This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa File: bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa (raw, json) Hash identifier: tQvIvJMyBlWelWGyhCSwurDzgt7d29Qwj7TvwGCjuA0= Subject key identifier: E8:F7:09:03:88:1A:5E:4C:77:BE:97:FF:25:7C:A2:6F:01:52:B2:B7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584C0C6B4FE4FA6DDC5A07632C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa Signing time: Tue 02 Dec 2025 02:00:30 +0000 ROA not before: Tue 02 Dec 2025 02:00:30 +0000 ROA not after: Mon 02 Mar 2026 02:00:30 +0000 asID: 0 IP address blocks: 204.254.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:6b:4f:e4:fa:6d:dc:5a:07:63:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Dec 2 02:00:30 2025 GMT Not After : Mar 2 02:00:30 2026 GMT Subject: CN=66a856ac-4fc2-42b8-af1f-886052e1c4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1f:47:c5:bf:c4:5b:ec:b6:b9:63:96:a9:5d: eb:a7:70:5e:6b:93:eb:82:73:b0:07:fd:95:22:d8: f3:28:32:b0:ba:cb:13:8f:49:e8:51:f8:d5:09:20: f7:10:d1:c9:7d:3d:0b:d2:66:08:50:7e:50:11:99: 89:a5:33:27:80:b1:6a:fa:5c:e5:b9:23:c5:88:1a: 70:00:bb:96:2b:db:05:e7:ec:3c:85:49:09:8b:6a: fe:40:c7:f5:ad:03:00:79:c3:50:cf:48:5b:19:54: aa:5e:74:ec:82:ca:56:cf:1d:5c:68:cc:9c:91:6a: 8a:68:20:b4:9e:fe:44:31:41:93:47:10:df:20:36: 61:8a:49:30:ce:90:6a:6b:b0:d5:41:0f:6d:e8:76: c4:07:e8:1d:89:d8:66:6f:f8:12:f5:d4:2a:f3:17: f9:dd:1f:81:28:65:47:15:9d:a4:5c:1c:db:94:65: ff:aa:91:e5:b1:de:e8:e4:8d:dd:b6:09:ea:32:df: 96:db:0f:8c:2e:62:ad:f1:43:46:21:74:9a:51:d1: 13:af:fa:9f:06:67:4c:61:20:e4:2c:a0:ff:a1:35: 48:93:14:94:f1:1d:94:a0:00:16:34:e7:f4:2c:f7: 8b:53:4f:e3:79:4f:db:4f:70:29:c7:cc:ea:7b:85: 4d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F7:09:03:88:1A:5E:4C:77:BE:97:FF:25:7C:A2:6F:01:52:B2:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 204.254.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0e:ed:f0:c4:71:0c:4b:6a:20:e1:15:4d:cd:61:2c:fb:74: aa:ad:9a:d3:79:f2:de:71:69:ef:e5:64:e5:d2:91:30:46:7e: 47:07:a2:cb:8b:0f:6a:04:79:91:a2:f3:d2:68:62:57:c6:7c: 55:a2:c4:d5:25:c6:2a:6b:ce:63:89:16:b1:0a:f9:34:28:2c: 94:f5:8f:6b:9b:4c:e3:af:fc:24:9f:44:2e:18:4d:d5:fe:d0: fc:43:8e:9c:92:2a:76:f5:5b:97:38:1f:65:61:7d:69:a0:a6: d8:36:1d:39:ae:f1:82:e3:75:b8:05:c6:c3:d8:df:95:e2:a5: 0f:8c:94:59:4c:9c:6f:89:a3:cc:08:de:cf:33:27:0a:fd:8b: 4c:88:19:b2:a2:18:a2:62:db:04:e9:57:9d:98:ce:28:eb:87: 5e:96:24:f3:62:99:70:3e:b6:83:6c:54:ef:58:c0:46:fb:1e: 13:5f:e8:b2:84:dd:64:10:07:b3:e9:cc:e8:32:b5:0c:72:a2: dc:25:9b:14:f3:14:45:27:96:8e:45:6c:76:4c:a6:b5:f8:eb: ee:bd:37:26:1b:1b:08:a0:09:fd:8f:a1:f7:ac:2c:12:a1:81: 02:cb:5d:d3:52:99:a6:49:c3:09:1e:5a:47:43:85:a0:5d:08: eb:0d:47:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwMa0/k+m3cWgdjLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTIwMjAyMDAzMFoXDTI2MDMwMjAyMDAzMFowLzEtMCsGA1UEAxMk NjZhODU2YWMtNGZjMi00MmI4LWFmMWYtODg2MDUyZTFjNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B9Hxb/EW+y2uWOWqV3rp3Bea5PrgnOwB/2V ItjzKDKwussTj0noUfjVCSD3ENHJfT0L0mYIUH5QEZmJpTMngLFq+lzluSPFiBpw ALuWK9sF5+w8hUkJi2r+QMf1rQMAecNQz0hbGVSqXnTsgspWzx1caMyckWqKaCC0 nv5EMUGTRxDfIDZhikkwzpBqa7DVQQ9t6HbEB+gdidhmb/gS9dQq8xf53R+BKGVH FZ2kXBzblGX/qpHlsd7o5I3dtgnqMt+W2w+MLmKt8UNGIXSaUdETr/qfBmdMYSDk LKD/oTVIkxSU8R2UoAAWNOf0LPeLU0/jeU/bT3Apx8zqe4VNHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOj3CQOIGl5Md76X/yV8om8BUrK3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmZmOGJlNzctMWNlNy0z NGNjLThkNTctNDRmYzZkM2E0MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzP54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoO7fDEcQxLaiDhFU3NYSz7dKqtmtN58t5xae/lZOXSkTBGfkcHosuL D2oEeZGi89JoYlfGfFWixNUlxiprzmOJFrEK+TQoLJT1j2ubTOOv/CSfRC4YTdX+ 0PxDjpySKnb1W5c4H2VhfWmgptg2HTmu8YLjdbgFxsPY35XipQ+MlFlMnG+Jo8wI 3s8zJwr9i0yIGbKiGKJi2wTpV52Yzijrh16WJPNimXA+toNsVO9YwEb7HhNf6LKE 3WQQB7PpzOgytQxyotwlmxTzFEUnlo5FbHZMprX46+69NyYbGwigCf2PofesLBKh gQLLXdNSmaZJwwkeWkdDhaBdCOsNR5I= -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:56 2025 by rpki-client