This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa File: c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa (raw, json) Hash identifier: hAn6isJtzspOrkoR7nx8wdqJ+QIf/mf2dgt2qvo9F98= Subject key identifier: C8:CF:02:2E:EC:78:22:8E:97:DC:28:FC:25:EC:7C:96:9F:6E:6A:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BD8C5C6B2501273572E197C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 4761 IP address blocks: 104.106.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:c6:b2:50:12:73:57:2e:19:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=da8f26a7-aefd-484f-9baa-1a03770af929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:02:67:fb:1e:30:23:83:50:04:2b:33:56: 61:7f:89:ab:52:36:bb:b2:61:65:23:68:10:6e:7f: 29:76:80:50:f5:a0:61:fd:d1:80:14:38:d2:31:fd: e9:38:00:bc:7c:c1:a3:bb:45:fe:71:52:f6:c7:53: 06:48:9c:09:6f:d4:62:c9:35:d6:df:20:7b:a5:a4: 3e:bd:8e:e7:eb:34:18:0a:28:8e:3c:f8:d0:03:b7: 4e:44:6a:bf:d7:58:60:b9:70:4a:50:26:0b:db:54: 32:a9:5a:26:35:14:22:fc:3a:55:7d:f8:65:0d:c6: 5f:92:7d:41:c2:62:5e:44:7f:38:29:81:b4:7c:ba: d5:e5:4f:fb:87:73:33:c2:6a:af:91:85:1b:a8:33: 26:16:0e:ab:27:2c:d0:63:3c:b1:76:1e:5f:05:e8: 32:45:5d:36:a9:9c:4e:c0:e9:39:d4:d6:0e:88:e7: 49:d1:71:7b:8d:44:a4:7f:89:70:53:5a:fd:91:4e: 8c:76:63:35:50:3c:65:1f:8c:17:dd:d9:4a:68:c6: 3b:97:78:04:51:bc:e1:1a:c1:5a:44:4a:26:60:25: e8:cb:e7:96:e9:56:62:63:ca:c9:d8:66:42:1e:28: 18:e7:55:6c:74:c8:c2:7f:09:b4:d9:70:c4:2b:9b: fd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CF:02:2E:EC:78:22:8E:97:DC:28:FC:25:EC:7C:96:9F:6E:6A:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8651a2c-f04e-3ef9-847d-7910a3cc1659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.106.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8a:66:fc:3e:ff:2f:24:ff:08:2b:af:0b:f3:11:1b:da:7e: 00:d2:62:ec:53:07:da:89:aa:51:21:3f:73:68:f4:a8:5a:8d: 5e:f0:2c:51:c6:54:2a:51:61:e9:71:08:79:b7:3b:ce:14:b5: 25:08:b3:c8:f8:7b:ae:ae:13:11:42:b3:9c:24:db:fa:27:b4: 4c:ce:e8:37:88:44:82:13:32:65:31:27:45:9a:65:78:8f:31: eb:22:d4:ed:60:d7:e6:71:a0:4a:71:b2:36:ee:f6:80:79:60: ee:61:dd:dd:17:6e:a9:74:20:25:fc:cd:58:a7:6f:36:0d:55: 3e:67:2d:41:58:0e:2f:d2:d6:64:ff:55:e7:e1:59:24:ba:58: ec:f8:6c:e1:b6:b4:ba:ee:08:f6:7a:3f:cb:3f:bc:88:76:21: 9f:98:e1:4a:6d:5f:af:35:22:59:1b:bf:95:e4:79:6e:c8:d9: 45:a6:fb:15:c3:4d:2b:5f:09:06:ad:fb:f8:bd:d1:38:ec:6c: c4:93:34:10:20:2b:2f:fd:99:68:9c:9c:8e:c7:0d:43:92:f4: 39:af:56:9c:e0:d9:5a:4b:59:58:f5:f3:9c:a0:b2:57:53:64: 9b:e7:8e:13:7e:b9:20:14:d4:d8:4d:78:36:25:b1:e7:04:05: e6:d2:7b:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxcayUBJzVy4ZfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk ZGE4ZjI2YTctYWVmZC00ODRmLTliYWEtMWEwMzc3MGFmOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3UCZ/seMCODUAQrM1Zhf4mrUja7smFlI2gQ bn8pdoBQ9aBh/dGAFDjSMf3pOAC8fMGju0X+cVL2x1MGSJwJb9RiyTXW3yB7paQ+ vY7n6zQYCiiOPPjQA7dORGq/11hguXBKUCYL21QyqVomNRQi/DpVffhlDcZfkn1B wmJeRH84KYG0fLrV5U/7h3MzwmqvkYUbqDMmFg6rJyzQYzyxdh5fBegyRV02qZxO wOk51NYOiOdJ0XF7jUSkf4lwU1r9kU6MdmM1UDxlH4wX3dlKaMY7l3gEUbzhGsFa REomYCXoy+eW6VZiY8rJ2GZCHigY51VsdMjCfwm02XDEK5v9yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjPAi7seCKOl9wo/CXsfJafbmpaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg2NTFhMmMtZjA0ZS0z ZWY5LTg0N2QtNzkxMGEzY2MxNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqKZvw+/y8k/wgrrwvzERvafgDSYuxTB9qJqlEhP3No9KhajV7wLFHG VCpRYelxCHm3O84UtSUIs8j4e66uExFCs5wk2/ontEzO6DeIRIITMmUxJ0WaZXiP Mesi1O1g1+ZxoEpxsjbu9oB5YO5h3d0Xbql0ICX8zVinbzYNVT5nLUFYDi/S1mT/ VefhWSS6WOz4bOG2tLruCPZ6P8s/vIh2IZ+Y4UptX681Ilkbv5XkeW7I2UWm+xXD TStfCQat+/i90TjsbMSTNBAgKy/9mWicnI7HDUOS9DmvVpzg2VpLWVj185ygsldT ZJvnjhN+uSAU1NhNeDYlsecEBebSexw= -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:34 2025 by rpki-client