This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6a77ca73-dc19-3013-b245-2c1af94b6002.roa
File: 6a77ca73-dc19-3013-b245-2c1af94b6002.roa (raw, json)
Hash identifier: yfzEG58Gqja7ice3YADH/mtlzhMPIs23ddVo4eHEB4o=
Subject key identifier: 85:B7:1E:01:27:28:C5:05:BF:01:99:D3:55:6C:7A:D7:75:C5:F9:D0
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F4328584BDCF5D0160F7F622082544280
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6a77ca73-dc19-3013-b245-2c1af94b6002.roa
Signing time: Sat 15 Nov 2025 02:00:32 +0000
ROA not before: Sat 15 Nov 2025 02:00:32 +0000
ROA not after: Fri 13 Feb 2026 02:00:32 +0000
asID: 4213
IP address blocks: 173.214.20.0/22 maxlen: 24
173.214.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:dc:f5:d0:16:0f:7f:62:20:82:54:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Nov 15 02:00:32 2025 GMT
Not After : Feb 13 02:00:32 2026 GMT
Subject: CN=642caa05-e419-42b7-bd5b-fd6bf775d2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:72:c1:55:67:5f:85:23:8d:a1:68:bb:e0:
c9:52:c4:90:7a:3e:ee:5d:05:d0:f6:59:a2:9b:06:
2c:5c:79:dd:1b:79:71:34:cb:99:82:fa:c3:15:b6:
b7:44:44:b1:c9:5c:4a:54:63:50:8a:81:f3:a1:2f:
94:ed:78:41:79:af:c6:c1:98:b2:43:60:28:88:51:
d4:fe:bf:5b:69:8b:5e:b0:a7:39:3a:21:30:a6:8b:
ed:3b:44:1e:96:59:e0:36:1d:bc:52:27:00:1a:ff:
ed:2a:3e:4f:fc:b9:4e:f2:2d:76:d2:1e:94:f0:7d:
87:63:84:44:80:96:1b:3d:cd:34:cb:54:8a:ca:ae:
a0:55:da:34:c0:32:96:9e:eb:6b:d1:a6:51:b4:4c:
33:94:d3:6c:a6:b1:b6:40:f6:1b:ab:3a:33:2a:3f:
8f:80:f0:11:ca:f4:1f:24:76:15:45:31:8e:32:c7:
19:91:da:ed:87:bd:0e:ce:d6:15:07:04:30:37:6c:
2e:fa:48:a5:fa:67:43:c9:bf:8a:64:13:b2:a5:da:
12:15:2f:81:d3:a6:87:81:08:bc:d1:72:f8:89:82:
de:05:33:fd:b1:42:5a:ca:92:79:c0:0b:58:03:1d:
0e:fe:d7:81:3e:29:fd:5a:a5:49:db:90:00:12:fb:
3f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B7:1E:01:27:28:C5:05:BF:01:99:D3:55:6C:7A:D7:75:C5:F9:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/6a77ca73-dc19-3013-b245-2c1af94b6002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv4:
173.214.20.0-173.214.27.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:c0:9d:f5:9c:7e:c1:f1:f8:42:d0:6c:fc:d6:03:5d:65:25:
70:34:5d:6f:f6:01:40:12:06:bd:9c:d4:25:b4:95:c7:1a:3f:
96:ec:8b:6a:53:8c:05:89:95:18:7d:21:fe:18:49:87:63:53:
8a:d2:b2:c5:3e:07:b3:a2:d3:58:76:f2:88:df:b8:c9:8e:95:
c1:78:fa:5f:6f:18:e3:48:c5:a1:85:52:0d:9c:67:32:77:c6:
c2:63:d1:d3:97:02:df:78:cf:28:13:d8:ec:ec:2c:05:9d:73:
f3:e4:40:a1:f8:8b:23:cc:b6:a7:f1:28:51:cd:dc:5c:ae:12:
52:e7:3d:40:48:f2:a1:ee:f2:8a:bc:10:c2:de:d3:05:93:97:
c6:02:83:3d:d3:6e:20:c4:fc:55:3a:78:43:37:ac:ab:86:14:
a2:d3:5e:61:6f:f7:0f:c1:84:a0:1b:a0:f5:be:1a:b3:08:4c:
e2:0e:6f:71:fc:97:ef:3c:50:e5:56:53:0e:18:9f:8e:9a:71:
77:b5:3c:46:60:95:50:b0:ce:01:81:4d:05:94:bd:80:4c:75:
5e:b9:2d:b7:e9:b4:56:d2:ac:79:e3:83:73:74:3b:f0:9a:69:
9c:69:3a:e0:14:55:c9:83:4b:30:a9:bc:7e:cd:a9:bd:87:7f:
ab:f0:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:10:54 2025 by rpki-client