This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8bcab89-deac-3d68-b72a-3a4a20a98221.roa File: d8bcab89-deac-3d68-b72a-3a4a20a98221.roa (raw, json) Hash identifier: 5/NAJ9ZBj4kBD9RX0C1lyMLryKdfv7nzTX7LWaOR2NE= Subject key identifier: E6:8F:64:3B:A1:1B:92:3C:22:E7:82:FB:FE:34:D1:0A:6E:C1:F8:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BD5FB45C17BBBC74A3E9CECC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8bcab89-deac-3d68-b72a-3a4a20a98221.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 9443 IP address blocks: 104.99.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:45:c1:7b:bb:c7:4a:3e:9c:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=0f1a4399-7ff4-40c4-866f-c6573f791c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:19:36:05:4f:49:6c:72:ba:48:96:0b:08:ce: af:2f:34:ec:20:12:9e:9c:5a:f8:03:d8:cd:c4:f8: 41:d3:56:3c:11:72:74:0a:2a:14:4b:29:86:80:08: 7c:73:94:21:dd:27:35:e3:83:72:b0:bf:69:8b:fa: 91:d5:01:6e:ce:ce:61:22:06:04:9e:af:cc:40:3d: 0b:80:39:cb:b7:a1:c0:9b:a7:30:d4:ad:82:d4:01: 01:b4:a7:c4:bb:5e:dd:07:45:28:f5:35:2c:d0:ef: c1:69:0c:01:a7:f5:87:eb:e8:5c:99:b2:77:57:31: d2:f1:04:53:1b:85:a3:7b:fb:18:12:f4:59:87:80: ec:63:61:57:93:f9:51:22:5f:ce:52:92:c2:dc:89: 41:07:a8:27:5d:b0:bb:8e:a3:b0:b5:70:96:06:7d: 97:78:e8:c0:c9:c4:96:bf:85:93:b2:01:0c:01:b1: 9c:ba:33:a2:41:f7:f9:ae:e6:0f:b2:04:85:81:e0: b1:df:52:ff:60:65:ef:bc:c4:56:6e:6e:b0:9a:a5: d4:e0:95:3a:30:b6:2e:12:98:9c:46:08:e3:54:9e: d6:a3:44:7b:54:04:e0:73:64:8e:7c:ac:d2:e1:8c: ac:81:5e:7e:27:64:19:06:50:69:de:23:bb:fa:dc: 4f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8F:64:3B:A1:1B:92:3C:22:E7:82:FB:FE:34:D1:0A:6E:C1:F8:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8bcab89-deac-3d68-b72a-3a4a20a98221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.99.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:dc:33:e7:83:39:e6:21:93:b2:d6:a5:a1:eb:1f:d0:2c:0a: db:55:f7:66:79:c2:d4:7a:08:e8:f4:84:30:b3:cc:3e:26:be: 41:c3:e6:3b:97:63:69:11:db:cf:c7:f0:c1:a1:b9:60:fa:cf: 82:63:93:78:74:63:b0:31:50:fb:f8:eb:ad:65:0f:69:e9:aa: 32:05:d5:c5:49:52:20:50:44:ad:24:5c:9a:f9:ee:ab:8f:93: 84:f0:54:a0:ae:fc:be:e4:8b:69:4a:08:a6:ac:99:4b:d1:98: 7e:60:f6:3c:cb:1e:10:8f:f4:02:4f:e9:64:13:52:19:fd:59: a8:1a:b6:79:15:41:6e:3e:d6:85:5f:8c:8e:17:38:c9:63:8d: b3:90:d9:35:66:1f:f0:3e:1d:02:95:13:f3:36:c7:7c:bf:ba: 8a:28:5f:67:6b:95:69:35:59:37:da:33:bf:f0:f3:e3:62:44: d0:a5:d4:fe:2b:d5:1c:01:0c:c7:78:65:da:da:8f:0a:e1:bb: 6c:3f:fc:48:ab:c9:40:0b:59:3e:00:2d:91:f2:d1:29:8e:1e: e9:cd:c1:f9:b8:74:51:58:18:70:13:f1:5d:be:31:c0:44:80: 62:78:4b:52:80:3c:9d:65:33:b5:2b:c9:0a:0c:42:bc:f3:c1: b1:08:56:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+0XBe7vHSj6c7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk MGYxYTQzOTktN2ZmNC00MGM0LTg2NmYtYzY1NzNmNzkxYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhk2BU9JbHK6SJYLCM6vLzTsIBKenFr4A9jN xPhB01Y8EXJ0CioUSymGgAh8c5Qh3Sc144NysL9pi/qR1QFuzs5hIgYEnq/MQD0L gDnLt6HAm6cw1K2C1AEBtKfEu17dB0Uo9TUs0O/BaQwBp/WH6+hcmbJ3VzHS8QRT G4Wje/sYEvRZh4DsY2FXk/lRIl/OUpLC3IlBB6gnXbC7jqOwtXCWBn2XeOjAycSW v4WTsgEMAbGcujOiQff5ruYPsgSFgeCx31L/YGXvvMRWbm6wmqXU4JU6MLYuEpic RgjjVJ7Wo0R7VATgc2SOfKzS4YysgV5+J2QZBlBp3iO7+txPoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaPZDuhG5I8IueC+/400QpuwfifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDhiY2FiODktZGVhYy0z ZDY4LWI3MmEtM2E0YTIwYTk4MjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXcM+eDOeYhk7LWpaHrH9AsCttV92Z5wtR6COj0hDCzzD4mvkHD5juX Y2kR28/H8MGhuWD6z4Jjk3h0Y7AxUPv4661lD2npqjIF1cVJUiBQRK0kXJr57quP k4TwVKCu/L7ki2lKCKasmUvRmH5g9jzLHhCP9AJP6WQTUhn9WagatnkVQW4+1oVf jI4XOMljjbOQ2TVmH/A+HQKVE/M2x3y/uoooX2drlWk1WTfaM7/w8+NiRNCl1P4r 1RwBDMd4Zdrajwrhu2w//EiryUALWT4ALZHy0SmOHunNwfm4dFFYGHAT8V2+McBE gGJ4S1KAPJ1lM7UryQoMQrzzwbEIVjA= -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:48 2025 by rpki-client