This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa File: be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa (raw, json) Hash identifier: IIyx5CrdrnQOGr/ULfCq4fecvKBPBKwX9C3Tta4i1Dk= Subject key identifier: F6:5D:2F:EB:F6:9B:0F:2A:45:3B:D8:39:55:65:03:7F:10:0F:36:D8 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584C40110FC1FB0F7825A3202780 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 40342 IP address blocks: 104.200.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:0f:c1:fb:0f:78:25:a3:20:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=afd8e0b2-f143-4dc7-bd74-7f8fe0ae0bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:66:ff:67:ec:59:8f:0c:98:f9:e6:92:7a: 4b:d5:3d:d3:bf:cc:ad:94:17:48:c2:ed:7f:2a:d0: 0d:cc:68:d9:e8:75:57:a7:7a:a7:35:ad:78:e4:a5: 19:2e:9f:a6:5a:2f:d4:1e:5f:9d:34:d8:dd:37:83: cf:0d:4f:d9:7f:33:29:0c:e8:a9:93:c3:27:5b:07: b2:59:b3:70:76:3b:57:9b:d7:c7:b1:d0:8c:81:39: fe:3e:50:71:66:be:4c:80:e9:69:1a:ac:0b:3c:13: 49:ec:8e:04:f4:ff:a3:5d:de:3c:02:69:f8:fa:36: a1:bb:a1:26:b0:c3:fb:7f:63:32:4d:51:c3:85:4b: 2e:d7:4d:72:9d:00:c5:d8:b3:06:69:8f:65:51:0a: 79:87:b0:94:44:f3:07:ee:ff:ee:01:dd:05:08:e5: 19:ff:2b:42:7d:fa:72:a1:16:07:6b:c9:52:e4:4e: 41:14:46:89:5d:12:dc:b4:35:07:ca:2d:12:c7:d0: a2:50:17:d6:5a:d0:98:6e:f7:de:53:9e:ae:2d:a3: 3c:ad:e3:35:a6:10:4a:2f:71:9e:1f:22:a9:f3:70: ec:0b:7c:7a:63:ea:96:f8:5d:e0:89:3e:64:77:68: f4:4e:71:98:54:17:1c:20:75:98:6f:88:e9:a7:4c: 2e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5D:2F:EB:F6:9B:0F:2A:45:3B:D8:39:55:65:03:7F:10:0F:36:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/be18e591-d26b-3f5d-b3a9-bd62b0697f15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 104.200.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ce:06:30:5a:51:12:67:07:cf:98:fb:8d:19:a0:ea:47:33: fd:71:c0:26:ae:93:fc:5e:21:a1:23:9c:66:74:f2:38:2c:8f: 34:1d:4e:31:51:33:52:6b:55:65:08:0a:a1:68:9f:a3:93:c9: 22:93:59:42:10:f5:93:f9:ff:70:e7:df:cd:3b:cd:ed:70:f1: 41:4f:21:78:2c:49:53:c5:94:5d:4e:c8:0c:15:9f:d7:22:93: 6e:13:a6:db:2c:4f:30:3c:84:3e:84:ad:35:87:31:10:27:80: f5:10:3c:74:d1:c0:2d:62:e7:bc:71:59:91:f0:c8:b9:41:cf: 72:4f:4e:d3:f2:07:a2:21:94:26:b2:43:71:0b:da:ec:ee:c4: a4:67:f6:ba:b3:d5:45:4a:de:b6:8c:e6:c3:c2:77:44:0c:93: 7a:43:b0:35:f6:8e:84:2a:e5:5c:5d:e4:2a:ec:6e:06:ac:48: 89:f0:fd:e5:22:2a:d5:81:be:3c:7b:ed:3a:fb:68:a0:a7:2f: 69:3f:60:2a:bc:37:20:60:97:91:69:78:cc:77:f7:3d:f8:41: fc:03:08:15:b3:60:9d:ce:75:95:b1:f2:8e:4a:c8:bd:f3:31: e9:03:4a:f6:00:57:9d:75:31:d5:92:e1:57:7f:e2:50:23:66: 37:c6:9a:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEQ/B+w94JaMgJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk YWZkOGUwYjItZjE0My00ZGM3LWJkNzQtN2Y4ZmUwYWUwYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFJm/2fsWY8MmPnmknpL1T3Tv8ytlBdIwu1/ KtANzGjZ6HVXp3qnNa145KUZLp+mWi/UHl+dNNjdN4PPDU/ZfzMpDOipk8MnWwey WbNwdjtXm9fHsdCMgTn+PlBxZr5MgOlpGqwLPBNJ7I4E9P+jXd48Amn4+jahu6Em sMP7f2MyTVHDhUsu101ynQDF2LMGaY9lUQp5h7CURPMH7v/uAd0FCOUZ/ytCffpy oRYHa8lS5E5BFEaJXRLctDUHyi0Sx9CiUBfWWtCYbvfeU56uLaM8reM1phBKL3Ge HyKp83DsC3x6Y+qW+F3giT5kd2j0TnGYVBccIHWYb4jpp0wu1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZdL+v2mw8qRTvYOVVlA38QDzbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvYmUxOGU1OTEtZDI2Yi0z ZjVkLWIzYTktYmQ2MmIwNjk3ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbOBjBaURJnB8+Y+40ZoOpHM/1xwCauk/xeIaEjnGZ08jgsjzQdTjFR M1JrVWUICqFon6OTySKTWUIQ9ZP5/3Dn3807ze1w8UFPIXgsSVPFlF1OyAwVn9ci k24TptssTzA8hD6ErTWHMRAngPUQPHTRwC1i57xxWZHwyLlBz3JPTtPyB6IhlCay Q3EL2uzuxKRn9rqz1UVK3raM5sPCd0QMk3pDsDX2joQq5Vxd5CrsbgasSInw/eUi KtWBvjx77Tr7aKCnL2k/YCq8NyBgl5FpeMx39z34QfwDCBWzYJ3OdZWx8o5KyL3z MekDSvYAV511MdWS4Vd/4lAjZjfGms4= -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:50 2025 by rpki-client