This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa File: bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa (raw, json) Hash identifier: meD3FNJk6TyE70jxOBaifF5C/aN9jYsfJ+ZW0uQLwW8= Subject key identifier: 4C:B4:C4:7C:DC:FB:72:6E:65:3F:99:FE:7F:58:05:5A:92:BA:48:26 Certificate issuer: /CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75 Certificate serial: 010D0C9F4328584C0DD0CA41D46B8297745BECFA Authority key identifier: 58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 15296 IP address blocks: 204.209.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:ca:41:d4:6b:82:97:74:5b:ec:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75 Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=7edf4fe1-7d2a-410e-85cd-d880b24af03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c1:c0:b8:67:20:86:7f:b2:3c:b8:f4:d4:46: 4f:3a:00:87:cb:3d:fa:cb:28:3e:af:ef:7c:f9:49: b0:a6:9b:90:32:ef:0e:12:cb:eb:80:40:75:97:a6: e5:70:30:35:22:b3:24:cb:3e:a7:ad:f2:65:12:55: 07:ec:f3:28:cc:3f:f9:d9:40:2d:00:9c:23:72:bf: 06:6b:da:39:de:5a:fe:f0:b2:e2:d6:3b:0c:a7:1c: 09:ca:95:b9:21:49:d2:ab:13:f0:1c:3f:a1:b5:0e: 5f:87:48:19:1b:9a:8b:b5:1c:a2:50:41:5c:a7:97: 50:b6:0b:5b:23:64:37:fa:b5:1e:df:e1:6c:a3:45: 56:6a:d0:fb:0c:32:b4:b3:fc:6c:4a:58:6d:80:ce: 9e:e4:81:f6:35:46:54:f8:b2:a6:a0:f9:0b:58:0a: 7d:ae:5c:c2:b7:da:82:8f:95:a1:2d:38:10:60:eb: 6a:47:a6:13:48:07:17:d5:43:3a:c6:8e:76:53:ce: 55:96:3a:a2:69:52:fa:84:e5:ca:e4:2c:8f:13:31: 97:30:12:7e:47:11:55:d0:77:9a:30:69:71:14:64: af:b1:9b:b2:a7:df:76:17:91:59:64:d8:5c:67:66: dd:ba:13:7d:9d:92:b3:b3:20:cf:db:0a:43:9c:51: 3c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B4:C4:7C:DC:FB:72:6E:65:3F:99:FE:7F:58:05:5A:92:BA:48:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/bfae38a7-ec79-38f1-8257-8b1b3c10ac5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl X509v3 Authority Key Identifier: keyid:58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer sbgp-ipAddrBlock: critical IPv4: 204.209.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c3:cc:09:f5:15:75:2a:b4:6a:a2:d1:b3:4b:58:05:24:f9: bc:03:00:63:43:9e:72:3a:f8:b7:ff:ed:ee:32:ee:71:6b:d1: eb:5a:a3:b5:3d:f4:9e:27:29:fd:e4:5b:91:2e:94:fb:38:c8: 32:3c:ed:fa:d1:67:c2:79:90:fd:3c:2e:30:10:e5:4f:11:2e: f8:66:04:e5:20:ca:c2:18:13:77:0f:56:4e:56:2a:2e:29:e9: 95:64:a6:c6:b7:7a:97:07:21:eb:07:21:8e:89:72:7c:76:3e: 56:bd:ac:3f:d0:fc:10:86:a7:f8:71:1f:d6:a7:4d:64:69:de: a0:c2:5a:4e:79:5e:76:fd:7f:ca:39:b7:0e:2e:17:6c:44:47: 98:9c:4e:fd:84:e7:79:a3:0c:6c:ee:18:9c:af:2a:a2:ab:0b: c7:e7:d1:18:20:28:33:c6:6a:73:2f:62:9e:6d:d8:80:0c:3c: c5:e9:bf:27:36:b7:56:df:c3:12:9a:ac:70:e6:6f:59:ef:da: 4f:21:59:b8:92:63:17:31:6d:09:29:5b:e6:8d:f3:4d:34:ec: e3:d4:fe:1b:2d:43:ff:96:c3:b9:97:40:74:39:8a:d7:1e:15: f6:18:c6:75:85:2e:04:9a:0a:a9:6f:d7:76:f0:31:f8:54:45: b5:fb:1b:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0MpB1GuCl3Rb7PowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJiYzZiN2EtYjhmNS00MTA5LWI3YWYtODk3NWUyNDQ0 ZDc1MB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk N2VkZjRmZTEtN2QyYS00MTBlLTg1Y2QtZDg4MGIyNGFmMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsHAuGcghn+yPLj01EZPOgCHyz36yyg+r+98 +UmwppuQMu8OEsvrgEB1l6blcDA1IrMkyz6nrfJlElUH7PMozD/52UAtAJwjcr8G a9o53lr+8LLi1jsMpxwJypW5IUnSqxPwHD+htQ5fh0gZG5qLtRyiUEFcp5dQtgtb I2Q3+rUe3+Fso0VWatD7DDK0s/xsSlhtgM6e5IH2NUZU+LKmoPkLWAp9rlzCt9qC j5WhLTgQYOtqR6YTSAcX1UM6xo52U85VljqiaVL6hOXK5CyPEzGXMBJ+RxFV0Hea MGlxFGSvsZuyp992F5FZZNhcZ2bduhN9nZKzsyDP2wpDnFE8kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEy0xHzc+3JuZT+Z/n9YBVqSukgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMmJj NmI3YS1iOGY1LTQxMDktYjdhZi04OTc1ZTI0NDRkNzUvYmZhZTM4YTctZWM3OS0z OGYxLTgyNTctOGIxYjNjMTBhYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjJiYzZiN2EtYjhmNS00MTA5LWI3 YWYtODk3NWUyNDQ0ZDc1L2YyYmM2YjdhLWI4ZjUtNDEwOS1iN2FmLTg5NzVlMjQ0 NGQ3NS5jcmwwHwYDVR0jBBgwFoAUWHSg1z9c9nzq4DaQRxYHuAFb+KUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMmJjNmI3YS1iOGY1LTQxMDktYjdhZi04OTc1 ZTI0NDRkNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPDzAn1FXUqtGqi0bNLWAUk+bwDAGNDnnI6+Lf/7e4y7nFr0etao7U9 9J4nKf3kW5EulPs4yDI87frRZ8J5kP08LjAQ5U8RLvhmBOUgysIYE3cPVk5WKi4p 6ZVkpsa3epcHIesHIY6Jcnx2Pla9rD/Q/BCGp/hxH9anTWRp3qDCWk55Xnb9f8o5 tw4uF2xER5icTv2E53mjDGzuGJyvKqKrC8fn0RggKDPGanMvYp5t2IAMPMXpvyc2 t1bfwxKarHDmb1nv2k8hWbiSYxcxbQkpW+aN80007OPU/hstQ/+Ww7mXQHQ5itce FfYYxnWFLgSaCqlv13bwMfhURbX7G6Q= -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:46 2025 by rpki-client