:a7:c7:57: d0:1d:c2:e1:91:1c:b3:45:5a:d8:ed:ab:bd:8e:7d: 4a:74:3c:3d:90:4d:ef:f3:f1:27:f5:92:1b:35:6b: c2:38:7d:0a:ac:02:a6:4c:99:87:ef:0c:ed:bd:63: 47:1c:a3:4f:e3:46:6b:ce:b9:0f:bd:e2:14:98:e3: 25:a8:3a:70:be:b6:b3:22:d3:1a:e7:e6:83:2e:24: d6:e3:a3:a7:16:06:90:c8:af:69:29:0f:d9:c7:0c: 6b:4a:9b:7b:37:26:88:cc:61:c9:18:d9:e8:95:0c: 05:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:31:E5:36:64:57:43:08:0D:7E:E0:D8:0A:60:A6:08:CA:3B:28:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d9cbf549-c804-3103-8d7b-223b337db7cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.232.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:20:88:32:d5:41:00:46:de:f9:e3:12:6d:cd:47:2f:3c:92: 11:06:2c:bd:33:93:27:78:cc:c1:59:5a:05:80:2b:ce:23:3f: 70:86:89:70:44:04:83:c2:c1:e3:6e:e3:bc:8c:49:99:7a:dc: 90:59:88:b2:df:e6:c3:d6:ca:5a:58:5b:d7:a4:2b:ad:61:b8: c8:d2:a4:da:31:c9:8c:88:3f:ec:54:48:87:e6:24:c1:f5:dd: a4:55:98:b2:6b:98:38:ff:1a:76:ae:73:33:47:92:4f:9b:a3: 73:bf:4f:35:4e:8f:c9:ab:3c:96:5b:98:a8:31:86:07:67:d5: d3:80:63:69:1e:62:ab:10:95:54:b6:3e:bd:75:1a:bd:58:4e: dd:1e:bc:ca:4b:a9:93:1d:1a:24:8e:4d:23:00:8a:22:5a:81: 86:7a:20:d5:4f:21:ff:bb:d7:40:fc:57:5a:4f:c1:38:60:56: 67:e4:28:cf:1c:f9:47:a8:35:e6:96:79:dd:b9:66:f1:cc:e3: ad:0a:a5:24:ba:85:56:2d:0f:9f:88:4e:09:d9:5b:f1:2f:4a: 58:bc:7b:84:f3:78:d0:67:a8:7b:fe:73:17:f6:18:af:5c:d9: 95:25:6f:8a:5c:4b:00:f1:be:59:0b:56:b7:9f:2f:3a:2b:e5: 8c:ba:3e:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsUKSPTyKKBu70uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk ODNhNDcwMzYtOWQ0MC00NWU0LWEzZjktZDg0ODZiMmIyOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZXkas2vv6Pq2nWCtKMlHoh3oWza0nkIyT5u 8Bvp3m6NRvIdMKWKE2p8GpHEOI5hQ4sbpF4pFWdkhb7y0BQPZzh7rdLfmWMFf3WT m2XlRWoYLMUvh9JPnwWU1/1pYfwMGzOqyxRvksUs6L+Hk+AdUtFYG9kRjjQiNU9a hKAr97txRSxkMe+wCRZemxfQmMSw66ynx1fQHcLhkRyzRVrY7au9jn1KdDw9kE3v 8/En9ZIbNWvCOH0KrAKmTJmH7wztvWNHHKNP40ZrzrkPveIUmOMlqDpwvrazItMa 5+aDLiTW46OnFgaQyK9pKQ/ZxwxrSpt7NyaIzGHJGNnolQwFswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwx5TZkV0MIDX7g2ApgpgjKOyg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZDljYmY1NDktYzgwNC0z MTAzLThkN2ItMjIzYjMzN2RiN2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaOhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8giDLVQQBG3vnjEm3NRy88khEGLL0zkyd4zMFZWgWAK84jP3CGiXBE BIPCweNu47yMSZl63JBZiLLf5sPWylpYW9ekK61huMjSpNoxyYyIP+xUSIfmJMH1 3aRVmLJrmDj/GnauczNHkk+bo3O/TzVOj8mrPJZbmKgxhgdn1dOAY2keYqsQlVS2 Pr11Gr1YTt0evMpLqZMdGiSOTSMAiiJagYZ6INVPIf+710D8V1pPwThgVmfkKM8c +UeoNeaWed25ZvHM460KpSS6hVYtD5+ITgnZW/EvSli8e4TzeNBnqHv+cxf2GK9c 2ZUlb4pcSwDxvlkLVrefLzor5Yy6PiA= -----END CERTIFICATE-----Generated at Sat Dec 6 14:09:23 2025 by rpki-client