This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa File: d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa (raw, json) Hash identifier: 0C+HeJrYLBv9ohrumwNhLC/30ICw6XulkSugZEPee9Q= Subject key identifier: 53:D5:68:B0:3F:3F:15:4B:01:81:3C:DF:5E:D4:AD:0E:27:61:B4:9D Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584BDCF5D0840FAFCAE31542F668 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 35908 IP address blocks: 209.11.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:d0:84:0f:af:ca:e3:15:42:f6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=59a9ed53-a211-4ff8-bd04-43d4c6a4db38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:47:fb:0a:89:9b:fe:50:9c:b0:68:d4:60: 5c:09:02:88:c6:af:77:45:2e:61:09:fe:bf:8a:83: 04:07:40:af:ed:07:d6:ca:99:b0:fc:4d:ec:45:41: 89:99:18:20:ae:a8:56:1c:5e:7b:19:d5:83:de:15: 10:7c:d6:f5:63:23:e9:89:e7:48:8f:2b:9c:80:df: 41:4e:d0:27:51:ba:18:c4:63:75:f3:9c:7f:46:8a: 32:78:e8:ad:a5:0f:f2:14:88:b2:7e:73:e9:39:11: 01:30:fa:41:29:8a:d0:56:b5:85:90:94:1a:e7:5b: d8:08:af:18:4c:fd:91:ef:be:95:1d:5f:38:af:45: 67:71:6b:1e:a1:c2:21:3f:50:d3:aa:ec:6a:ca:51: 3f:d2:cc:5b:50:d0:b5:21:aa:38:36:44:92:8b:c1: de:73:35:04:a3:1a:b2:b4:d2:6d:1f:cd:2f:cd:9d: 6c:02:b2:5e:3a:4a:89:fe:6f:51:07:c8:3f:cb:49: 62:3c:63:9d:ea:1a:47:35:e5:52:5b:fc:be:75:c4: dc:66:66:d2:e8:f7:f1:8c:2e:dc:d7:e3:c4:f9:08: 36:db:79:a0:2b:b9:41:b1:a6:84:69:cf:12:83:46: cd:8f:d0:8d:f2:74:85:11:15:19:6a:f1:a5:1b:aa: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D5:68:B0:3F:3F:15:4B:01:81:3C:DF:5E:D4:AD:0E:27:61:B4:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 209.11.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:67:6f:86:64:f3:ca:a8:0a:b3:19:f2:8c:37:10:0e:37:0f: 40:18:05:bf:de:1a:47:82:17:f6:72:f1:4f:2e:df:bc:ae:47: cf:a5:57:0f:76:6f:e8:d6:db:97:37:1c:6f:54:a8:76:10:bf: 5b:ef:a8:c6:17:0d:0e:ae:b5:36:db:99:02:bb:f8:93:e3:a7: f5:5c:f1:c7:fb:3c:f1:92:82:97:88:4f:7a:f0:ac:c0:f1:5e: 85:86:26:39:9e:60:f7:fb:fe:8c:cd:f9:e8:7c:bc:5d:2a:96: 13:1b:e4:50:c5:e7:17:b8:eb:1d:a6:44:2f:59:22:81:43:ad: 2c:f6:a0:74:fc:0e:2b:90:a3:bc:ab:d3:3e:ca:42:1d:a5:bd: 0d:be:9b:00:2e:de:27:e1:cc:85:22:0f:ec:4d:f2:d6:2a:27: 9b:6b:f4:31:20:42:95:d5:6c:c5:fd:9c:17:a5:97:1b:ca:81: 54:4a:bf:bf:55:d5:6d:be:3c:f3:c2:c8:0d:56:f4:f0:e1:ee: 46:4a:c5:6b:b5:f9:61:85:13:22:cc:8a:2f:1b:e0:ee:34:f5: ea:0e:24:14:89:9a:59:e8:ec:a2:f3:fe:46:01:20:0e:4f:a7: 4a:4e:3c:fd:62:d7:6f:fe:e5:45:c0:ca:51:84:93:46:33:f1: e4:41:90:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9dCED6/K4xVC9mgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk NTlhOWVkNTMtYTIxMS00ZmY4LWJkMDQtNDNkNGM2YTRkYjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKtH+wqJm/5QnLBo1GBcCQKIxq93RS5hCf6/ ioMEB0Cv7QfWypmw/E3sRUGJmRggrqhWHF57GdWD3hUQfNb1YyPpiedIjyucgN9B TtAnUboYxGN185x/RooyeOitpQ/yFIiyfnPpOREBMPpBKYrQVrWFkJQa51vYCK8Y TP2R776VHV84r0VncWseocIhP1DTquxqylE/0sxbUNC1Iao4NkSSi8HeczUEoxqy tNJtH80vzZ1sArJeOkqJ/m9RB8g/y0liPGOd6hpHNeVSW/y+dcTcZmbS6PfxjC7c 1+PE+Qg223mgK7lBsaaEac8Sg0bNj9CN8nSFERUZavGlG6o7RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPVaLA/PxVLAYE8317UrQ4nYbSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZDZiNTBkYTEtZjAwYy0z OGUxLTkyYzQtYjk3YTRhODBmMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpnb4Zk88qoCrMZ8ow3EA43D0AYBb/eGkeCF/Zy8U8u37yuR8+lVw92 b+jW25c3HG9UqHYQv1vvqMYXDQ6utTbbmQK7+JPjp/Vc8cf7PPGSgpeIT3rwrMDx XoWGJjmeYPf7/ozN+eh8vF0qlhMb5FDF5xe46x2mRC9ZIoFDrSz2oHT8DiuQo7yr 0z7KQh2lvQ2+mwAu3ifhzIUiD+xN8tYqJ5tr9DEgQpXVbMX9nBellxvKgVRKv79V 1W2+PPPCyA1W9PDh7kZKxWu1+WGFEyLMii8b4O409eoOJBSJmlno7KLz/kYBIA5P p0pOPP1i12/+5UXAylGEk0Yz8eRBkGc= -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:26 2025 by rpki-client