This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa File: 3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa (raw, json) Hash identifier: TZWfOYk4uOKiisEJST9dI+YiEFfIRZcRmYZ4YdSADbI= Subject key identifier: 11:1E:17:7F:7A:84:7D:26:3B:4C:ED:16:FF:FA:47:5F:C8:A5:0A:44 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C3A7BB80B635F4A5F0DF08980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa Signing time: Thu 18 Dec 2025 14:00:39 +0000 ROA not before: Thu 18 Dec 2025 14:00:39 +0000 ROA not after: Wed 18 Mar 2026 13:00:39 +0000 asID: 13335 IP address blocks: 104.29.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3a:7b:b8:0b:63:5f:4a:5f:0d:f0:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 18 14:00:39 2025 GMT Not After : Mar 18 13:00:39 2026 GMT Subject: CN=0b8cd151-f2d7-4d0c-aa3d-189f6e738316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:ad:53:56:1e:ec:7c:e3:03:f3:dc:65:36: 2e:42:66:a2:ef:46:37:1b:0e:11:fe:09:27:7d:fe: 5a:8a:98:27:d3:43:db:10:52:8a:09:48:87:bc:cd: cf:aa:7d:e5:50:57:a3:af:ff:89:5e:63:7b:9f:a7: 9c:b4:b7:1a:c5:aa:9f:19:22:af:4e:a6:76:a1:0c: 1f:43:2c:d6:46:73:6e:11:95:6f:b2:a1:ec:f3:be: 0f:ed:b8:22:a3:ca:fa:78:25:6b:22:3a:dd:9d:ae: c6:b7:8e:65:1c:53:9c:a1:1c:c5:b7:56:52:81:33: ad:1b:85:73:20:9a:5f:6c:15:6e:f6:b9:b9:a1:17: 8b:da:88:b1:71:43:c4:fd:4b:05:7b:00:35:9e:ed: 25:c7:19:f9:38:14:20:58:ab:ae:2e:08:3e:a6:28: 4b:ba:30:c6:ef:4c:9e:4c:e8:2b:22:c7:e3:d0:c5: c2:10:53:26:8e:d2:33:d3:bc:95:fe:13:f3:fa:b2: af:3c:9e:fa:a1:24:ca:7a:12:d7:7f:6b:f3:3a:48: 36:97:25:cf:ba:f6:64:49:c0:77:09:76:cb:03:53: 0d:9d:26:e9:2c:d7:0a:04:da:eb:68:34:a0:1e:2b: 01:10:fa:62:6c:d8:a3:f4:aa:0b:45:fb:72:35:99: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1E:17:7F:7A:84:7D:26:3B:4C:ED:16:FF:FA:47:5F:C8:A5:0A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3982aede-fc1a-3dd3-95b1-026e01c9f21d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:67:46:ea:4a:a5:6d:80:b6:e4:84:34:31:23:db:da:36:4b: 08:63:8e:87:88:54:21:46:27:a0:9f:0e:69:e0:ab:63:dd:97: ac:f0:70:da:6c:0a:2a:d7:79:e1:6c:e8:81:35:19:c5:2e:6a: fd:7e:4e:0e:3c:22:fb:a9:7f:a8:7e:77:81:be:31:aa:c2:73: 21:57:d3:bb:87:78:97:d7:b9:8e:3a:5d:2e:58:2f:3c:cb:2f: 41:eb:fa:f2:71:5e:21:45:70:4d:9d:86:ce:a2:7d:30:55:70: 81:c1:87:94:9c:29:9d:30:9a:df:54:3a:14:ae:cc:8d:dd:ee: 30:d1:ed:23:d3:de:c1:bf:06:3d:a1:1b:9d:32:c6:6e:f3:f8: 73:9f:08:05:46:2b:ac:bd:e0:0b:b9:cc:2d:a3:bb:0d:05:9a: 48:27:6d:5e:e0:93:18:ef:ce:a7:c5:61:aa:43:61:36:51:37: a4:fb:ef:fe:1d:98:9c:bc:12:fb:b7:ad:94:88:98:87:ae:f0: 82:3c:f1:b1:95:c4:15:86:4d:45:eb:d5:66:fe:22:dd:d0:be: b0:57:bd:d2:9d:04:3e:74:59:b0:31:7e:78:50:db:c8:c0:c8: ab:36:5d:d8:58:8b:39:8a:d7:4c:55:33:c5:6a:e0:cb:1d:14: a6:94:d4:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw6e7gLY19KXw3wiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTIxODE0MDAzOVoXDTI2MDMxODEzMDAzOVowLzEtMCsGA1UEAxMk MGI4Y2QxNTEtZjJkNy00ZDBjLWFhM2QtMTg5ZjZlNzM4MzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c+tU1Ye7HzjA/PcZTYuQmai70Y3Gw4R/gkn ff5aipgn00PbEFKKCUiHvM3Pqn3lUFejr/+JXmN7n6ectLcaxaqfGSKvTqZ2oQwf QyzWRnNuEZVvsqHs874P7bgio8r6eCVrIjrdna7Gt45lHFOcoRzFt1ZSgTOtG4Vz IJpfbBVu9rm5oReL2oixcUPE/UsFewA1nu0lxxn5OBQgWKuuLgg+pihLujDG70ye TOgrIsfj0MXCEFMmjtIz07yV/hPz+rKvPJ76oSTKehLXf2vzOkg2lyXPuvZkScB3 CXbLA1MNnSbpLNcKBNrraDSgHisBEPpibNij9KoLRftyNZndoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEeF396hH0mO0ztFv/6R1/IpQpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzk4MmFlZGUtZmMxYS0z ZGQzLTk1YjEtMDI2ZTAxYzlmMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5nRupKpW2AtuSENDEj29o2SwhjjoeIVCFGJ6CfDmngq2Pdl6zwcNps CirXeeFs6IE1GcUuav1+Tg48Ivupf6h+d4G+MarCcyFX07uHeJfXuY46XS5YLzzL L0Hr+vJxXiFFcE2dhs6ifTBVcIHBh5ScKZ0wmt9UOhSuzI3d7jDR7SPT3sG/Bj2h G50yxm7z+HOfCAVGK6y94Au5zC2juw0FmkgnbV7gkxjvzqfFYapDYTZRN6T77/4d mJy8Evu3rZSImIeu8II88bGVxBWGTUXr1Wb+It3QvrBXvdKdBD50WbAxfnhQ28jA yKs2XdhYizmK10xVM8Vq4MsdFKaU1KE= -----END CERTIFICATE-----Generated at Sat Dec 20 13:10:35 2025 by rpki-client