This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdc03c6a-67dd-311e-ad5a-c56dde3a4589.roa File: bdc03c6a-67dd-311e-ad5a-c56dde3a4589.roa (raw, json) Hash identifier: lv0PMv4GXqahCZWaUBOR8OEkq3ZLNgm9zjZ/PmI4FrY= Subject key identifier: 8C:32:CB:F2:A9:EB:80:20:A3:01:62:0D:11:39:66:9F:A8:4A:74:35 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BEF2968C35779407E2354FF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdc03c6a-67dd-311e-ad5a-c56dde3a4589.roa Signing time: Fri 21 Nov 2025 14:29:20 +0000 ROA not before: Fri 21 Nov 2025 14:29:20 +0000 ROA not after: Thu 19 Feb 2026 14:29:20 +0000 asID: 30036 IP address blocks: 173.24.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:29:68:c3:57:79:40:7e:23:54:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 21 14:29:20 2025 GMT Not After : Feb 19 14:29:20 2026 GMT Subject: CN=a8a4cbfa-94c2-4822-a013-d2afd14a71df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:0a:2d:08:6a:97:14:c2:d2:79:e9:11:98: f5:e1:c6:35:37:d5:2e:f9:f7:ad:e2:d8:86:e5:41: a0:da:da:17:cd:e8:3f:84:2b:43:bd:f1:29:b1:40: 18:0d:68:95:a1:c2:2f:f4:5b:32:2c:e1:05:d3:be: 90:a3:1b:b6:0a:ce:d0:08:c5:c1:98:a0:7f:36:b6: 09:31:81:50:48:a9:e2:1b:80:56:9c:5d:72:b0:04: 0e:98:1a:0f:e0:88:c4:db:ab:ba:b3:da:3a:f7:5a: 96:48:85:16:d5:35:80:a5:73:bc:36:82:44:6f:83: 3a:13:ea:b9:47:4e:36:56:c0:31:da:ea:38:7a:48: 70:65:12:72:cd:75:62:8d:89:6b:17:d6:48:ad:81: a8:07:04:da:83:8a:c4:ad:05:f6:e7:c8:ec:93:99: 61:e9:c8:e1:51:39:2d:67:c6:fb:86:29:96:d9:31: 0a:e4:22:70:30:93:b6:9c:cb:c8:08:7c:c0:5f:ce: af:2d:a0:0f:f7:dd:bb:42:54:5d:4d:98:59:0c:b2: 2d:ed:87:d0:d8:ce:94:38:73:28:08:fe:cd:bc:6d: 42:73:2e:d3:6d:a9:99:47:3d:84:52:0a:21:c4:95: d8:6e:a3:be:9d:fe:9c:ce:89:37:7e:b3:8f:a3:49: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:32:CB:F2:A9:EB:80:20:A3:01:62:0D:11:39:66:9F:A8:4A:74:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdc03c6a-67dd-311e-ad5a-c56dde3a4589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ee:22:fa:85:56:d8:4b:d0:00:19:c8:21:22:b3:85:ea:30: dd:53:ad:22:a0:0a:83:87:3d:b7:30:0f:ef:bb:5b:07:9d:48: e7:e0:0c:44:52:7f:96:e6:9b:ad:b0:53:db:da:34:41:3d:53: cf:8c:7a:6b:04:b3:4d:59:67:e4:c5:e8:6b:e8:a1:3a:89:de: 40:44:e6:15:7b:27:d3:87:9f:94:3c:1a:a0:7e:a5:c0:ef:c4: 09:2b:4a:0d:3d:d2:80:03:b2:d4:ea:c6:5c:f8:1d:5b:18:70: 2e:0d:97:d4:fa:6f:f7:19:1c:73:88:c2:43:80:98:64:6e:6e: 11:58:49:11:31:62:ed:b7:e5:06:ef:61:e3:b3:dd:4b:83:79: 7f:08:69:a2:f9:dd:8c:80:ac:b4:05:92:f7:81:9e:90:7e:f2: b8:da:76:f4:bb:1b:23:09:32:95:3f:ba:b5:a8:f1:69:e9:fe: d2:80:26:57:b9:7d:b9:bd:53:a5:57:c5:59:56:e0:f3:42:e0: 37:9e:17:7f:26:94:65:a7:63:2f:96:4c:3c:42:b9:b5:4c:68: 58:8d:16:09:27:b2:0e:ef:39:d1:54:25:cb:90:e1:ce:cd:e5: ea:88:70:da:51:ae:f5:ee:ed:ef:b1:f4:95:36:6c:16:30:99: c6:69:f5:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvKWjDV3lAfiNU/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEyMTE0MjkyMFoXDTI2MDIxOTE0MjkyMFowLzEtMCsGA1UEAxMk YThhNGNiZmEtOTRjMi00ODIyLWEwMTMtZDJhZmQxNGE3MWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm8KLQhqlxTC0nnpEZj14cY1N9Uu+fet4tiG 5UGg2toXzeg/hCtDvfEpsUAYDWiVocIv9FsyLOEF076Qoxu2Cs7QCMXBmKB/NrYJ MYFQSKniG4BWnF1ysAQOmBoP4IjE26u6s9o691qWSIUW1TWApXO8NoJEb4M6E+q5 R042VsAx2uo4ekhwZRJyzXVijYlrF9ZIrYGoBwTag4rErQX258jsk5lh6cjhUTkt Z8b7himW2TEK5CJwMJO2nMvICHzAX86vLaAP9927QlRdTZhZDLIt7YfQ2M6UOHMo CP7NvG1Ccy7TbamZRz2EUgohxJXYbqO+nf6czok3frOPo0nceQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwyy/Kp64AgowFiDRE5Zp+oSnQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmRjMDNjNmEtNjdkZC0z MTFlLWFkNWEtYzU2ZGRlM2E0NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjuIvqFVthL0AAZyCEis4XqMN1TrSKgCoOHPbcwD++7WwedSOfgDERS f5bmm62wU9vaNEE9U8+MemsEs01ZZ+TF6GvooTqJ3kBE5hV7J9OHn5Q8GqB+pcDv xAkrSg090oADstTqxlz4HVsYcC4Nl9T6b/cZHHOIwkOAmGRubhFYSRExYu235Qbv YeOz3UuDeX8IaaL53YyArLQFkveBnpB+8rjadvS7GyMJMpU/urWo8Wnp/tKAJle5 fbm9U6VXxVlW4PNC4DeeF38mlGWnYy+WTDxCubVMaFiNFgknsg7vOdFUJcuQ4c7N 5eqIcNpRrvXu7e+x9JU2bBYwmcZp9Wg= -----END CERTIFICATE-----Generated at Tue Nov 25 10:28:08 2025 by rpki-client