This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3e7838-7192-3739-9eca-ebd44eb612e3.roa File: bf3e7838-7192-3739-9eca-ebd44eb612e3.roa (raw, json) Hash identifier: bChwm9ydd83Ypt3UYsA6zTgL/gQcB7n4f2L9W5vznAk= Subject key identifier: 44:E9:85:1B:50:A2:DD:D3:F0:B3:D8:B8:D0:49:7A:D2:63:FA:2C:D4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C215B9103740A808F9D417EB0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3e7838-7192-3739-9eca-ebd44eb612e3.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 396595 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:91:03:74:0a:80:8f:9d:41:7e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=af320646-b504-4f69-9857-59344457af1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:21:a7:bb:df:42:8b:1c:66:d6:44:5a:f4:e6: 3d:de:6d:cf:6b:c6:4c:91:a7:a2:f2:f8:33:c4:b9: 11:6a:53:93:ec:4d:53:2e:06:48:3c:37:d8:87:04: f1:4a:af:f7:64:16:c1:c3:0c:0d:7f:4b:73:f9:be: 14:fa:63:4d:b4:d9:f8:89:24:04:42:dc:58:f7:fd: 24:23:22:19:bf:c1:2e:0d:da:59:1e:a0:5b:55:87: 88:e0:56:64:0e:0f:d8:c4:af:26:e6:25:f8:5d:c4: 4c:a0:a2:60:75:03:44:17:2a:1d:83:5e:d6:cf:d6: 72:16:93:4f:1a:42:cf:1e:d0:77:44:d9:e1:ce:76: 90:c9:96:3e:a7:67:92:7a:bb:80:64:b5:3b:b8:cb: 85:7c:2a:d9:be:ec:06:0f:72:2b:59:8f:1c:22:4c: f6:8a:a1:b5:76:62:b2:e9:16:f1:b9:89:db:3a:b0: 0c:73:86:96:a0:63:39:9d:ed:30:04:bc:a5:13:78: c2:46:fc:69:45:90:76:b5:f8:2f:43:88:2d:9e:42: 68:30:98:03:b9:9e:bb:7f:28:db:23:7e:cf:84:80: 08:17:ae:b7:69:36:ca:cc:71:3c:94:fe:da:eb:7f: 44:4c:49:0e:a9:d3:e4:ac:43:5c:6b:52:e2:cb:e6: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E9:85:1B:50:A2:DD:D3:F0:B3:D8:B8:D0:49:7A:D2:63:FA:2C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3e7838-7192-3739-9eca-ebd44eb612e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:4e:2d:c9:4b:7e:8a:d6:de:cb:09:09:4d:8c:d4:54:c3:98: 10:e6:32:7d:e0:71:b6:da:66:97:07:82:54:72:56:d7:ad:c1: 64:1c:b1:46:f4:3a:9b:5f:c5:4d:e9:55:fb:49:07:aa:c4:dd: e4:f6:5a:2f:f8:f2:73:f4:bf:3d:9e:cb:5b:85:fb:d4:f6:a8: dd:bd:8f:24:b2:2c:19:44:34:01:17:ca:19:53:81:42:7e:ed: 6a:3e:51:30:98:60:e7:62:a7:b6:57:ea:e7:54:1d:37:3c:f4: 1b:10:12:a2:61:73:29:72:aa:79:e8:ce:0f:39:fa:ad:39:89: 14:98:07:b4:cd:8d:18:66:3f:81:54:05:f2:c3:03:52:7c:3e: 04:b3:e2:38:a2:99:92:c1:80:d6:f5:57:fe:4a:73:9d:1b:1f: 95:78:e9:a2:4f:4c:c4:53:fb:17:5f:d0:eb:52:1f:dd:57:27: 06:96:46:60:b1:90:1e:85:5c:fe:e7:57:3b:70:85:4d:fe:fc: db:24:8c:91:dc:2b:82:9d:d6:bf:59:5f:3a:89:15:48:81:45: f7:30:cf:75:d0:bb:1f:0a:c6:b9:37:e8:37:58:e4:33:8c:5f: 32:4c:10:93:23:db:c3:da:db:84:7b:73:f4:5d:4f:ec:21:2f: c9:09:16:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhW5EDdAqAj51BfrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk YWYzMjA2NDYtYjUwNC00ZjY5LTk4NTctNTkzNDQ0NTdhZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyGnu99Cixxm1kRa9OY93m3Pa8ZMkaei8vgz xLkRalOT7E1TLgZIPDfYhwTxSq/3ZBbBwwwNf0tz+b4U+mNNtNn4iSQEQtxY9/0k IyIZv8EuDdpZHqBbVYeI4FZkDg/YxK8m5iX4XcRMoKJgdQNEFyodg17Wz9ZyFpNP GkLPHtB3RNnhznaQyZY+p2eSeruAZLU7uMuFfCrZvuwGD3IrWY8cIkz2iqG1dmKy 6RbxuYnbOrAMc4aWoGM5ne0wBLylE3jCRvxpRZB2tfgvQ4gtnkJoMJgDuZ67fyjb I37PhIAIF663aTbKzHE8lP7a639ETEkOqdPkrENca1Liy+bUtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETphRtQot3T8LPYuNBJetJj+izUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYzZTc4MzgtNzE5Mi0z NzM5LTllY2EtZWJkNDRlYjYxMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItOLclLforW3ssJCU2M1FTDmBDmMn3gcbbaZpcHglRyVtetwWQcsUb0 OptfxU3pVftJB6rE3eT2Wi/48nP0vz2ey1uF+9T2qN29jySyLBlENAEXyhlTgUJ+ 7Wo+UTCYYOdip7ZX6udUHTc89BsQEqJhcylyqnnozg85+q05iRSYB7TNjRhmP4FU BfLDA1J8PgSz4jiimZLBgNb1V/5Kc50bH5V46aJPTMRT+xdf0OtSH91XJwaWRmCx kB6FXP7nVztwhU3+/NskjJHcK4Kd1r9ZXzqJFUiBRfcwz3XQux8Kxrk36DdY5DOM XzJMEJMj28Pa24R7c/RdT+whL8kJFpo= -----END CERTIFICATE-----Generated at Sun Dec 14 15:46:54 2025 by rpki-client