This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afa418b7-9023-35a4-9477-5b9510a2e7b1.roa File: afa418b7-9023-35a4-9477-5b9510a2e7b1.roa (raw, json) Hash identifier: WrfmqPoLtxQptjmqfpV4FLLZTPCFStkkwzb6F8YNWCM= Subject key identifier: 44:BA:99:D5:2C:2A:7E:A9:72:25:84:EE:1D:20:D4:A1:B4:96:94:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BDA2B1A6DA31321CD09F05C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afa418b7-9023-35a4-9477-5b9510a2e7b1.roa Signing time: Fri 14 Nov 2025 02:00:30 +0000 ROA not before: Fri 14 Nov 2025 02:00:30 +0000 ROA not after: Thu 12 Feb 2026 02:00:30 +0000 asID: 16625 IP address blocks: 104.116.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:2b:1a:6d:a3:13:21:cd:09:f0:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 14 02:00:30 2025 GMT Not After : Feb 12 02:00:30 2026 GMT Subject: CN=ea6646d0-ca11-4485-8466-10dd57e21083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:e9:1f:6c:05:ff:59:0a:ac:ba:cf:01:57: 82:45:98:4d:09:cd:84:31:28:d5:41:87:e1:d9:5d: ae:17:f5:b7:50:fd:e7:3d:63:a4:14:c0:d8:15:62: 3b:74:fe:2c:d3:13:d4:c3:b3:40:a5:08:69:a3:cf: 14:d5:22:f9:2b:e2:a1:a2:87:ed:d3:f8:1f:2d:76: 8f:e0:a5:c1:09:75:80:18:41:1f:00:6b:03:e8:e4: b2:97:24:c9:7d:7b:e3:eb:a1:c4:f5:17:e7:3f:fa: 5a:58:87:77:6a:00:9d:d0:c9:7e:9a:ac:7b:82:64: 89:64:1d:e9:7c:e1:d1:08:54:0c:78:cf:14:94:ab: d2:0e:97:ac:6f:8f:e4:c5:d0:44:eb:3c:13:c2:e6: 71:5f:5f:59:bf:f4:df:7e:f1:b1:65:3d:f0:e9:82: 8e:de:95:80:f6:3f:5d:b9:9a:59:80:ae:37:67:d7: 08:09:73:5c:de:9e:c6:1a:3c:a9:df:72:52:d5:38: fb:8b:29:c5:1e:e7:65:94:94:c5:57:db:25:5f:e1: 06:88:8c:b3:8e:e9:ff:bd:70:d1:da:e6:1d:d3:b4: b5:d6:c6:0f:e6:1a:48:cd:8b:fe:67:91:6f:08:32: 42:90:ed:7a:41:8d:84:d2:13:4d:6f:59:d7:17:dc: a7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BA:99:D5:2C:2A:7E:A9:72:25:84:EE:1D:20:D4:A1:B4:96:94:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afa418b7-9023-35a4-9477-5b9510a2e7b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.116.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:60:a0:9e:1c:4e:88:ab:51:6a:de:78:5b:05:ef:3f:c1:63: 32:c7:09:21:89:68:c0:6b:96:4f:14:d3:35:b8:85:bd:a3:1a: f0:58:3a:25:9e:19:c8:d4:ef:d2:ec:9e:b0:cb:8c:12:fc:b8: 00:2a:de:94:33:fa:0e:3b:5a:6d:0b:d7:6f:f7:9f:fe:df:29: fb:75:0c:18:d5:25:0f:a1:20:a2:8c:8e:5b:12:37:3d:b7:09: 36:57:90:73:59:d0:68:4e:77:9a:f2:4c:3a:55:ef:8a:bd:72: 9b:4d:e2:98:17:45:dc:20:8c:62:f2:ad:f8:b2:24:45:89:ce: e9:04:28:a9:87:ed:ca:30:ed:d7:01:6d:f1:b7:65:0d:c1:fd: 47:2a:43:a7:58:a3:30:59:68:fe:40:a3:d1:c9:e7:0e:1d:b6: a7:3d:d0:a8:b1:f4:3e:9e:97:60:32:f8:46:54:5c:b7:73:c7: cb:8d:26:67:aa:e1:63:08:71:9d:34:77:cf:29:51:c6:02:34: 8d:19:a2:47:2f:0d:8f:fb:0d:c6:ed:23:1f:32:f6:87:9c:2c: db:96:d0:b4:50:83:40:eb:dc:4b:17:ee:60:1f:ee:65:b9:cc: a8:66:d4:0b:c2:73:bc:d8:34:d1:0d:66:85:40:97:0e:c4:4f: 59:db:57:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvaKxptoxMhzQnwXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk ZWE2NjQ2ZDAtY2ExMS00NDg1LTg0NjYtMTBkZDU3ZTIxMDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/bpH2wF/1kKrLrPAVeCRZhNCc2EMSjVQYfh 2V2uF/W3UP3nPWOkFMDYFWI7dP4s0xPUw7NApQhpo88U1SL5K+Khooft0/gfLXaP 4KXBCXWAGEEfAGsD6OSylyTJfXvj66HE9RfnP/paWId3agCd0Ml+mqx7gmSJZB3p fOHRCFQMeM8UlKvSDpesb4/kxdBE6zwTwuZxX19Zv/TffvGxZT3w6YKO3pWA9j9d uZpZgK43Z9cICXNc3p7GGjyp33JS1Tj7iynFHudllJTFV9slX+EGiIyzjun/vXDR 2uYd07S11sYP5hpIzYv+Z5FvCDJCkO16QY2E0hNNb1nXF9ynnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFES6mdUsKn6pciWE7h0g1KG0lpSyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZhNDE4YjctOTAyMy0z NWE0LTk0NzctNWI5NTEwYTJlN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9goJ4cToirUWreeFsF7z/BYzLHCSGJaMBrlk8U0zW4hb2jGvBYOiWe GcjU79LsnrDLjBL8uAAq3pQz+g47Wm0L12/3n/7fKft1DBjVJQ+hIKKMjlsSNz23 CTZXkHNZ0GhOd5ryTDpV74q9cptN4pgXRdwgjGLyrfiyJEWJzukEKKmH7cow7dcB bfG3ZQ3B/UcqQ6dYozBZaP5Ao9HJ5w4dtqc90Kix9D6el2Ay+EZUXLdzx8uNJmeq 4WMIcZ00d88pUcYCNI0ZokcvDY/7DcbtIx8y9oecLNuW0LRQg0Dr3EsX7mAf7mW5 zKhm1AvCc7zYNNENZoVAlw7ET1nbVwQ= -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:23 2025 by rpki-client