This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa File: bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa (raw, json) Hash identifier: VRhX+8c6h5ul7e1t1CIx9OOeCJmGC/4Amp6cwMNuz6k= Subject key identifier: 30:FC:57:56:A2:D9:39:2E:64:A7:94:FE:67:2C:B0:50:51:94:2E:56 Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584BF4B0AAAF359D90491BE79220 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa Signing time: Sun 23 Nov 2025 14:00:38 +0000 ROA not before: Sun 23 Nov 2025 14:00:38 +0000 ROA not after: Sat 21 Feb 2026 14:00:38 +0000 asID: 23470 IP address blocks: 172.96.172.0/24 maxlen: 24 172.96.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f4:b0:aa:af:35:9d:90:49:1b:e7:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Nov 23 14:00:38 2025 GMT Not After : Feb 21 14:00:38 2026 GMT Subject: CN=18ad492f-4ac5-40b6-91d6-af98622479a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:ae:e8:08:d5:33:18:f3:08:c8:b2:ff:24: b2:b9:46:ae:c4:6d:b2:b8:d6:5b:73:5e:44:91:a5: 02:c6:72:0f:e5:36:7f:83:dd:27:4a:19:2d:d5:a8: fc:26:28:96:cb:dc:db:ab:11:92:8e:71:24:27:e0: 65:36:67:63:26:e5:f7:bc:f6:d5:4f:8d:0c:1a:e6: 50:5d:64:68:a8:ba:91:64:67:9d:bc:de:7e:f7:62: 65:49:5f:ad:e5:91:13:77:8d:f9:c7:d8:db:73:d0: 17:ff:97:7a:4e:24:e3:ad:3b:87:9c:74:a1:f5:77: 10:28:0d:09:b6:df:2d:84:ae:85:22:38:f3:ad:df: ae:4d:85:01:3d:ef:ac:98:42:4f:ec:8c:06:23:d9: 62:9b:e5:23:35:35:33:7b:e4:6a:74:fc:2e:64:95: 35:c7:76:57:9e:b1:fb:aa:61:b1:9b:91:a5:aa:45: 94:e1:a7:b2:c3:88:30:d0:03:70:72:70:fc:c2:1f: 76:19:6c:01:6e:b6:63:81:46:93:7a:14:6f:b6:1a: 84:c1:fc:25:e4:c0:d6:1a:e4:99:ef:59:05:63:55: dd:5f:08:61:da:17:ad:cb:b9:7a:98:a1:9b:63:0c: 38:ca:d7:2f:17:f7:49:87:cd:cf:f2:80:b4:81:8d: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FC:57:56:A2:D9:39:2E:64:A7:94:FE:67:2C:B0:50:51:94:2E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 172.96.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a2:12:86:c0:c3:17:04:4b:f9:9f:a2:2a:5a:ad:3b:cc:ee: 64:2f:45:34:b8:ee:ff:07:b7:23:fc:29:45:84:b8:50:d6:e2: bc:d1:80:ab:7b:bf:c9:9d:44:f5:01:cb:41:17:94:95:44:79: b4:21:85:53:0a:98:4b:87:1e:4e:38:09:79:1f:1d:5a:18:d9: 82:69:87:c2:23:c7:fc:1b:57:56:c3:ba:30:f1:90:e5:ce:e8: da:6c:09:7e:3b:a7:74:e2:3f:1c:e3:47:84:7c:27:c4:2d:93: a7:b5:b3:54:95:5c:ac:32:a4:d9:56:f7:53:7d:a1:46:59:cd: a2:70:31:be:b1:bb:ec:36:b4:43:9c:88:51:2e:13:02:0c:8a: 88:f4:57:cc:e0:70:8a:4d:0e:52:96:97:d3:bf:6c:11:c9:f3: 6b:24:58:86:43:43:9f:72:93:c5:cc:32:b4:e3:1a:98:23:ee: 8d:4b:38:86:08:2e:99:a8:f4:93:82:11:98:f7:57:87:f1:0a: ea:c9:21:17:ca:83:ca:ee:65:0c:43:c5:3c:d3:f9:24:4b:ae: 16:53:21:46:44:1e:4f:85:7e:84:29:97:f8:40:dd:93:d9:78: 9e:f4:98:8a:4f:23:e9:e5:aa:2f:f3:eb:51:2d:af:8d:ce:41: 3d:9f:06:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv0sKqvNZ2QSRvnkiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk MThhZDQ5MmYtNGFjNS00MGI2LTkxZDYtYWY5ODYyMjQ3OWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4mu6AjVMxjzCMiy/ySyuUauxG2yuNZbc15E kaUCxnIP5TZ/g90nShkt1aj8JiiWy9zbqxGSjnEkJ+BlNmdjJuX3vPbVT40MGuZQ XWRoqLqRZGedvN5+92JlSV+t5ZETd435x9jbc9AX/5d6TiTjrTuHnHSh9XcQKA0J tt8thK6FIjjzrd+uTYUBPe+smEJP7IwGI9lim+UjNTUze+RqdPwuZJU1x3ZXnrH7 qmGxm5GlqkWU4aeyw4gw0ANwcnD8wh92GWwBbrZjgUaTehRvthqEwfwl5MDWGuSZ 71kFY1XdXwhh2hety7l6mKGbYww4ytcvF/dJh83P8oC0gY3t9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD8V1ai2TkuZKeU/mcssFBRlC5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvYmY3ZTZmMGQtYjY4OS0z ZGM5LTlmMzYtMWZjNjljYmYzMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+iEobAwxcES/mfoiparTvM7mQvRTS47v8HtyP8KUWEuFDW4rzRgKt7 v8mdRPUBy0EXlJVEebQhhVMKmEuHHk44CXkfHVoY2YJph8Ijx/wbV1bDujDxkOXO 6NpsCX47p3TiPxzjR4R8J8Qtk6e1s1SVXKwypNlW91N9oUZZzaJwMb6xu+w2tEOc iFEuEwIMioj0V8zgcIpNDlKWl9O/bBHJ82skWIZDQ59yk8XMMrTjGpgj7o1LOIYI Lpmo9JOCEZj3V4fxCurJIRfKg8ruZQxDxTzT+SRLrhZTIUZEHk+FfoQpl/hA3ZPZ eJ70mIpPI+nlqi/z61Etr43OQT2fBuQ= -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:29 2025 by rpki-client