This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa File: bf541b3f-d38b-3716-affa-7307e218a63b.roa (raw, json) Hash identifier: 8wtITTFGzM6QEYVaZc0ChAJqbRTZFP8xbHDYH7b09j4= Subject key identifier: A5:93:A7:00:20:44:54:C8:6F:2D:58:05:3C:C8:21:19:3C:47:15:FD Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BF77B3C1D5AC865D2DA288900 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa Signing time: Mon 24 Nov 2025 14:00:37 +0000 ROA not before: Mon 24 Nov 2025 14:00:37 +0000 ROA not after: Sun 22 Feb 2026 14:00:37 +0000 asID: 25645 IP address blocks: 165.254.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:7b:3c:1d:5a:c8:65:d2:da:28:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 24 14:00:37 2025 GMT Not After : Feb 22 14:00:37 2026 GMT Subject: CN=1f9e1487-12aa-4a78-beb6-fcbe4a0f6a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:49:4e:f8:e7:6c:8a:5d:70:af:26:96:37:33: 93:9c:87:ab:c6:77:5f:16:46:74:f3:a0:37:1b:77: 76:cb:ed:86:88:c9:03:12:7e:4c:0c:30:71:ea:23: a5:bd:5f:12:ee:e6:56:b5:53:1e:0c:77:c5:9e:55: 32:9a:07:ea:1c:48:2b:15:13:21:78:0d:c9:5c:5e: 9b:58:78:b1:14:19:5e:94:78:fa:d8:63:af:36:21: e1:60:c1:7e:90:9b:1a:f0:97:56:e2:bf:f5:48:0c: 93:d9:ac:8d:0a:b8:50:70:27:de:fb:ec:8e:fa:ff: 13:29:ef:2d:4b:76:c8:1c:72:ad:40:ab:bd:40:93: dd:9b:2e:a5:8c:bd:0e:95:7f:12:b5:6c:0d:59:1c: 00:21:43:1a:da:ca:1a:a5:00:05:4e:57:ae:1f:b0: ae:ab:45:ff:d5:dd:85:8b:b5:ec:df:94:84:42:bb: 66:14:ab:cb:0c:96:85:24:d3:c6:b9:5f:67:fe:7f: d9:9c:a4:ea:b8:6b:d9:4a:46:8b:7c:7b:9e:56:df: 2d:8c:83:73:8d:59:e2:4a:33:a4:7e:21:5f:98:92: bf:b2:07:54:a6:e1:91:92:20:46:2b:32:2b:dd:ff: f1:b7:c4:06:df:f5:a8:5b:fb:7c:47:9b:88:34:af: 2f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:93:A7:00:20:44:54:C8:6F:2D:58:05:3C:C8:21:19:3C:47:15:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bf541b3f-d38b-3716-affa-7307e218a63b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:26:e8:41:35:73:df:57:23:02:6e:c6:ec:49:94:eb:51:08: b2:8c:04:59:cf:f4:70:a9:4d:05:70:1d:a4:a3:44:6c:8b:db: dc:ab:ae:d7:5d:34:22:43:96:a7:49:7c:9b:a0:5d:d0:de:56: b1:88:43:63:76:9c:7f:f1:70:0d:8c:94:df:a4:1f:d2:86:59: ea:f9:02:10:92:84:f6:d2:ff:f8:01:a4:1b:c3:dc:af:2a:ab: 71:36:63:0a:23:a1:9d:c4:d3:f5:fe:62:be:46:88:0a:b2:e0: 02:87:d1:32:c0:49:ce:8e:1d:0a:2c:a3:59:a5:d5:e7:d6:2c: 57:24:b2:7d:73:83:3a:85:7a:3e:8a:df:0f:61:df:30:e3:28: 00:99:12:33:37:97:9d:e9:31:a2:38:44:d3:e1:6c:e9:58:f3: f8:09:f2:61:18:ed:1b:c6:17:37:3d:9b:36:5f:0c:97:22:8e: 68:5d:73:80:76:9a:a6:23:4b:4c:2f:9b:aa:44:1e:88:17:c8: 70:0e:d6:2b:a4:a8:c0:13:c3:dd:d5:76:5d:ed:05:5f:83:4e: 08:26:fd:e2:66:7a:f4:80:78:83:9c:d5:fc:a6:59:9b:a2:7e: 3f:7a:ac:0d:ee:f0:9b:f3:9d:69:7f:ed:d6:8c:dd:9c:66:0e: 6b:e3:ac:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv3ezwdWshl0tooiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEyNDE0MDAzN1oXDTI2MDIyMjE0MDAzN1owLzEtMCsGA1UEAxMk MWY5ZTE0ODctMTJhYS00YTc4LWJlYjYtZmNiZTRhMGY2YTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhklO+Odsil1wryaWNzOTnIerxndfFkZ086A3 G3d2y+2GiMkDEn5MDDBx6iOlvV8S7uZWtVMeDHfFnlUymgfqHEgrFRMheA3JXF6b WHixFBlelHj62GOvNiHhYMF+kJsa8JdW4r/1SAyT2ayNCrhQcCfe++yO+v8TKe8t S3bIHHKtQKu9QJPdmy6ljL0OlX8StWwNWRwAIUMa2soapQAFTleuH7Cuq0X/1d2F i7Xs35SEQrtmFKvLDJaFJNPGuV9n/n/ZnKTquGvZSkaLfHueVt8tjINzjVniSjOk fiFfmJK/sgdUpuGRkiBGKzIr3f/xt8QG3/WoW/t8R5uINK8vwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWTpwAgRFTIby1YBTzIIRk8RxX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmY1NDFiM2YtZDM4Yi0z NzE2LWFmZmEtNzMwN2UyMThhNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMm6EE1c99XIwJuxuxJlOtRCLKMBFnP9HCpTQVwHaSjRGyL29yrrtdd NCJDlqdJfJugXdDeVrGIQ2N2nH/xcA2MlN+kH9KGWer5AhCShPbS//gBpBvD3K8q q3E2YwojoZ3E0/X+Yr5GiAqy4AKH0TLASc6OHQoso1ml1efWLFcksn1zgzqFej6K 3w9h3zDjKACZEjM3l53pMaI4RNPhbOlY8/gJ8mEY7RvGFzc9mzZfDJcijmhdc4B2 mqYjS0wvm6pEHogXyHAO1iukqMATw93Vdl3tBV+DTggm/eJmevSAeIOc1fymWZui fj96rA3u8JvznWl/7daM3ZxmDmvjrOI= -----END CERTIFICATE-----Generated at Sat Dec 6 06:46:25 2025 by rpki-client