This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa File: f2ad73f3-0f80-3cc2-9399-881a9101068b.roa (raw, json) Hash identifier: cwfMaXV1h5EpwWk9P4a6eIH/0EVPs1a6e4OZTqo2ay0= Subject key identifier: 61:91:41:C0:79:6B:DB:CE:34:E4:9F:E5:9F:01:F1:55:71:7A:00:24 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584BC53B0059479F0BEC47FD7740 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 14860 IP address blocks: 104.255.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:00:59:47:9f:0b:ec:47:fd:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=4ff78a89-d376-4810-8212-2898bd792c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:e9:ab:20:8c:43:c2:b0:c7:ac:6b:52:dd: 75:c1:02:e9:07:4b:a0:91:fd:39:c0:56:5d:26:77: 14:7b:ae:09:55:c7:be:08:d1:92:42:57:d6:00:e7: 11:69:32:3e:2b:77:85:ff:4a:bb:e6:8c:60:73:e2: 9f:31:c1:2a:aa:ff:b0:e7:5f:98:de:6f:b6:79:a5: 11:c4:17:cc:b7:98:c3:56:2b:42:b2:1c:38:4e:76: 0b:57:f5:6f:c4:e7:52:85:ef:c5:6d:c8:79:a2:93: f1:9d:bf:5c:23:9b:ee:51:9b:d3:f9:c5:73:3e:09: 68:39:dd:af:83:5d:26:c3:de:8a:4e:10:dc:85:9c: ce:93:5f:9d:79:1a:df:0a:05:f6:e3:ac:b9:91:7b: 49:65:af:ac:15:87:03:4f:6f:ea:67:5b:ac:bd:57: fb:37:c2:8f:09:83:f1:43:a4:60:7c:3e:bd:c0:a0: c2:24:8b:17:5a:07:ec:1f:37:6d:b2:89:a3:4a:20: 5b:df:88:7c:0b:27:ec:aa:4e:2a:c5:06:4f:30:a0: 91:0b:88:9a:6e:0a:18:e8:f9:e7:d1:71:f8:29:03: b2:0f:95:58:4d:4c:f1:e5:1b:4a:c1:39:ef:b1:b9: 8b:1a:d3:55:57:aa:8e:74:be:96:3d:e1:7e:a0:f9: 36:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:91:41:C0:79:6B:DB:CE:34:E4:9F:E5:9F:01:F1:55:71:7A:00:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/f2ad73f3-0f80-3cc2-9399-881a9101068b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: 104.255.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:60:39:90:ad:e6:1a:fa:61:d9:6f:d3:b1:28:25:66:a6:84: 99:bc:96:7d:8b:9b:23:7b:6c:89:db:7f:c7:48:73:0b:99:2d: a8:3c:5c:dd:6d:de:9e:29:c3:d6:36:95:be:88:33:5c:e9:37: 20:cb:e1:9e:ac:e1:32:7c:09:dc:ac:84:53:4d:b5:f8:96:58: 7f:32:d8:bc:50:af:98:69:00:f5:85:18:85:3f:5e:01:8f:05: f7:22:75:be:20:fe:18:32:32:4f:8f:93:45:fc:b6:4d:66:62: cc:9a:62:96:0b:1d:de:66:f3:44:a3:4b:d9:51:93:4a:62:b1: dc:68:d7:f3:06:14:90:58:b2:53:87:1b:77:6e:3f:4e:7c:bc: f4:93:6c:b8:1e:57:d3:e1:4f:cd:ec:27:15:84:b7:7c:d2:6c: d4:05:a9:31:09:52:23:4f:e0:ed:3f:b3:57:a7:4e:50:9b:ba: 36:4f:b6:da:8f:d2:f9:e5:61:71:b2:32:6a:04:c4:82:f7:0c: b9:99:22:57:da:a5:12:9d:db:57:d5:b8:68:40:b9:8a:b9:a3: 48:dc:9f:83:bc:cb:30:77:f2:98:f4:7a:a8:b3:b8:78:65:71: b3:82:ad:b2:83:e8:a4:25:68:a1:5b:fe:f0:d8:4e:c3:24:11: 8b:14:11:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOwBZR58L7Ef9d0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NGZmNzhhODktZDM3Ni00ODEwLTgyMTItMjg5OGJkNzkyYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkfpqyCMQ8Kwx6xrUt11wQLpB0ugkf05wFZd JncUe64JVce+CNGSQlfWAOcRaTI+K3eF/0q75oxgc+KfMcEqqv+w51+Y3m+2eaUR xBfMt5jDVitCshw4TnYLV/VvxOdShe/Fbch5opPxnb9cI5vuUZvT+cVzPgloOd2v g10mw96KThDchZzOk1+deRrfCgX246y5kXtJZa+sFYcDT2/qZ1usvVf7N8KPCYPx Q6RgfD69wKDCJIsXWgfsHzdtsomjSiBb34h8Cyfsqk4qxQZPMKCRC4iabgoY6Pnn 0XH4KQOyD5VYTUzx5RtKwTnvsbmLGtNVV6qOdL6WPeF+oPk26wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGRQcB5a9vONOSf5Z8B8VVxegAkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvZjJhZDczZjMtMGY4MC0z Y2MyLTkzOTktODgxYTkxMDEwNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1gOZCt5hr6Ydlv07EoJWamhJm8ln2LmyN7bInbf8dIcwuZLag8XN1t 3p4pw9Y2lb6IM1zpNyDL4Z6s4TJ8CdyshFNNtfiWWH8y2LxQr5hpAPWFGIU/XgGP Bfcidb4g/hgyMk+Pk0X8tk1mYsyaYpYLHd5m80SjS9lRk0pisdxo1/MGFJBYslOH G3duP058vPSTbLgeV9PhT83sJxWEt3zSbNQFqTEJUiNP4O0/s1enTlCbujZPttqP 0vnlYXGyMmoExIL3DLmZIlfapRKd21fVuGhAuYq5o0jcn4O8yzB38pj0eqizuHhl cbOCrbKD6KQlaKFb/vDYTsMkEYsUEcA= -----END CERTIFICATE-----Generated at Sat Dec 6 15:27:04 2025 by rpki-client