This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa File: bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa (raw, json) Hash identifier: YIuFrYQ7CcwaeH4LTolclFQunT94fhDAoBw210wUUdA= Subject key identifier: 73:47:13:F8:6D:58:B2:EC:52:EE:B1:E7:B2:C0:5B:ED:FC:CE:09:22 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584BF1E5E600124AB8D2FE394B80 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 10397 IP address blocks: 162.244.96.0/24 maxlen: 24 162.244.97.0/24 maxlen: 24 162.244.98.0/24 maxlen: 24 162.244.99.0/24 maxlen: 24 162.244.100.0/24 maxlen: 24 162.244.101.0/24 maxlen: 24 204.16.48.0/24 maxlen: 24 208.67.12.0/24 maxlen: 24 208.67.13.0/24 maxlen: 24 208.67.14.0/24 maxlen: 24 208.67.15.0/24 maxlen: 24 208.85.128.0/24 maxlen: 24 208.85.133.0/24 maxlen: 24 208.85.134.0/24 maxlen: 24 208.85.135.0/24 maxlen: 24 209.42.166.0/24 maxlen: 24 209.42.191.0/24 maxlen: 24 209.209.128.0/21 maxlen: 21 209.209.139.0/24 maxlen: 24 209.209.140.0/22 maxlen: 22 209.209.141.0/24 maxlen: 24 209.209.144.0/20 maxlen: 20 209.209.160.0/20 maxlen: 20 209.209.163.0/24 maxlen: 24 209.209.167.0/24 maxlen: 24 209.209.176.0/22 maxlen: 22 209.209.180.0/23 maxlen: 23 209.209.181.0/24 maxlen: 24 209.209.183.0/24 maxlen: 24 209.209.184.0/24 maxlen: 24 209.209.186.0/23 maxlen: 23 209.209.189.0/24 maxlen: 24 209.209.190.0/23 maxlen: 23 209.250.32.0/19 maxlen: 19 2607:b600::/48 maxlen: 48 2607:b600:1::/48 maxlen: 48 2607:b600:2::/48 maxlen: 48 2607:b600:4::/48 maxlen: 48 2607:b600:5::/48 maxlen: 48 2607:b600:6::/48 maxlen: 48 2607:b600:8::/48 maxlen: 48 2607:b600:10::/48 maxlen: 48 2607:b600:12::/48 maxlen: 48 2607:b600:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Dec 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:e6:00:12:4a:b8:d2:fe:39:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=ec669a6a-aaa3-4f4a-a43b-44c4955f855a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:d5:51:64:b8:ad:f0:eb:b3:a2:fa:51:15: 0e:a0:ab:d9:4f:b0:c4:50:01:67:7b:17:32:d7:cf: 13:41:6e:82:30:85:4f:1f:71:24:33:7e:95:ab:53: 9f:4b:90:96:1b:7e:0f:0a:da:44:86:c8:ac:6b:5f: 99:0a:c2:e4:8e:d4:d4:6f:2d:2e:66:69:d1:08:b8: 72:d7:bb:91:8c:e7:44:29:c9:b1:29:3c:82:95:b8: 9e:f4:b5:43:ea:dc:83:f4:4c:2e:a1:df:a3:ad:f8: 54:f8:4b:68:1a:b1:76:62:eb:6e:3a:16:f7:b7:b7: ca:d3:4a:a3:06:c7:a5:63:c0:91:78:90:95:07:2b: e0:92:dd:28:3f:74:7d:30:79:71:ad:c2:c0:5c:2d: fd:f5:be:ae:8a:95:3d:76:37:af:df:16:3c:5f:d1: 97:b7:f0:09:17:09:7b:9d:c4:79:ab:e1:af:41:c8: c3:38:07:ef:11:bc:19:d4:82:a0:04:1e:1e:d3:1a: e2:33:ac:b3:e9:69:76:fd:e4:0c:28:e6:ed:b5:d7: d3:0c:f0:41:90:0f:fd:06:6c:de:7a:53:78:3a:8e: a3:2e:8a:45:4c:22:c5:d1:2d:c0:26:ec:7c:6d:ef: ae:17:f1:6b:fc:53:68:c4:5c:0a:39:4e:be:91:70: 61:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:47:13:F8:6D:58:B2:EC:52:EE:B1:E7:B2:C0:5B:ED:FC:CE:09:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bd87b42a-cb7c-39c4-8fda-3f3a8fc69336.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 162.244.96.0-162.244.101.255 204.16.48.0/24 208.67.12.0/22 208.85.128.0/24 208.85.133.0-208.85.135.255 209.42.166.0/24 209.42.191.0/24 209.209.128.0/21 209.209.139.0-209.209.181.255 209.209.183.0-209.209.184.255 209.209.186.0/23 209.209.189.0-209.209.191.255 209.250.32.0/19 IPv6: 2607:b600::-2607:b600:2:ffff:ffff:ffff:ffff:ffff 2607:b600:4::-2607:b600:6:ffff:ffff:ffff:ffff:ffff 2607:b600:8::/48 2607:b600:10::/48 2607:b600:12::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:23:6d:9c:98:3d:4e:a6:87:53:29:a2:56:78:19:b3:77:4c: 31:32:51:1a:4b:af:c2:c2:8c:51:96:db:9e:5a:d8:d8:66:87: d7:41:46:66:0d:0f:af:8e:6b:9d:cd:57:f9:f2:47:f5:fd:3a: 8b:10:76:82:9b:b6:d6:51:fc:e0:73:6a:b8:02:dc:a7:5e:7e: 18:0e:09:b5:a4:33:57:98:9a:1a:77:86:dd:a7:32:19:9e:bc: 8a:21:db:db:eb:08:c3:3c:89:df:99:50:50:51:55:1f:a1:21: 78:f8:53:a4:1b:0a:72:9d:30:5d:f4:b1:89:b6:a9:ab:39:33: 1e:5a:6a:68:84:75:9b:84:e1:8a:f1:c5:33:13:66:10:0d:a1: 61:81:83:4c:2f:58:0e:81:4e:3e:8c:6b:ab:e3:65:5b:e9:75: 22:15:0f:7c:dd:a3:a1:4f:27:20:78:fc:28:6b:22:e1:59:2e: 0d:77:71:e3:a5:6d:c2:a6:0b:bd:e0:be:22:ce:18:42:52:7c: 08:44:ff:99:a9:a3:da:59:1d:73:d1:22:7a:06:3a:d8:b2:c0: 8f:9a:01:bd:a7:73:47:fe:c4:d5:bc:49:ea:b2:e8:86:dc:8b: 14:18:c3:a0:8e:ac:76:d2:aa:8e:77:62:2e:2e:e3:d8:89:24: 00:26:f2:b1 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEvx5eYAEkq40v45S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk ZWM2NjlhNmEtYWFhMy00ZjRhLWE0M2ItNDRjNDk1NWY4NTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJbVUWS4rfDrs6L6URUOoKvZT7DEUAFnexcy 188TQW6CMIVPH3EkM36Vq1OfS5CWG34PCtpEhsisa1+ZCsLkjtTUby0uZmnRCLhy 17uRjOdEKcmxKTyClbie9LVD6tyD9Ewuod+jrfhU+EtoGrF2YutuOhb3t7fK00qj BselY8CReJCVByvgkt0oP3R9MHlxrcLAXC399b6uipU9djev3xY8X9GXt/AJFwl7 ncR5q+GvQcjDOAfvEbwZ1IKgBB4e0xriM6yz6Wl2/eQMKObttdfTDPBBkA/9Bmze elN4Oo6jLopFTCLF0S3AJux8be+uF/Fr/FNoxFwKOU6+kXBhkQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFHNHE/htWLLsUu6x57LAW+38zgkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYmQ4N2I0MmEtY2I3Yy0z OWM0LThmZGEtM2YzYThmYzY5MzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMIHZBggrBgEFBQcBBwEB/wSByTCBxjB8BAIAATB2MAwDBAWi 9GADBAGi9GQDBADMEDADBALQQwwDBADQVYAwDAMEANBVhQMEA9BVgAMEANEqpgME ANEqvwMEA9HRgDAMAwQA0dGLAwQB0dG0MAwDBADR0bcDBADR0bgDBAHR0bowDAME ANHRvQMEBtHRgAMEBdH6IDBGBAIAAjBAMA8DBAEmB7YDBwAmB7YAAAIwEgMHAiYH tgAABAMHACYHtgAABgMHACYHtgAACAMHACYHtgAAEAMHASYHtgAAEjBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQCHI22cmD1OpodTKaJWeBmzd0wxMlEaS6/CwoxRltueWtjYZofXQUZmDQ+vjmud zVf58kf1/TqLEHaCm7bWUfzgc2q4AtynXn4YDgm1pDNXmJoad4bdpzIZnryKIdvb 6wjDPInfmVBQUVUfoSF4+FOkGwpynTBd9LGJtqmrOTMeWmpohHWbhOGK8cUzE2YQ DaFhgYNML1gOgU4+jGur42Vb6XUiFQ983aOhTycgePwoayLhWS4Nd3HjpW3Cpgu9 4L4izhhCUnwIRP+ZqaPaWR1z0SJ6BjrYssCPmgG9p3NH/sTVvEnqsuiG3IsUGMOg jqx20qqOd2IuLuPYiSQAJvKx -----END CERTIFICATE-----Generated at Mon Dec 8 09:31:13 2025 by rpki-client