This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa File: 87e18ed9-a210-3d88-b807-6e991937baa5.roa (raw, json) Hash identifier: gbLWF1kUEAWSySW5fM9wnKQ5tm0PfXWslJCVf8Nxb8A= Subject key identifier: 8A:0D:07:2C:12:BF:F1:E5:95:94:E2:7E:CA:8D:3F:63:64:12:1A:B0 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584C22C0E95FD73D92061CDB3800 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 398993 IP address blocks: 104.233.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:e9:5f:d7:3d:92:06:1c:db:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=a3173f4b-b426-41f4-ba91-1e598d3081bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7b:91:bf:b9:01:ef:e7:d6:10:b1:a6:d9:2f: dc:c1:17:86:1b:4d:8b:b7:a5:d4:4e:1b:e6:07:02: 54:e2:dc:17:48:93:81:fa:22:45:b8:55:dd:16:35: fa:84:0a:d2:62:68:cd:4b:61:cb:01:53:f7:09:8b: 56:84:66:f8:db:e7:e4:3b:c0:47:a1:65:24:c3:d6: 0a:2f:3a:3f:0e:a6:90:fd:09:f5:d3:9e:cb:97:1b: 1d:f4:09:ef:99:4d:f9:db:db:c1:4c:98:43:45:79: 13:56:f6:8a:5d:7a:ba:a0:58:fd:14:f9:53:b2:f4: 72:19:cd:9b:df:6a:f6:98:00:9f:61:55:9f:1c:73: bc:3a:d3:4b:aa:57:0e:31:d0:ee:f7:98:dc:49:d9: 77:bc:13:87:7a:3c:8b:0b:1f:9f:91:01:ea:1e:1f: 46:14:c5:f3:de:1b:b3:0f:29:85:38:89:4f:89:71: b5:dd:1e:8e:93:66:66:e2:09:d3:2a:e6:9c:67:7f: bd:41:a2:f6:98:46:ae:88:ae:bd:96:e7:b9:48:1f: c8:0b:77:dd:ab:9d:71:e0:17:8f:09:26:83:02:83: fc:4b:8e:4a:e5:1b:78:ba:fd:f8:cb:dd:d3:80:0b: 41:04:64:f7:5f:6f:08:fd:0d:4d:09:9f:9a:81:c5: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0D:07:2C:12:BF:F1:E5:95:94:E2:7E:CA:8D:3F:63:64:12:1A:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f9:10:53:23:74:0e:c1:fc:73:e4:8e:65:1f:eb:57:de:36: e7:3d:9b:d6:b7:68:21:b4:b9:56:34:e0:3b:24:04:78:a5:0e: 54:3a:82:43:05:2a:8e:6a:0d:da:0e:6e:bf:0e:d5:2e:90:cf: 33:69:5a:b0:9c:83:93:c3:27:dc:39:3d:42:c2:fd:7b:85:cb: 4b:e7:8a:3d:95:05:ea:95:61:13:23:9d:88:b6:51:dc:62:be: 5e:aa:80:99:81:f6:8c:a1:cf:a3:f9:47:74:8c:32:a8:b3:4b: b3:71:10:5a:2f:35:53:bb:a6:ca:0b:38:71:84:ea:06:ac:4f: 64:fd:fd:4f:4d:09:11:9b:e5:bb:1f:b0:84:31:4c:4f:96:71: ab:91:f8:86:b0:9b:2c:58:3b:ce:0a:12:54:cf:db:78:5a:fc: 96:b7:58:cb:60:fa:28:5a:d6:d4:93:ba:3f:d1:cb:e6:ca:6d: eb:3d:ba:fd:71:1d:71:54:50:41:71:9c:5a:ba:6d:a6:2b:f4: 7a:72:f1:1e:c4:99:42:fe:90:55:f5:b0:06:ec:e9:7e:d9:44: b1:04:83:d9:10:14:0d:e1:59:09:2e:f6:4d:9e:76:26:41:6d: a7:b5:6b:28:d7:60:7d:25:14:df:81:c3:a5:56:57:cd:a2:4f: bc:52:10:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwiwOlf1z2SBhzbOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk YTMxNzNmNGItYjQyNi00MWY0LWJhOTEtMWU1OThkMzA4MWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnuRv7kB7+fWELGm2S/cwReGG02Lt6XUThvm BwJU4twXSJOB+iJFuFXdFjX6hArSYmjNS2HLAVP3CYtWhGb42+fkO8BHoWUkw9YK Lzo/DqaQ/Qn1057Llxsd9AnvmU3529vBTJhDRXkTVvaKXXq6oFj9FPlTsvRyGc2b 32r2mACfYVWfHHO8OtNLqlcOMdDu95jcSdl3vBOHejyLCx+fkQHqHh9GFMXz3huz DymFOIlPiXG13R6Ok2Zm4gnTKuacZ3+9QaL2mEauiK69lue5SB/IC3fdq51x4BeP CSaDAoP8S45K5Rt4uv34y93TgAtBBGT3X28I/Q1NCZ+agcVMvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoNBywSv/HllZTifsqNP2NkEhqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvODdlMThlZDktYTIxMC0z ZDg4LWI4MDctNmU5OTE5MzdiYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaOmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL5EFMjdA7B/HPkjmUf61feNuc9m9a3aCG0uVY04DskBHilDlQ6gkMF Ko5qDdoObr8O1S6QzzNpWrCcg5PDJ9w5PULC/XuFy0vnij2VBeqVYRMjnYi2Udxi vl6qgJmB9oyhz6P5R3SMMqizS7NxEFovNVO7psoLOHGE6gasT2T9/U9NCRGb5bsf sIQxTE+WcauR+IawmyxYO84KElTP23ha/Ja3WMtg+iha1tSTuj/Ry+bKbes9uv1x HXFUUEFxnFq6baYr9Hpy8R7EmUL+kFX1sAbs6X7ZRLEEg9kQFA3hWQku9k2ediZB bae1ayjXYH0lFN+Bw6VWV82iT7xSEH0= -----END CERTIFICATE-----Generated at Sat Dec 20 09:47:06 2025 by rpki-client