This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa File: b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa (raw, json) Hash identifier: 49MYpcoifKRR+5crRvJRw2ghYbJUkMAt1bct33y3RSE= Subject key identifier: 8D:56:9B:38:72:33:5D:D4:F4:6B:51:E3:BB:7C:86:59:5D:5C:91:3B Certificate issuer: /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Certificate serial: 010D0C9F4328584C11A39625F6FDBAFCFC175BC0 Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa Signing time: Wed 03 Dec 2025 22:52:59 +0000 ROA not before: Wed 03 Dec 2025 22:52:59 +0000 ROA not after: Tue 03 Mar 2026 22:52:59 +0000 asID: 396895 IP address blocks: 67.204.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:11:a3:96:25:f6:fd:ba:fc:fc:17:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Validity Not Before: Dec 3 22:52:59 2025 GMT Not After : Mar 3 22:52:59 2026 GMT Subject: CN=373e3bda-db05-4bca-b96f-f243b33f364c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:61:88:80:9d:4f:c7:71:a6:b7:85:11:fb: 13:20:b5:56:b7:14:c7:1d:d4:39:ed:9a:64:8d:90: c6:22:66:38:d1:10:12:58:9a:83:9c:d5:d7:4a:db: ba:67:38:04:b9:c9:49:8f:d5:75:d0:86:1d:70:d7: 7a:db:62:f8:ee:62:94:3f:4e:5f:16:ce:f9:54:67: 2c:86:28:cd:90:3d:2c:97:ce:a2:d0:dd:ac:62:97: 6a:2a:51:2a:34:a4:89:b5:01:59:5f:03:d3:29:db: cc:a6:74:23:da:a6:2b:3e:02:0e:51:40:b0:00:19: 8c:ed:75:ee:e2:7d:f5:16:f6:29:77:20:f3:5e:46: 6f:89:0a:9b:f0:f7:fc:7f:23:19:b2:66:fb:b7:c7: ec:6d:d8:c2:39:d1:c2:84:6c:ac:4e:1b:62:fa:51: 2e:9e:ce:ab:40:91:cd:fe:e0:f0:d5:42:9b:2e:d4: dc:b3:a4:8e:2d:9a:0d:10:7d:99:ec:2a:37:38:5d: 1b:f6:21:d9:ea:16:e3:78:cc:f6:fc:ea:4a:9b:1b: ea:bc:74:d9:9f:f3:8d:c4:13:20:b2:d3:f0:db:a1: d1:48:df:92:28:48:17:e5:9e:93:f8:99:24:8e:8d: 53:d2:3b:2c:ba:92:65:92:29:e8:7e:a6:96:82:ea: 4c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:56:9B:38:72:33:5D:D4:F4:6B:51:E3:BB:7C:86:59:5D:5C:91:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl X509v3 Authority Key Identifier: keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer sbgp-ipAddrBlock: critical IPv4: 67.204.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:5d:ce:fd:6e:c6:bd:d4:dc:1e:b9:5e:7c:78:cb:a7:51:7c: ce:a2:6a:36:dc:2c:eb:90:73:da:5a:51:ad:3f:04:b5:3c:dd: 01:e5:0c:8a:66:b8:a5:9a:13:2f:66:a4:86:3a:fc:06:29:67: 9e:29:65:b3:6e:9b:e3:a3:3a:e3:0f:38:49:5d:f1:56:38:98: 28:0f:4f:27:40:d8:dc:5a:21:57:4d:c9:b2:bc:fc:72:72:1f: d9:aa:a2:42:14:37:b8:6a:e2:84:51:95:b1:6a:73:d9:13:a2: 36:b3:d0:5a:30:79:1d:15:e1:30:35:82:28:ff:0e:62:ea:09: 33:f7:5c:89:df:c1:c7:8f:82:89:64:77:d5:f4:69:15:4e:c7: c5:61:a7:01:a6:70:ad:c2:28:de:4a:df:e2:00:4b:59:47:2f: 59:22:f4:0f:d2:15:0d:fd:00:8e:fa:49:e2:6f:8b:cc:26:f6: c4:1b:48:32:3a:56:5d:ae:fb:1a:4d:7e:10:4c:68:4c:28:b8: 89:f3:16:85:ac:b3:d1:49:21:6c:04:0c:64:5f:2d:57:f1:bf: 33:60:dd:af:5a:5a:6a:36:da:b2:23:45:b1:56:dc:f8:85:6b: ae:c5:e4:04:3e:2b:0c:7f:92:c1:f7:32:eb:a7:21:02:4e:0c: a0:d8:67:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwRo5Yl9v26/PwXW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4 YjdkMB4XDTI1MTIwMzIyNTI1OVoXDTI2MDMwMzIyNTI1OVowLzEtMCsGA1UEAxMk MzczZTNiZGEtZGIwNS00YmNhLWI5NmYtZjI0M2IzM2YzNjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFphiICdT8dxpreFEfsTILVWtxTHHdQ57Zpk jZDGImY40RASWJqDnNXXStu6ZzgEuclJj9V10IYdcNd622L47mKUP05fFs75VGcs hijNkD0sl86i0N2sYpdqKlEqNKSJtQFZXwPTKdvMpnQj2qYrPgIOUUCwABmM7XXu 4n31FvYpdyDzXkZviQqb8Pf8fyMZsmb7t8fsbdjCOdHChGysThti+lEuns6rQJHN /uDw1UKbLtTcs6SOLZoNEH2Z7Co3OF0b9iHZ6hbjeMz2/OpKmxvqvHTZn/ONxBMg stPw26HRSN+SKEgX5Z6T+Jkkjo1T0jssupJlkinofqaWgupMmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1WmzhyM13U9GtR47t8hlldXJE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvYjhjN2MyNDctZTEzNC0z YmQzLTk4MWYtZDlkYzQ0ZDhhY2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0 OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4 ZjIwZDhiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8wRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVdzv1uxr3U3B65Xnx4y6dRfM6iajbcLOuQc9paUa0/BLU83QHlDIpm uKWaEy9mpIY6/AYpZ54pZbNum+OjOuMPOEld8VY4mCgPTydA2NxaIVdNybK8/HJy H9mqokIUN7hq4oRRlbFqc9kTojaz0FoweR0V4TA1gij/DmLqCTP3XInfwcePgolk d9X0aRVOx8VhpwGmcK3CKN5K3+IAS1lHL1ki9A/SFQ39AI76SeJvi8wm9sQbSDI6 Vl2u+xpNfhBMaEwouInzFoWss9FJIWwEDGRfLVfxvzNg3a9aWmo22rIjRbFW3PiF a67F5AQ+Kwx/ksH3MuunIQJODKDYZzY= -----END CERTIFICATE-----Generated at Sat Dec 6 17:08:25 2025 by rpki-client