This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa File: c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa (raw, json) Hash identifier: h2LrHdagK1tHgp0Q87a5eBzxuemKiKfLcF8f9cyzub0= Subject key identifier: EA:F3:7A:65:99:F5:DE:AC:7D:88:60:37:D5:91:3C:5D:3B:78:46:D8 Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584C06D5FEA45946A3F2906F1180 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa Signing time: Sun 30 Nov 2025 02:00:31 +0000 ROA not before: Sun 30 Nov 2025 02:00:31 +0000 ROA not after: Sat 28 Feb 2026 02:00:31 +0000 asID: 46450 IP address blocks: 104.225.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:06:d5:fe:a4:59:46:a3:f2:90:6f:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Nov 30 02:00:31 2025 GMT Not After : Feb 28 02:00:31 2026 GMT Subject: CN=c5e32028-3414-410f-a900-e1abc8343db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3e:cc:de:ee:a9:2d:9f:1c:f1:b5:50:7d:65: d3:0d:eb:e7:97:c9:e3:51:22:05:9a:32:35:9b:61: 71:8b:64:1f:ae:f2:e0:6b:4a:3d:3f:77:15:43:30: 69:4b:92:a6:c7:d3:e1:72:49:60:5c:d2:be:db:94: 78:20:9b:38:1c:78:83:ff:b2:3d:f4:15:41:80:4c: fe:a3:91:c6:b1:ac:ad:e2:11:55:5f:23:35:8c:9c: e1:e4:b9:ee:a9:9c:eb:6a:f6:66:67:3d:16:7d:73: 9b:db:4e:b7:4e:0a:f0:a9:df:14:57:50:9b:75:23: c5:d4:ae:82:3a:f5:9c:a5:55:7e:46:66:8a:44:01: ca:93:ae:bf:d0:b8:88:28:26:74:a6:78:ae:49:33: 3b:e0:97:53:af:d5:93:55:77:fc:a7:61:57:e8:68: a9:dc:7b:8f:d4:1b:90:56:bf:83:50:56:40:5d:73: 39:7c:24:6a:e0:a8:3d:c2:e7:44:aa:2e:9c:2d:40: 8a:88:3b:40:f1:49:2e:d9:4f:6c:db:39:b7:5e:92: 1f:f0:03:f9:fc:f2:ab:d7:21:df:40:a8:77:68:7b: ae:fe:b8:26:23:ed:d5:d3:f4:1c:70:5f:72:3f:40: 2f:73:2a:76:56:2f:8a:e2:74:f6:36:6c:f0:45:68: 5f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F3:7A:65:99:F5:DE:AC:7D:88:60:37:D5:91:3C:5D:3B:78:46:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 104.225.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:1b:9a:65:17:7b:2f:e0:bd:7f:f4:f7:b0:7b:64:19:ec:3d: 0f:60:4b:44:45:ba:01:ac:4a:45:e7:9b:7a:6b:24:14:37:ec: 99:6b:3d:b6:3b:e3:aa:45:ba:92:ce:63:55:2f:fb:d4:10:97: 71:d1:bb:d8:2e:2b:f2:65:72:12:01:50:12:ca:9b:91:67:a8: f1:3b:7d:4f:9f:36:50:aa:e8:f8:f3:33:58:65:23:d7:b0:a8: 75:51:ba:50:c5:f6:0f:0d:c6:df:db:40:02:7e:7d:d4:3e:ab: 35:4e:1f:39:cf:dd:cb:bf:b2:0f:c6:dc:54:f8:c3:d7:ae:23: 9d:36:8a:6b:58:2f:1a:fc:16:47:43:ff:4d:ec:95:14:72:b7: 97:7d:1d:bd:66:40:65:86:ac:5f:04:41:c7:ea:d8:25:f4:69: b0:11:17:31:60:3a:a6:c1:08:39:ab:8c:11:26:83:92:af:4c: 08:87:11:9a:19:2f:f5:5b:d0:70:4d:cb:c3:fc:bc:62:91:40: fd:1f:ac:13:c2:c0:e0:75:0a:e1:6b:65:48:74:59:94:99:81: 08:92:2d:cd:b7:0e:9b:ed:23:6d:ec:05:5c:ed:d8:d8:fa:b3: 55:6a:00:87:14:35:52:fa:3a:5e:f0:6e:ef:4f:34:61:65:02: 4f:87:4f:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwG1f6kWUaj8pBvEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MTEzMDAyMDAzMVoXDTI2MDIyODAyMDAzMVowLzEtMCsGA1UEAxMk YzVlMzIwMjgtMzQxNC00MTBmLWE5MDAtZTFhYmM4MzQzZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD7M3u6pLZ8c8bVQfWXTDevnl8njUSIFmjI1 m2Fxi2QfrvLga0o9P3cVQzBpS5Kmx9PhcklgXNK+25R4IJs4HHiD/7I99BVBgEz+ o5HGsayt4hFVXyM1jJzh5LnuqZzravZmZz0WfXOb2063Tgrwqd8UV1CbdSPF1K6C OvWcpVV+RmaKRAHKk66/0LiIKCZ0pniuSTM74JdTr9WTVXf8p2FX6Gip3HuP1BuQ Vr+DUFZAXXM5fCRq4Kg9wudEqi6cLUCKiDtA8Uku2U9s2zm3XpIf8AP5/PKr1yHf QKh3aHuu/rgmI+3V0/QccF9yP0Avcyp2Vi+K4nT2NmzwRWhfJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrzemWZ9d6sfYhgN9WRPF07eEbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvYzlkN2Y0YjAtMDdlZi0z YzYzLTk3MzktNzlkNTlkOGE5NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaOHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgbmmUXey/gvX/097B7ZBnsPQ9gS0RFugGsSkXnm3prJBQ37JlrPbY7 46pFupLOY1Uv+9QQl3HRu9guK/JlchIBUBLKm5FnqPE7fU+fNlCq6PjzM1hlI9ew qHVRulDF9g8Nxt/bQAJ+fdQ+qzVOHznP3cu/sg/G3FT4w9euI502imtYLxr8FkdD /03slRRyt5d9Hb1mQGWGrF8EQcfq2CX0abARFzFgOqbBCDmrjBEmg5KvTAiHEZoZ L/Vb0HBNy8P8vGKRQP0frBPCwOB1CuFrZUh0WZSZgQiSLc23DpvtI23sBVzt2Nj6 s1VqAIcUNVL6Ol7wbu9PNGFlAk+HT6U= -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:36 2025 by rpki-client