This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa File: bf924dbd-34bc-3c73-9911-e6e933405f1e.roa (raw, json) Hash identifier: zjFkbXHT/RiBWiNXRjBub10KbHZv1IWVPtAl3e8MjpU= Subject key identifier: F7:20:CB:02:00:CA:60:D0:21:B6:32:EC:8D:B9:BD:F5:42:3D:A3:FA Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F4328584C9EFC68F9325763BD0DA3A680 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 26904 IP address blocks: 23.247.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:68:f9:32:57:63:bd:0d:a3:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=478f4199-635a-477e-a410-4126f1805a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9c:7e:50:ad:cb:e9:79:95:5e:46:9d:64:aa: 5b:d1:f0:e4:35:a0:81:6e:31:09:7d:c0:7a:12:02: 6f:b8:f7:b4:f8:f5:7e:db:81:5b:17:a3:56:77:61: 55:bc:78:e2:35:2d:0c:0d:33:f1:9e:24:57:a5:02: ad:da:20:b8:f3:c8:8e:a6:58:81:52:c6:79:44:64: 7d:7f:c3:d3:8d:b7:59:5b:b1:72:5c:2c:fe:01:b6: 2c:f5:59:33:50:98:9b:f5:69:24:cc:22:ce:0a:f0: ac:7a:1f:98:80:66:80:af:79:13:75:de:2a:85:42: e4:81:97:42:d5:c2:b3:48:1b:6e:f3:58:cf:4d:52: b6:88:7c:9e:b5:96:2e:b2:8b:19:e8:65:bc:d5:2e: 3f:b6:db:04:74:16:17:39:a3:66:c4:65:b4:95:d0: 57:ca:7e:bd:c7:8b:b6:4f:ef:1f:c6:7f:a2:f2:18: be:71:1c:de:9f:db:7a:50:7c:25:3c:5a:3e:62:b8: b8:e3:4b:68:fc:6c:b2:34:f8:dc:22:34:f5:8b:25: 1c:4d:74:98:6c:28:f8:0e:1e:32:59:35:d6:b6:0d: a0:54:e8:3c:f1:c1:da:4e:7c:64:44:5e:ae:6d:71: 50:e3:2d:38:34:e4:65:1a:fe:17:40:3c:13:5d:3c: 49:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:20:CB:02:00:CA:60:D0:21:B6:32:EC:8D:B9:BD:F5:42:3D:A3:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e9:a5:e8:8c:85:83:c1:09:4e:c5:aa:0d:4d:14:16:5a:64: af:2e:5b:07:38:f9:1c:93:b7:84:7a:fa:35:80:8b:c3:34:4c: 0f:49:2c:3c:ed:4e:ba:3c:bc:c5:81:71:ea:98:53:ef:19:0c: a4:ba:f4:2b:39:5f:39:49:01:32:d1:48:fa:39:7b:3d:25:62: 83:9b:a2:e8:c8:fa:58:32:96:c7:15:d2:ff:b5:f1:80:58:df: e8:c7:db:00:64:11:83:21:d3:5b:28:a0:c0:6b:d8:4e:e3:2f: 58:10:79:b8:20:cf:29:db:3d:69:e6:c7:6b:70:28:16:4e:ad: 5f:5c:d6:bb:77:fe:a9:aa:78:76:a2:03:37:17:cd:43:e8:f1: 9d:16:45:16:88:11:9c:c4:17:3b:83:ee:d7:35:17:9d:96:62: c2:ad:30:3d:fd:37:36:80:b8:9b:40:f5:90:ca:a2:03:5a:ec: 1a:8a:01:b8:be:54:8f:1f:d0:e4:cc:b6:b0:ba:d2:27:02:30: f1:8c:60:bc:db:f4:56:64:9a:9c:96:3c:da:a4:2f:a8:d0:23: 38:eb:39:89:65:33:6d:5b:09:54:5d:ab:a7:31:cc:96:02:b8: 9d:28:b0:49:a3:d6:29:ac:f6:68:8e:f2:4c:30:6d:09:f7:7c: ff:02:5a:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/Gj5MldjvQ2jpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk NDc4ZjQxOTktNjM1YS00NzdlLWE0MTAtNDEyNmYxODA1YTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJx+UK3L6XmVXkadZKpb0fDkNaCBbjEJfcB6 EgJvuPe0+PV+24FbF6NWd2FVvHjiNS0MDTPxniRXpQKt2iC488iOpliBUsZ5RGR9 f8PTjbdZW7FyXCz+AbYs9VkzUJib9WkkzCLOCvCseh+YgGaAr3kTdd4qhULkgZdC 1cKzSBtu81jPTVK2iHyetZYusosZ6GW81S4/ttsEdBYXOaNmxGW0ldBXyn69x4u2 T+8fxn+i8hi+cRzen9t6UHwlPFo+Yri440to/GyyNPjcIjT1iyUcTXSYbCj4Dh4y WTXWtg2gVOg88cHaTnxkRF6ubXFQ4y04NORlGv4XQDwTXTxJQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcgywIAymDQIbYy7I25vfVCPaP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvYmY5MjRkYmQtMzRiYy0z YzczLTk5MTEtZTZlOTMzNDA1ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLppeiMhYPBCU7Fqg1NFBZaZK8uWwc4+RyTt4R6+jWAi8M0TA9JLDzt Tro8vMWBceqYU+8ZDKS69Cs5XzlJATLRSPo5ez0lYoOboujI+lgylscV0v+18YBY 3+jH2wBkEYMh01sooMBr2E7jL1gQebggzynbPWnmx2twKBZOrV9c1rt3/qmqeHai AzcXzUPo8Z0WRRaIEZzEFzuD7tc1F52WYsKtMD39NzaAuJtA9ZDKogNa7BqKAbi+ VI8f0OTMtrC60icCMPGMYLzb9FZkmpyWPNqkL6jQIzjrOYllM21bCVRdq6cxzJYC uJ0osEmj1ims9miO8kwwbQn3fP8CWu4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:32:00 2026 by rpki-client