This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f4eb3f45-23aa-397c-a750-8446a726a135.roa File: f4eb3f45-23aa-397c-a750-8446a726a135.roa (raw, json) Hash identifier: XtTNZaNlSXdKt6F4TYDWooTbsvgEMEzMv9g8fw1pOwo= Subject key identifier: 33:62:C1:F8:60:CE:97:F3:7C:D6:55:8E:10:3B:CE:88:6B:66:9B:AE Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584BCAD0545A1FCC1486A48C1C00 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f4eb3f45-23aa-397c-a750-8446a726a135.roa Signing time: Sat 08 Nov 2025 14:00:39 +0000 ROA not before: Sat 08 Nov 2025 14:00:39 +0000 ROA not after: Fri 06 Feb 2026 14:00:39 +0000 asID: 4213 IP address blocks: 66.186.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ca:d0:54:5a:1f:cc:14:86:a4:8c:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Nov 8 14:00:39 2025 GMT Not After : Feb 6 14:00:39 2026 GMT Subject: CN=3a035781-3307-4ddf-beb6-3340e9258477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:ae:0d:f6:47:b2:a8:c8:72:69:1f:2b:45: be:fd:27:82:8a:ac:78:26:05:1f:6a:f1:ee:71:7b: 19:15:79:c7:86:58:83:cf:67:72:65:b7:03:82:8b: 5c:63:79:e6:c9:97:8e:6f:a8:73:f2:b0:e2:d3:33: 6b:7f:52:6c:eb:93:f3:33:84:a7:bc:5d:a2:71:e6: 37:14:70:dd:60:30:6c:cc:eb:7d:5b:cd:7a:80:f6: 99:67:73:30:58:7a:6b:c9:81:3a:98:75:4a:8e:8e: a3:6d:7a:e6:42:a7:61:c5:50:48:e2:6c:54:b8:1f: 67:dc:5d:6d:b3:42:ae:da:bc:ab:5b:2d:33:59:16: 21:b5:6e:06:20:9f:6d:ba:35:5f:df:a5:8c:c0:e9: c3:32:ba:e3:5e:aa:8b:4f:13:50:b4:f5:07:a0:ab: 97:6b:4c:a5:87:7a:16:e8:97:43:06:0f:2c:90:2a: a3:c4:06:2f:b9:9a:79:24:4a:74:93:7d:16:7f:c3: a0:18:52:a0:b5:c9:54:2d:29:64:42:00:cd:64:ce: a2:48:0c:fd:73:d5:eb:19:9e:41:6b:c6:16:d5:bd: 42:ab:90:88:fc:40:7b:5c:73:95:77:44:e9:48:5d: 46:34:74:e9:49:31:00:e9:1c:37:e8:60:f1:56:ce: c2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:62:C1:F8:60:CE:97:F3:7C:D6:55:8E:10:3B:CE:88:6B:66:9B:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/f4eb3f45-23aa-397c-a750-8446a726a135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 66.186.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:34:b6:f8:a8:e7:eb:07:a3:ff:b6:3e:16:67:e5:0f:85:5b: e8:91:4c:2b:06:06:06:78:26:32:0b:aa:f7:42:db:67:d3:56: b7:52:8a:1d:33:a3:1e:b8:88:bf:68:c6:08:b6:7f:83:c0:33: 74:05:d9:e0:63:2a:fd:b4:a7:f9:a7:63:6d:37:a9:65:0e:32: db:dc:d0:af:e0:e6:ee:18:b0:88:a0:8e:96:a6:4c:53:13:ee: b5:ae:a0:64:ff:8e:b8:c5:b7:36:0e:aa:0e:57:68:31:c5:7d: 8b:8b:33:ef:ff:01:61:db:79:bc:c5:6e:16:76:d0:59:86:fa: af:f4:c3:f0:9e:bb:79:44:d7:51:13:a2:cc:98:ee:4c:79:6f: d5:cc:9e:2c:1b:6a:a2:56:bc:ce:a6:0c:4c:88:9b:9f:e7:c0: 64:24:e0:55:3c:92:a9:0f:2e:04:91:0d:69:91:79:0f:5b:c0: 31:b7:eb:94:a6:6e:83:9c:03:75:5c:70:13:f8:9e:d5:04:18: ad:3c:c9:21:d9:f5:68:7d:be:30:e4:1d:b4:86:81:c8:13:66: 5b:65:0c:c8:25:01:77:fc:75:06:9c:43:16:cd:19:57:a2:83: d5:0b:f5:9d:40:27:bd:3f:79:41:97:1b:0b:6b:45:ad:98:e1: 12:54:28:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvK0FRaH8wUhqSMHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MTEwODE0MDAzOVoXDTI2MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk M2EwMzU3ODEtMzMwNy00ZGRmLWJlYjYtMzM0MGU5MjU4NDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQyuDfZHsqjIcmkfK0W+/SeCiqx4JgUfavHu cXsZFXnHhliDz2dyZbcDgotcY3nmyZeOb6hz8rDi0zNrf1Js65PzM4SnvF2iceY3 FHDdYDBszOt9W816gPaZZ3MwWHpryYE6mHVKjo6jbXrmQqdhxVBI4mxUuB9n3F1t s0Ku2ryrWy0zWRYhtW4GIJ9tujVf36WMwOnDMrrjXqqLTxNQtPUHoKuXa0ylh3oW 6JdDBg8skCqjxAYvuZp5JEp0k30Wf8OgGFKgtclULSlkQgDNZM6iSAz9c9XrGZ5B a8YW1b1Cq5CI/EB7XHOVd0TpSF1GNHTpSTEA6Rw36GDxVs7C3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNiwfhgzpfzfNZVjhA7zohrZpuuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZjRlYjNmNDUtMjNhYS0z OTdjLWE3NTAtODQ0NmE3MjZhMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQrogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA40tvio5+sHo/+2PhZn5Q+FW+iRTCsGBgZ4JjILqvdC22fTVrdSih0z ox64iL9oxgi2f4PAM3QF2eBjKv20p/mnY203qWUOMtvc0K/g5u4YsIigjpamTFMT 7rWuoGT/jrjFtzYOqg5XaDHFfYuLM+//AWHbebzFbhZ20FmG+q/0w/Ceu3lE11ET osyY7kx5b9XMniwbaqJWvM6mDEyIm5/nwGQk4FU8kqkPLgSRDWmReQ9bwDG365Sm boOcA3VccBP4ntUEGK08ySHZ9Wh9vjDkHbSGgcgTZltlDMglAXf8dQacQxbNGVei g9UL9Z1AJ70/eUGXGwtrRa2Y4RJUKMI= -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:51 2025 by rpki-client