This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf1eaebe-7b86-3b3a-9558-befca378cd81.roa File: bf1eaebe-7b86-3b3a-9558-befca378cd81.roa (raw, json) Hash identifier: SpiSIXjdRr8E8i+XWTiVsSKDYYPzn1ED/FSNrvGzwSI= Subject key identifier: FB:28:9F:F4:7C:09:05:4B:5B:47:1F:C3:7D:63:73:D5:44:7E:10:F6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4176830F8264294EC19D2D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf1eaebe-7b86-3b3a-9558-befca378cd81.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 173.23.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:83:0f:82:64:29:4e:c1:9d:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=1f5b4deb-3dff-4265-b7ea-c33a9604d280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:09:a8:7f:2e:94:b4:ca:15:f1:c4:3f:3d:bc: 53:1d:c9:1c:77:39:4c:5e:d6:a2:a7:cc:96:5c:f9: 56:87:f8:81:c5:78:67:38:52:bb:aa:44:c0:70:e3: 05:80:09:05:9c:4d:a0:e1:1d:0b:53:39:d4:50:46: 84:9c:ad:42:5a:ba:2a:f7:a6:86:81:b2:77:c6:39: 56:7b:e9:3b:e5:78:93:72:33:45:ed:96:43:2c:b4: 17:ea:af:0e:12:6f:ed:ce:8c:e2:ba:13:44:3c:27: bc:9c:75:d0:3d:98:21:7d:3c:aa:2d:88:bd:90:d6: 16:12:77:9c:c0:ed:20:46:71:68:a0:40:57:a1:ab: 50:ee:48:72:af:4d:34:e6:1d:d2:07:00:86:b1:08: 7b:73:82:88:94:84:73:7d:0b:85:10:06:d4:8e:da: 8a:11:38:f0:27:f0:0e:51:32:aa:bc:56:20:4c:96: be:18:51:c2:1c:40:3a:fb:73:cb:18:00:9b:b8:ec: f6:38:26:d4:a7:0f:9b:b9:f4:47:d4:98:7e:30:b0: 8b:a4:52:ea:cf:f0:c4:f7:18:8e:42:27:fa:4f:d9: c1:38:43:0c:a2:36:4c:9c:91:d2:ad:3f:40:e8:0a: c5:57:dc:27:da:fe:da:0a:76:7c:1c:ad:31:92:24: a9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:28:9F:F4:7C:09:05:4B:5B:47:1F:C3:7D:63:73:D5:44:7E:10:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf1eaebe-7b86-3b3a-9558-befca378cd81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:2e:d1:e7:b7:71:6c:0c:86:58:ba:b1:8d:86:8f:85:66:64: dc:9b:2b:2c:d4:c3:26:f2:d6:9f:0b:1a:be:c7:4b:bf:fa:39: c8:47:87:87:74:a0:ad:80:56:aa:ac:d6:d7:80:a7:e5:44:c9: 84:23:25:40:c9:f4:02:90:c7:90:8f:f6:61:7d:44:f0:3c:50: 83:74:3b:7f:88:a3:aa:af:52:a8:d3:73:e9:0b:38:d0:e6:cf: 43:a6:24:04:c0:bd:52:18:b9:59:d4:6e:f6:7e:cc:d2:84:dd: 27:bb:f5:ed:da:5d:f1:af:ee:e4:ec:e3:05:e8:1e:3c:00:e4: 95:10:da:d5:3e:0e:fc:30:b3:86:0f:0a:90:91:50:82:ff:8e: 53:c8:3a:8d:77:a6:4e:68:13:18:fb:f2:11:e4:90:16:f3:d2: 9d:cf:d0:05:92:a8:92:47:e6:ac:fe:dd:8e:c4:ec:36:42:ed: 56:5a:94:2d:1a:cc:a0:01:35:7b:43:58:ef:71:97:69:2d:85: 0e:19:16:31:3e:a5:aa:2b:57:a4:77:c9:84:c5:b5:1f:ad:65: 55:65:82:e4:3d:6c:b7:b7:09:0a:3d:04:5c:d9:3c:f2:5f:c9: 74:23:59:73:f9:62:87:c0:a9:49:f3:be:5a:e1:2d:56:65:43: 76:02:76:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdoMPgmQpTsGdLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk MWY1YjRkZWItM2RmZi00MjY1LWI3ZWEtYzMzYTk2MDRkMjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wmofy6UtMoV8cQ/PbxTHckcdzlMXtaip8yW XPlWh/iBxXhnOFK7qkTAcOMFgAkFnE2g4R0LUznUUEaEnK1CWroq96aGgbJ3xjlW e+k75XiTcjNF7ZZDLLQX6q8OEm/tzoziuhNEPCe8nHXQPZghfTyqLYi9kNYWEnec wO0gRnFooEBXoatQ7khyr0005h3SBwCGsQh7c4KIlIRzfQuFEAbUjtqKETjwJ/AO UTKqvFYgTJa+GFHCHEA6+3PLGACbuOz2OCbUpw+bufRH1Jh+MLCLpFLqz/DE9xiO Qif6T9nBOEMMojZMnJHSrT9A6ArFV9wn2v7aCnZ8HK0xkiSpswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPson/R8CQVLW0cfw31jc9VEfhD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmYxZWFlYmUtN2I4Ni0z YjNhLTk1NTgtYmVmY2EzNzhjZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRd8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIu0ee3cWwMhli6sY2Gj4VmZNybKyzUwyby1p8LGr7HS7/6OchHh4d0 oK2AVqqs1teAp+VEyYQjJUDJ9AKQx5CP9mF9RPA8UIN0O3+Io6qvUqjTc+kLONDm z0OmJATAvVIYuVnUbvZ+zNKE3Se79e3aXfGv7uTs4wXoHjwA5JUQ2tU+Dvwws4YP CpCRUIL/jlPIOo13pk5oExj78hHkkBbz0p3P0AWSqJJH5qz+3Y7E7DZC7VZalC0a zKABNXtDWO9xl2kthQ4ZFjE+paorV6R3yYTFtR+tZVVlguQ9bLe3CQo9BFzZPPJf yXQjWXP5YofAqUnzvlrhLVZlQ3YCdm8= -----END CERTIFICATE-----Generated at Sun Jan 11 01:45:21 2026 by rpki-client