This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bbf87397-c5df-35c6-aef7-a3230538a0e5.roa File: bbf87397-c5df-35c6-aef7-a3230538a0e5.roa (raw, json) Hash identifier: R3GHVHOpdOMfvdsDEicd/r2NEh3+QLOSJJ6xGZTEIkE= Subject key identifier: BD:F1:BA:41:4B:EA:CC:1F:B6:C6:96:1B:7C:39:57:BA:DC:43:56:6D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BF77B38F265B29A9B5F617580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bbf87397-c5df-35c6-aef7-a3230538a0e5.roa Signing time: Mon 24 Nov 2025 14:00:37 +0000 ROA not before: Mon 24 Nov 2025 14:00:37 +0000 ROA not after: Sun 22 Feb 2026 14:00:37 +0000 asID: 3939 IP address blocks: 140.174.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:7b:38:f2:65:b2:9a:9b:5f:61:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 24 14:00:37 2025 GMT Not After : Feb 22 14:00:37 2026 GMT Subject: CN=94344f72-fa9b-41d0-ad5d-7e5958488a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:15:2b:db:55:88:b5:c1:a6:79:80:76:0e: e8:96:59:86:83:82:a1:08:32:db:83:89:2a:d1:0b: 95:d9:fa:3b:af:6c:8f:37:f2:dd:70:33:90:95:67: 48:02:4f:2e:4f:12:99:60:91:91:ba:59:60:95:d4: 0c:fa:0b:54:e0:4a:8c:e2:bf:35:e8:8f:90:6f:e0: 21:84:f5:ce:65:01:f5:f7:5a:d5:a4:e7:2e:07:48: c8:7b:14:6c:06:4c:11:13:c4:fe:57:a4:1a:91:c6: 01:04:fa:dd:9f:cd:68:63:0d:79:b4:cb:2f:44:88: 62:84:07:3f:a1:0b:7e:a2:ee:5a:62:ba:ac:36:19: db:64:8a:a0:d4:96:39:a9:1d:f9:9a:27:53:5e:be: 20:34:34:a9:70:06:17:79:32:f2:14:c5:70:43:77: 6e:3c:84:b8:33:b3:a2:3c:cb:8b:fa:56:70:db:b3: 69:58:eb:75:27:02:f7:89:5c:29:96:8a:ac:af:44: 5c:41:23:ec:79:fe:e1:0b:eb:9e:f2:9e:8a:8d:9d: ca:91:e2:18:87:1f:2e:67:49:c0:4f:00:c9:0e:ca: fa:f2:0b:45:c7:9d:46:ab:74:ae:c6:16:16:5a:c3: 2a:1b:12:ea:13:34:d4:94:ac:1f:f8:ce:fa:3e:ff: de:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F1:BA:41:4B:EA:CC:1F:B6:C6:96:1B:7C:39:57:BA:DC:43:56:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bbf87397-c5df-35c6-aef7-a3230538a0e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:f2:0c:1d:43:7e:fe:7c:3d:0b:d2:03:93:5b:15:f8:2c:c6: 38:15:70:6c:fa:b0:c6:79:7b:38:98:32:96:ce:83:85:98:2b: 55:61:e2:8e:d8:e3:82:f8:ed:7a:3c:00:bc:09:45:ee:71:f6: b9:26:2d:f3:2e:5e:21:21:39:65:45:ad:dc:2b:87:30:9c:77: 46:d6:2a:aa:e9:fa:e4:48:ba:a4:47:04:9c:d6:06:98:fa:e5: 68:1b:d9:fc:4c:a3:aa:2d:38:64:98:bd:dd:e4:9f:fc:cb:12: bc:df:bf:fa:75:0e:de:1c:7e:0f:2f:83:f6:c2:83:df:95:6f: 9b:3e:35:29:15:1e:e0:85:6d:80:3f:43:2c:7c:7a:56:ff:c2: 32:ec:e7:1e:a6:c3:d7:2b:66:1f:a9:36:e9:14:8f:65:d8:ad: 02:9e:c1:38:39:3a:ed:17:37:f2:29:b9:d3:a5:9b:b7:73:7e: 99:18:ce:33:7f:c4:75:28:c9:a0:d7:24:09:c1:15:d1:1b:aa: 3c:20:a6:44:e5:a8:c8:98:2b:02:20:0f:9f:26:e4:5d:2c:5e: fe:83:4c:8f:5d:ed:78:be:ba:dc:ac:38:df:e0:49:e4:66:9a: fd:ac:02:25:72:40:6d:52:37:c2:e7:a3:9d:39:cc:d5:25:ab: ee:50:e9:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv3ezjyZbKam19hdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEyNDE0MDAzN1oXDTI2MDIyMjE0MDAzN1owLzEtMCsGA1UEAxMk OTQzNDRmNzItZmE5Yi00MWQwLWFkNWQtN2U1OTU4NDg4YTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLAVK9tViLXBpnmAdg7ollmGg4KhCDLbg4kq 0QuV2fo7r2yPN/LdcDOQlWdIAk8uTxKZYJGRullgldQM+gtU4EqM4r816I+Qb+Ah hPXOZQH191rVpOcuB0jIexRsBkwRE8T+V6QakcYBBPrdn81oYw15tMsvRIhihAc/ oQt+ou5aYrqsNhnbZIqg1JY5qR35midTXr4gNDSpcAYXeTLyFMVwQ3duPIS4M7Oi PMuL+lZw27NpWOt1JwL3iVwploqsr0RcQSPsef7hC+ue8p6KjZ3KkeIYhx8uZ0nA TwDJDsr68gtFx51Gq3SuxhYWWsMqGxLqEzTUlKwf+M76Pv/eMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3xukFL6swftsaWG3w5V7rcQ1ZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmJmODczOTctYzVkZi0z NWM2LWFlZjctYTMyMzA1MzhhMGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjK4iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvyDB1Dfv58PQvSA5NbFfgsxjgVcGz6sMZ5eziYMpbOg4WYK1Vh4o7Y 44L47Xo8ALwJRe5x9rkmLfMuXiEhOWVFrdwrhzCcd0bWKqrp+uRIuqRHBJzWBpj6 5Wgb2fxMo6otOGSYvd3kn/zLErzfv/p1Dt4cfg8vg/bCg9+Vb5s+NSkVHuCFbYA/ Qyx8elb/wjLs5x6mw9crZh+pNukUj2XYrQKewTg5Ou0XN/IpudOlm7dzfpkYzjN/ xHUoyaDXJAnBFdEbqjwgpkTlqMiYKwIgD58m5F0sXv6DTI9d7Xi+utysON/gSeRm mv2sAiVyQG1SN8Lno505zNUlq+5Q6cQ= -----END CERTIFICATE-----Generated at Sat Dec 6 06:43:07 2025 by rpki-client