This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd3d3554-3b8e-3804-9f34-e572ee29034a.roa
File: bd3d3554-3b8e-3804-9f34-e572ee29034a.roa (raw, json)
Hash identifier: fKgaTH0paZrPoFnthQhcr8bj3G8iZqStrKICshVUzok=
Subject key identifier: B0:27:F2:54:1F:AF:9E:D7:E3:CD:C1:A4:93:50:EB:3F:F4:F5:D1:E1
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584BE82085C51EF6BB31FE58E380
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd3d3554-3b8e-3804-9f34-e572ee29034a.roa
Signing time: Wed 19 Nov 2025 02:00:30 +0000
ROA not before: Wed 19 Nov 2025 02:00:30 +0000
ROA not after: Tue 17 Feb 2026 02:00:30 +0000
asID: 9009
IP address blocks: 172.94.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e8:20:85:c5:1e:f6:bb:31:fe:58:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 19 02:00:30 2025 GMT
Not After : Feb 17 02:00:30 2026 GMT
Subject: CN=4b3e8208-b96a-48bf-b184-caa5c4e97c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:e1:d9:85:b6:4e:55:51:50:2e:10:44:ef:
33:14:2f:af:6e:d4:44:04:d5:77:3b:88:4f:5f:c1:
ae:cc:4e:e8:f3:b5:62:b5:1f:0a:23:15:5c:49:8a:
68:a4:f4:22:05:21:88:da:ec:eb:a5:bc:07:ae:e8:
80:70:4c:d7:5a:d3:c6:be:b8:06:f5:39:55:c8:11:
99:67:fa:84:ec:0e:55:8c:c0:2a:12:a2:50:0e:57:
0f:dc:bb:68:03:ff:0e:44:77:99:a4:94:1a:3d:64:
cc:63:1e:57:eb:9c:47:9b:ba:47:eb:e3:8c:ba:b5:
58:a7:33:25:ec:5e:c9:79:7e:3e:5a:31:ed:94:be:
d0:a4:6f:4d:f1:47:22:e6:56:0d:3c:ed:92:34:f0:
32:52:a4:90:33:67:d3:23:c7:6c:36:75:76:bf:b5:
72:bc:91:55:5f:1d:a2:bd:36:0f:19:4e:59:3e:ff:
45:e0:4a:3b:cf:14:d3:69:25:70:70:e1:e9:ae:0a:
72:4c:09:02:37:21:a0:4f:ea:96:fd:68:ee:da:55:
06:e6:94:83:0d:9c:35:89:2d:6b:a5:fb:8c:9f:f7:
1a:af:0f:63:38:f6:b3:dc:07:05:88:21:84:83:91:
8d:64:4d:a7:40:39:6a:99:73:8c:d6:67:a2:62:67:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:27:F2:54:1F:AF:9E:D7:E3:CD:C1:A4:93:50:EB:3F:F4:F5:D1:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd3d3554-3b8e-3804-9f34-e572ee29034a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:d3:c6:6c:b4:ac:d3:3c:f5:04:5d:cd:fb:57:56:e6:4e:96:
1a:7b:90:bf:90:b3:bf:81:57:af:c4:fe:32:b0:96:8a:9c:2f:
ac:38:7f:44:d4:89:51:51:1c:a6:c9:a8:d6:c3:ec:de:fc:3b:
6a:c9:64:33:67:62:8a:a2:68:26:fd:88:44:06:de:81:cd:54:
35:49:be:b2:bf:7e:fc:12:0a:3a:85:ec:a7:8b:e1:e8:61:42:
66:60:74:32:14:38:f7:c0:bc:d7:e9:83:54:a7:ca:aa:49:d7:
50:be:bf:75:98:40:0c:85:19:44:f2:f1:02:d3:d4:f6:66:4e:
d6:46:52:26:a2:d1:8d:ff:3c:9c:2a:21:9b:df:30:40:a2:0c:
23:d5:ad:b7:c8:35:3d:68:23:57:31:bb:64:86:62:71:11:36:
e9:41:10:71:08:74:ff:ef:b0:9b:07:5f:37:23:1a:03:bc:87:
3c:9d:0f:d2:3e:65:ae:86:15:ab:9c:b0:e9:4e:2d:6d:30:4f:
af:39:c1:0a:13:b5:9b:f1:84:c5:27:9f:63:62:97:a9:f0:51:
78:16:3b:af:d8:e8:6f:b5:2c:18:9a:16:f8:55:19:ad:77:8a:
16:3b:21:50:6e:79:4c:fd:98:14:aa:b0:ca:f7:0d:f4:17:d8:
d2:2e:6a:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvoIIXFHva7Mf5Y44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MTExOTAyMDAzMFoXDTI2MDIxNzAyMDAzMFowLzEtMCsGA1UEAxMk
NGIzZTgyMDgtYjk2YS00OGJmLWIxODQtY2FhNWM0ZTk3Yzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2jh2YW2TlVRUC4QRO8zFC+vbtREBNV3O4hP
X8GuzE7o87VitR8KIxVcSYpopPQiBSGI2uzrpbwHruiAcEzXWtPGvrgG9TlVyBGZ
Z/qE7A5VjMAqEqJQDlcP3LtoA/8ORHeZpJQaPWTMYx5X65xHm7pH6+OMurVYpzMl
7F7JeX4+WjHtlL7QpG9N8Uci5lYNPO2SNPAyUqSQM2fTI8dsNnV2v7VyvJFVXx2i
vTYPGU5ZPv9F4Eo7zxTTaSVwcOHprgpyTAkCNyGgT+qW/Wju2lUG5pSDDZw1iS1r
pfuMn/carw9jOPaz3AcFiCGEg5GNZE2nQDlqmXOM1meiYmcFQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLAn8lQfr57X483BpJNQ6z/09dHhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmQzZDM1NTQtM2I4ZS0z
ODA0LTlmMzQtZTU3MmVlMjkwMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETTxmy0rNM89QRdzftXVuZOlhp7kL+Qs7+BV6/E/jKwloqcL6w4f0TU
iVFRHKbJqNbD7N78O2rJZDNnYoqiaCb9iEQG3oHNVDVJvrK/fvwSCjqF7KeL4ehh
QmZgdDIUOPfAvNfpg1SnyqpJ11C+v3WYQAyFGUTy8QLT1PZmTtZGUiai0Y3/PJwq
IZvfMECiDCPVrbfINT1oI1cxu2SGYnERNulBEHEIdP/vsJsHXzcjGgO8hzydD9I+
Za6GFaucsOlOLW0wT685wQoTtZvxhMUnn2Nil6nwUXgWO6/Y6G+1LBiaFvhVGa13
ihY7IVBueUz9mBSqsMr3DfQX2NIuak4=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:29:52 2025 by rpki-client