This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a153db53-9524-3f9c-af42-4f159128d889.roa File: a153db53-9524-3f9c-af42-4f159128d889.roa (raw, json) Hash identifier: r5oM8ICFENKHuS7CTLLrmSYNcqJy36BtecA7P3wukSs= Subject key identifier: 67:5A:A4:F3:AE:52:4A:5B:C1:C3:08:4D:4E:68:9F:49:FC:7B:85:C4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C3EAB9CD57550D97CC45E6500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a153db53-9524-3f9c-af42-4f159128d889.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 13335 IP address blocks: 104.23.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:9c:d5:75:50:d9:7c:c4:5e:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=cfd894b5-60f0-420f-bca2-fbd53ad16ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:93:c3:26:74:dc:0b:08:24:46:97:0f:63:8a: 88:c6:50:7b:54:84:4f:15:f2:1c:3e:d5:86:2d:eb: dd:7a:73:33:17:e9:18:18:66:27:ce:2c:d5:01:2d: db:5b:6d:a2:e3:47:0d:00:fe:d5:5a:8c:ad:e4:f7: 13:c3:e8:78:df:80:f9:e9:a5:08:5d:d7:2c:24:b9: b1:9d:29:e9:d9:5d:d2:90:2c:39:27:ed:be:f9:b2: 19:fd:94:55:65:73:5e:80:86:9a:53:fc:5b:31:a2: 4a:36:f7:ad:ec:f7:ce:9c:3b:01:46:ac:5b:6f:8d: 52:74:ad:af:1f:65:71:42:ed:3b:0f:8a:a6:5c:7c: d4:d0:81:b1:e1:dd:ab:04:2a:e4:3a:13:95:1e:d3: b3:44:a1:b5:a5:dc:c0:40:65:39:ff:96:79:e4:ee: b0:0a:07:7c:b7:31:b9:e0:82:4a:36:84:c7:40:ab: f7:0a:54:3b:b5:4d:d5:05:d8:2f:dc:c6:8a:54:3e: d4:21:eb:32:61:da:82:25:49:da:f0:a7:22:22:a0: 9e:1f:08:4f:87:40:f5:60:ca:1d:63:43:64:3c:17: bb:51:b9:32:94:59:ce:9d:59:45:0a:92:b3:03:bc: 80:f6:70:b7:f8:6a:17:10:30:97:33:94:ce:73:ab: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5A:A4:F3:AE:52:4A:5B:C1:C3:08:4D:4E:68:9F:49:FC:7B:85:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a153db53-9524-3f9c-af42-4f159128d889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.23.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:bd:d1:e2:fb:fc:98:e9:39:48:e7:d2:a1:8d:f1:52:80:29: 96:ee:91:d3:be:97:d5:35:28:07:1a:75:d2:55:7e:21:7b:5b: 58:8c:64:85:db:63:72:f5:80:29:5f:19:19:99:95:c3:0c:fe: 82:86:e0:78:73:c3:49:e4:92:fd:98:43:5d:f3:de:45:85:80: 51:f4:1d:8f:f0:ae:27:37:6d:61:16:10:09:91:24:fe:05:08: 7a:92:3a:ed:85:99:35:ec:c3:9c:f2:ff:7c:bb:67:59:b2:dd: f8:48:2a:91:89:ac:27:5b:8c:df:04:9e:62:ee:d5:97:cc:52: 8e:64:5f:28:25:8f:ea:dd:86:7a:de:7b:45:c0:4f:a5:a7:e3: 11:cd:1a:69:6f:dd:2e:ff:58:c1:29:3a:e0:dd:02:2e:03:5f: 77:ce:b3:bf:03:3b:6b:e6:0b:9b:23:93:68:fb:ab:a8:b5:d9: a1:e3:4c:66:72:98:c8:33:76:71:e7:9f:97:d4:80:bc:a8:90: d7:a8:04:7e:7c:33:ae:87:c4:bd:50:0c:78:fb:03:e2:c4:ba: c4:76:53:34:3b:dc:49:ae:99:06:95:82:9f:3e:f7:63:20:c9: 26:74:1c:ef:50:46:9d:19:29:ca:79:81:9a:e2:7a:3d:eb:52: ea:06:7c:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q5zVdVDZfMReZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk Y2ZkODk0YjUtNjBmMC00MjBmLWJjYTItZmJkNTNhZDE2ZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZPDJnTcCwgkRpcPY4qIxlB7VIRPFfIcPtWG LevdenMzF+kYGGYnzizVAS3bW22i40cNAP7VWoyt5PcTw+h434D56aUIXdcsJLmx nSnp2V3SkCw5J+2++bIZ/ZRVZXNegIaaU/xbMaJKNvet7PfOnDsBRqxbb41SdK2v H2VxQu07D4qmXHzU0IGx4d2rBCrkOhOVHtOzRKG1pdzAQGU5/5Z55O6wCgd8tzG5 4IJKNoTHQKv3ClQ7tU3VBdgv3MaKVD7UIesyYdqCJUna8KciIqCeHwhPh0D1YMod Y0NkPBe7UbkylFnOnVlFCpKzA7yA9nC3+GoXEDCXM5TOc6t7CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdapPOuUkpbwcMITU5on0n8e4XEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTE1M2RiNTMtOTUyNC0z ZjljLWFmNDItNGYxNTkxMjhkODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaBfPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC90eL7/JjpOUjn0qGN8VKAKZbukdO+l9U1KAcaddJVfiF7W1iMZIXb Y3L1gClfGRmZlcMM/oKG4Hhzw0nkkv2YQ13z3kWFgFH0HY/wric3bWEWEAmRJP4F CHqSOu2FmTXsw5zy/3y7Z1my3fhIKpGJrCdbjN8EnmLu1ZfMUo5kXyglj+rdhnre e0XAT6Wn4xHNGmlv3S7/WMEpOuDdAi4DX3fOs78DO2vmC5sjk2j7q6i12aHjTGZy mMgzdnHnn5fUgLyokNeoBH58M66HxL1QDHj7A+LEusR2UzQ73EmumQaVgp8+92Mg ySZ0HO9QRp0ZKcp5gZriej3rUuoGfIo= -----END CERTIFICATE-----Generated at Thu Dec 25 03:37:24 2025 by rpki-client