This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf568f2e-a0e6-3097-8ecc-0bfe96bbc867.roa File: bf568f2e-a0e6-3097-8ecc-0bfe96bbc867.roa (raw, json) Hash identifier: LQJ4DanD56FiiynnNHFdkMWoL63HYQAcRxJeWcASJS0= Subject key identifier: 74:3C:3C:B8:28:87:E0:F8:A8:A1:99:D7:74:0C:73:05:06:81:60:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BD33072D39FF93D3665260E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf568f2e-a0e6-3097-8ecc-0bfe96bbc867.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 20940 IP address blocks: 104.74.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:72:d3:9f:f9:3d:36:65:26:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=3d9dbc2f-2202-4924-a17f-3b9eaccab05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:f4:f8:88:cf:9c:47:1e:8a:3a:5c:dd:54: e3:5c:8d:f1:ba:6a:4f:9f:de:b0:25:bf:d4:f5:b8: 0a:91:03:ec:2c:42:2b:b2:5f:b5:41:7b:6c:ac:e9: a7:50:58:ce:bf:a7:15:8a:38:ef:a2:f6:d8:b3:05: 06:5b:e5:74:61:a2:18:ae:7a:4d:f3:31:fe:6a:60: 13:b9:34:cc:6c:d5:32:11:59:12:f2:4c:bf:81:9a: 36:65:04:55:8b:d3:bd:47:dc:2e:90:e7:22:52:f9: fc:c0:be:ce:6e:cf:21:5c:bd:ce:5e:5b:dd:c0:29: bd:61:20:10:9a:6a:4b:e1:15:64:e0:17:6c:83:2f: 21:11:67:53:e1:c8:8a:ad:52:b4:7a:64:08:d8:a0: 57:36:1f:0e:69:4d:6d:c6:8c:dd:b3:5a:a6:e2:dc: eb:9c:6f:3d:d8:3b:07:79:37:0e:61:f7:eb:05:ea: 86:ea:0f:fc:73:ca:af:3e:23:57:82:9c:b0:1f:f0: 32:eb:fa:c9:78:73:5d:8c:e7:77:c0:57:ec:bc:ef: a1:e7:c4:fe:01:ee:a7:dd:0c:64:2e:ae:98:6c:11: 91:7d:b5:c4:00:30:54:b1:2a:d9:16:42:5f:e3:f9: bc:42:2e:a8:2a:48:05:d1:28:00:d8:7a:f9:a6:28: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3C:3C:B8:28:87:E0:F8:A8:A1:99:D7:74:0C:73:05:06:81:60:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf568f2e-a0e6-3097-8ecc-0bfe96bbc867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.74.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:26:14:60:4f:b9:86:7d:58:6d:6d:57:45:b9:94:34:f3:e5: bf:81:58:8d:63:89:a1:3c:bc:79:9c:f8:a4:af:25:fb:88:84: f0:4a:4f:4a:da:b2:d1:18:11:f4:39:c3:ad:73:67:58:94:16: f0:26:2e:a7:b9:0b:0a:f6:4c:92:ae:81:8b:74:6c:6d:3b:49: 06:05:dc:d1:bc:7c:a2:79:35:e9:52:26:26:45:31:d4:b2:74: ff:26:8e:de:40:09:a7:14:3d:53:51:cc:74:7d:99:8c:38:75: 60:2c:9b:99:f7:e1:80:26:3d:0a:94:bf:d9:a9:75:ba:aa:b3: a5:1e:97:31:09:f4:20:b0:a5:10:87:c2:de:7a:f1:b1:cd:f1: 5a:a7:13:82:a3:eb:5d:54:0a:2b:14:10:8d:7f:c4:cb:98:50: 39:11:ec:bb:6c:21:d4:c3:8d:07:09:c8:11:37:0b:2b:a0:64: eb:95:f8:ce:94:29:4e:39:0a:32:f2:49:21:5f:12:5c:ff:cc: a4:23:35:e7:85:67:79:a2:7a:c5:45:39:37:b0:ea:6c:6c:66: 7d:b6:44:35:9f:29:88:f8:e6:06:19:d5:80:f4:9d:ce:00:89: bf:d9:21:2c:ea:11:9f:c9:b3:5d:7f:e3:7c:c2:75:7d:cf:82: fa:4e:ee:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMHLTn/k9NmUmDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk M2Q5ZGJjMmYtMjIwMi00OTI0LWExN2YtM2I5ZWFjY2FiMDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteL0+IjPnEceijpc3VTjXI3xumpPn96wJb/U 9bgKkQPsLEIrsl+1QXtsrOmnUFjOv6cVijjvovbYswUGW+V0YaIYrnpN8zH+amAT uTTMbNUyEVkS8ky/gZo2ZQRVi9O9R9wukOciUvn8wL7Obs8hXL3OXlvdwCm9YSAQ mmpL4RVk4Bdsgy8hEWdT4ciKrVK0emQI2KBXNh8OaU1txozds1qm4tzrnG892DsH eTcOYffrBeqG6g/8c8qvPiNXgpywH/Ay6/rJeHNdjOd3wFfsvO+h58T+Ae6n3Qxk Lq6YbBGRfbXEADBUsSrZFkJf4/m8Qi6oKkgF0SgA2Hr5pijUWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQ8PLgoh+D4qKGZ13QMcwUGgWCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY1NjhmMmUtYTBlNi0z MDk3LThlY2MtMGJmZTk2YmJjODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaEoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQmFGBPuYZ9WG1tV0W5lDTz5b+BWI1jiaE8vHmc+KSvJfuIhPBKT0ra stEYEfQ5w61zZ1iUFvAmLqe5Cwr2TJKugYt0bG07SQYF3NG8fKJ5NelSJiZFMdSy dP8mjt5ACacUPVNRzHR9mYw4dWAsm5n34YAmPQqUv9mpdbqqs6UelzEJ9CCwpRCH wt568bHN8VqnE4Kj611UCisUEI1/xMuYUDkR7LtsIdTDjQcJyBE3CyugZOuV+M6U KU45CjLySSFfElz/zKQjNeeFZ3miesVFOTew6mxsZn22RDWfKYj45gYZ1YD0nc4A ib/ZISzqEZ/Js11/43zCdX3PgvpO7j0= -----END CERTIFICATE-----Generated at Sat Dec 6 20:01:11 2025 by rpki-client