This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/654f7b5a-9dd1-34dc-99ee-fb5f7a10a901.roa
File: 654f7b5a-9dd1-34dc-99ee-fb5f7a10a901.roa (raw, json)
Hash identifier: +XPg5fIEvwcrtQVdIpUJL4bvAi6p+9HrOhbT2bcXAgE=
Subject key identifier: 89:9F:F0:32:9D:D8:9F:DC:85:1B:F8:78:F8:28:DC:5E:C9:80:BC:3F
Certificate issuer: /CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
Certificate serial: 010D0C9F4328584BDA2AFFB3C21DD4C66C567580
Authority key identifier: 71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/654f7b5a-9dd1-34dc-99ee-fb5f7a10a901.roa
Signing time: Fri 14 Nov 2025 02:00:30 +0000
ROA not before: Fri 14 Nov 2025 02:00:30 +0000
ROA not after: Thu 12 Feb 2026 02:00:30 +0000
asID: 36671
IP address blocks: 208.77.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:da:2a:ff:b3:c2:1d:d4:c6:6c:56:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
Validity
Not Before: Nov 14 02:00:30 2025 GMT
Not After : Feb 12 02:00:30 2026 GMT
Subject: CN=f092b393-ce9f-41f6-a5b3-cf7752d5f7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d5:b3:f3:3e:b3:b9:36:27:54:c6:ab:0e:ef:
ac:15:8d:b3:ce:e2:bc:e8:03:00:d3:48:10:40:79:
1c:ac:94:15:a2:b7:3f:74:55:80:13:20:75:c9:9d:
f2:7c:2c:17:ad:b1:73:0c:b7:3b:3c:e2:08:0d:46:
a7:c0:f2:33:53:f0:5a:51:b9:48:b0:a0:7e:43:b9:
e1:29:71:89:86:75:22:9e:28:14:06:1a:c3:d5:4b:
b3:35:5b:fc:4d:08:8e:a4:82:9d:9e:d5:f6:e3:47:
ab:f9:4d:9b:38:9c:6f:02:c4:a3:42:5f:1b:54:5b:
8f:54:cb:42:0f:1e:f5:63:7b:2c:d7:e0:ec:3e:32:
fc:f9:9b:6a:24:aa:0b:6a:be:0b:a3:03:8a:2b:bb:
c2:a9:13:b9:47:d6:fe:5d:ac:25:66:ed:57:4a:a7:
cb:bd:b8:a6:8a:e3:db:8b:aa:f1:26:45:ee:e3:53:
ca:28:42:ff:97:d2:0b:f7:65:4d:84:50:12:69:b8:
3d:a4:be:02:be:49:ed:78:2a:46:fa:37:6f:18:f4:
2c:6c:fa:07:f4:b3:68:c7:de:99:1d:7a:9d:d1:7d:
04:e5:a4:26:dc:a0:90:a9:c0:e3:03:51:17:26:37:
7c:43:cb:9d:e1:55:50:1d:33:2d:e8:ae:91:ee:e7:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9F:F0:32:9D:D8:9F:DC:85:1B:F8:78:F8:28:DC:5E:C9:80:BC:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/654f7b5a-9dd1-34dc-99ee-fb5f7a10a901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl
X509v3 Authority Key Identifier:
keyid:71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
sbgp-ipAddrBlock: critical
IPv4:
208.77.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:65:4d:71:e6:01:03:12:e1:ed:38:df:f9:e5:b0:8f:09:c5:
72:a3:6d:6a:75:15:d9:8c:c7:b4:39:e7:51:2b:dd:f2:7d:a1:
45:c8:e6:9c:51:68:e1:df:e0:31:0a:e1:80:76:86:ca:e0:0f:
90:19:ee:13:ed:2c:1e:c1:43:e8:36:c7:2a:98:fe:60:1b:85:
7a:a4:de:a4:ac:b7:f1:38:fe:ef:ad:4b:bb:4c:8b:e1:a7:ac:
c0:1b:55:8d:db:f3:0b:c3:88:b3:34:5c:60:c6:2e:7d:c5:90:
82:bc:85:77:73:e7:4d:e5:28:af:22:5e:fe:ae:a3:47:f7:a4:
6e:6b:f2:68:92:0e:d9:b9:52:06:7b:6a:72:9a:c0:10:81:9a:
fe:e2:de:a6:40:1e:46:c3:c2:5a:ba:34:90:d0:2b:b9:56:34:
89:5c:ac:dc:ba:32:c6:69:e7:46:32:ac:18:30:ca:bb:5a:91:
22:3d:64:e8:6d:69:35:2f:1a:86:62:f7:69:18:05:5b:59:69:
2e:60:88:af:50:ed:97:2d:43:fe:73:f3:8a:0a:dc:89:c6:5c:
b6:83:03:2f:df:37:b9:08:c9:99:29:77:c3:d6:15:b9:72:61:
67:ea:56:d2:43:2b:73:00:e0:72:fc:36:31:ec:d9:58:09:b7:
4d:35:d0:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvaKv+zwh3UxmxWdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM1MTUyMDYtZmZlNi00YmFmLTlkZGUtMWZhYTBhMmU0
ZGZlMB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk
ZjA5MmIzOTMtY2U5Zi00MWY2LWE1YjMtY2Y3NzUyZDVmN2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59Wz8z6zuTYnVMarDu+sFY2zzuK86AMA00gQ
QHkcrJQVorc/dFWAEyB1yZ3yfCwXrbFzDLc7POIIDUanwPIzU/BaUblIsKB+Q7nh
KXGJhnUinigUBhrD1UuzNVv8TQiOpIKdntX240er+U2bOJxvAsSjQl8bVFuPVMtC
Dx71Y3ss1+DsPjL8+ZtqJKoLar4LowOKK7vCqRO5R9b+XawlZu1XSqfLvbimiuPb
i6rxJkXu41PKKEL/l9IL92VNhFASabg9pL4CvknteCpG+jdvGPQsbPoH9LNox96Z
HXqd0X0E5aQm3KCQqcDjA1EXJjd8Q8ud4VVQHTMt6K6R7udBuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImf8DKd2J/chRv4ePgo3F7JgLw/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYzUx
NTIwNi1mZmU2LTRiYWYtOWRkZS0xZmFhMGEyZTRkZmUvNjU0ZjdiNWEtOWRkMS0z
NGRjLTk5ZWUtZmI1ZjdhMTBhOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmM1MTUyMDYtZmZlNi00YmFmLTlk
ZGUtMWZhYTBhMmU0ZGZlL2JjNTE1MjA2LWZmZTYtNGJhZi05ZGRlLTFmYWEwYTJl
NGRmZS5jcmwwHwYDVR0jBBgwFoAUcQhom/JCWMw7vZTW+NfV67Yv5YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYzUxNTIwNi1mZmU2LTRiYWYtOWRkZS0xZmFh
MGEyZTRkZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E3UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHplTXHmAQMS4e043/nlsI8JxXKjbWp1FdmMx7Q551Er3fJ9oUXI5pxR
aOHf4DEK4YB2hsrgD5AZ7hPtLB7BQ+g2xyqY/mAbhXqk3qSst/E4/u+tS7tMi+Gn
rMAbVY3b8wvDiLM0XGDGLn3FkIK8hXdz503lKK8iXv6uo0f3pG5r8miSDtm5UgZ7
anKawBCBmv7i3qZAHkbDwlq6NJDQK7lWNIlcrNy6MsZp50YyrBgwyrtakSI9ZOht
aTUvGoZi92kYBVtZaS5giK9Q7ZctQ/5z84oK3InGXLaDAy/fN7kIyZkpd8PWFbly
YWfqVtJDK3MA4HL8NjHs2VgJt0010Gk=
-----END CERTIFICATE-----
Generated at Tue Nov 25 09:11:49 2025 by rpki-client