This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa File: 29ee82f2-26f5-3427-b2a3-e130b3600811.roa (raw, json) Hash identifier: Rh6CYsA7X7SZh47BdDBlPO0yUZKDM37JISfILOyLLA4= Subject key identifier: D4:09:C9:8F:BE:07:04:B3:6A:B6:C3:E6:02:21:CC:EA:E5:3E:89:A6 Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a Certificate serial: 010D0C9F4328584C391648576D7ABAE7C87FFF00 Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 14445 IP address blocks: 104.249.137.0/24 maxlen: 24 104.249.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:48:57:6d:7a:ba:e7:c8:7f:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=08599a24-57f2-4fd4-8c73-b00d4680f1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:43:79:a0:48:80:98:e3:23:a8:9a:ce:20:6b: de:73:08:70:8e:25:d5:3d:aa:20:89:85:2f:c0:bc: 7e:84:11:f6:61:46:14:aa:3a:41:d3:5c:13:d5:ee: e1:e2:66:6a:06:dc:e7:70:d3:69:22:89:8f:ac:fe: d6:01:b8:66:18:a7:36:0f:fd:a1:57:97:54:3c:53: da:a2:a2:6b:97:00:a1:f4:7d:e5:47:90:15:e1:26: 1a:31:a7:02:bb:95:88:e4:ab:8b:c0:30:48:65:88: 19:a2:49:00:de:3f:ec:b2:bc:05:f7:62:dc:ae:3e: 0b:ce:37:db:5f:aa:0c:10:1d:3d:ee:c9:f9:ad:43: 6b:f6:99:52:70:43:18:1c:51:03:42:41:87:70:f7: 2d:c2:95:62:44:7e:05:50:20:1b:f2:1c:2a:4e:0f: 08:8d:9c:86:64:ea:0a:a2:0e:93:b6:63:c2:ac:03: d9:3a:33:96:6b:0e:67:4c:95:33:99:03:47:3a:11: 39:c8:34:73:64:a5:54:72:ff:67:55:8f:2f:d8:7a: 6b:c1:47:82:be:8c:0b:05:08:9e:22:b3:53:b3:e9: e4:0f:fe:17:9c:04:34:07:58:6e:d3:b3:09:32:0c: a6:32:db:7d:20:0d:ac:16:f6:56:58:36:fa:68:e1: 80:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:09:C9:8F:BE:07:04:B3:6A:B6:C3:E6:02:21:CC:EA:E5:3E:89:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/29ee82f2-26f5-3427-b2a3-e130b3600811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl X509v3 Authority Key Identifier: keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer sbgp-ipAddrBlock: critical IPv4: 104.249.137.0-104.249.138.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:66:98:e9:89:3e:13:ec:11:96:c1:7a:cc:a8:dd:bb:9a:1a: e7:da:27:85:68:b5:56:e1:be:f1:c9:f6:f7:79:c2:ef:ad:88: 79:86:ae:93:79:e5:42:e6:a9:e9:14:78:94:11:6b:8a:bc:29: eb:17:c7:a7:15:0c:59:98:3d:96:38:87:0c:91:c3:9e:f5:67: 7b:86:d5:ab:d6:a6:e5:9e:41:d8:3b:14:31:95:79:c2:b7:68: 60:6a:5b:9d:07:7c:a3:3b:76:34:1a:e1:8d:74:49:2d:de:ce: c6:67:91:30:47:cc:95:e7:7e:c8:4d:4c:39:b9:b2:55:eb:99: c6:4b:ed:72:12:fa:f4:3a:f4:5f:aa:c0:48:29:17:1d:7a:e2: 9b:9f:2c:a8:9c:81:2a:c3:8c:d4:30:af:42:b4:99:e2:1e:97: 51:20:5b:05:71:3d:3d:37:f7:be:68:66:a0:37:76:57:7c:9f: 2b:4c:4a:37:50:2a:83:e3:a2:2c:e6:8c:08:09:cd:cc:62:96: 36:cb:86:52:a0:86:c4:3e:9f:90:e4:ee:18:71:31:6c:cf:9f: df:cc:5e:fb:e5:4d:70:4a:c4:55:c1:29:6f:c8:23:1d:fe:9b: 7e:88:42:49:da:69:52:a6:e7:e4:66:a3:4a:c3:23:30:52:a4: 42:94:36:f4 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEw5FkhXbXq658h//wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzMzg2MGQtYWI1ZC00NWY0LWExMWUtZjMxM2I1ODQ3 MTBhMB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk MDg1OTlhMjQtNTdmMi00ZmQ0LThjNzMtYjAwZDQ2ODBmMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEN5oEiAmOMjqJrOIGvecwhwjiXVPaogiYUv wLx+hBH2YUYUqjpB01wT1e7h4mZqBtzncNNpIomPrP7WAbhmGKc2D/2hV5dUPFPa oqJrlwCh9H3lR5AV4SYaMacCu5WI5KuLwDBIZYgZokkA3j/ssrwF92Lcrj4Lzjfb X6oMEB097sn5rUNr9plScEMYHFEDQkGHcPctwpViRH4FUCAb8hwqTg8IjZyGZOoK og6TtmPCrAPZOjOWaw5nTJUzmQNHOhE5yDRzZKVUcv9nVY8v2HprwUeCvowLBQie IrNTs+nkD/4XnAQ0B1hu07MJMgymMtt9IA2sFvZWWDb6aOGAUQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFNQJyY++BwSzarbD5gIhzOrlPommMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMz ODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEzYjU4NDcxMGEvMjllZTgyZjItMjZmNS0z NDI3LWIyYTMtZTEzMGIzNjAwODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjQzMzg2MGQtYWI1ZC00NWY0LWEx MWUtZjMxM2I1ODQ3MTBhL2I0MzM4NjBkLWFiNWQtNDVmNC1hMTFlLWYzMTNiNTg0 NzEwYS5jcmwwHwYDVR0jBBgwFoAUz9UTZdOGkQNiuVzEe6KxGXpl5VUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMzODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEz YjU4NDcxMGEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABo+YkD BABo+YowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAn2aY6Yk+E+wRlsF6zKjdu5oa59onhWi1VuG+8cn293nC 762IeYauk3nlQuap6RR4lBFrirwp6xfHpxUMWZg9ljiHDJHDnvVne4bVq9am5Z5B 2DsUMZV5wrdoYGpbnQd8ozt2NBrhjXRJLd7OxmeRMEfMled+yE1MObmyVeuZxkvt chL69Dr0X6rASCkXHXrim58sqJyBKsOM1DCvQrSZ4h6XUSBbBXE9PTf3vmhmoDd2 V3yfK0xKN1Aqg+OiLOaMCAnNzGKWNsuGUqCGxD6fkOTuGHExbM+f38xe++VNcErE VcEpb8gjHf6bfohCSdppUqbn5GajSsMjMFKkQpQ29A== -----END CERTIFICATE-----Generated at Sat Dec 20 09:05:45 2025 by rpki-client