This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa File: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (raw, json) Hash identifier: um7x/JYlBzX90Z2XbTx+kXcIkiOQbFo+CcTcYyoS91g= Subject key identifier: 69:2E:9D:B6:18:0C:FC:88:0B:CC:23:FB:83:A2:44:86:57:36:55:83 Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584C109B6DC2499D744775561400 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa Signing time: Wed 03 Dec 2025 14:00:38 +0000 ROA not before: Wed 03 Dec 2025 14:00:38 +0000 ROA not after: Tue 03 Mar 2026 14:00:38 +0000 asID: 40867 IP address blocks: 74.114.72.0/21 maxlen: 21 172.86.240.0/21 maxlen: 21 208.90.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:9b:6d:c2:49:9d:74:47:75:56:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Dec 3 14:00:38 2025 GMT Not After : Mar 3 14:00:38 2026 GMT Subject: CN=337854ef-0057-4f96-85ae-24627ec15f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ed:a7:71:2e:54:17:3c:f3:3c:56:6c:d5:43: 60:7b:b9:d0:5a:02:67:85:1e:9c:57:02:b6:a7:ab: d2:8a:79:bd:af:2c:d7:3f:2d:a0:ca:f5:8d:f2:52: 42:aa:17:a8:5d:70:d3:7e:85:09:d4:7e:0a:47:b9: 2f:8c:eb:02:8a:43:f2:32:02:49:cb:7c:c0:ad:09: d5:22:2d:4b:87:b0:c2:2b:3b:0e:1a:cd:1f:71:8f: c8:5b:d2:46:7c:c6:f8:3f:ed:36:14:bd:c5:02:98: ab:95:96:c2:dc:69:09:f8:84:93:53:59:c2:07:09: 2e:8d:27:3c:ad:35:32:a2:0c:10:f0:ca:bd:c4:27: 4d:2a:44:1b:79:e6:40:21:3f:db:d7:5e:16:55:3c: cf:29:01:59:92:1f:15:06:5c:60:dc:62:8f:86:a7: d0:be:a3:4d:2f:32:64:dd:cd:7a:66:b5:8e:26:f5: 4f:6f:c5:b5:0b:ee:0d:dd:f9:8e:ba:b4:fd:34:9e: d7:ca:f5:f3:46:68:77:4f:7a:55:65:57:ae:dc:61: 72:e8:b5:a9:fe:91:80:8b:9b:0e:94:db:b6:e0:82: b8:64:46:ee:62:b8:5f:e2:0b:45:65:34:5a:dd:22: 1f:9b:ee:b3:17:0b:d9:3f:e2:d9:5b:70:1f:52:ae: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2E:9D:B6:18:0C:FC:88:0B:CC:23:FB:83:A2:44:86:57:36:55:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: 74.114.72.0/21 172.86.240.0/21 208.90.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:94:f2:b4:ae:bd:c4:f1:92:9c:dd:bf:9b:82:fa:8e:e7:e3: 26:24:6c:87:6b:cf:53:05:ee:59:ce:61:87:db:90:33:64:f6: bd:25:c9:99:67:c3:c3:69:83:0f:a9:a6:f6:fa:3a:2c:7b:d9: 5c:0a:d8:d2:f5:33:d2:50:36:a3:4d:9c:5e:ad:fa:a7:12:44: 5f:6f:f8:73:1d:86:5f:dc:38:39:6d:39:d9:65:a9:66:f6:20: a8:c0:87:64:2d:b9:83:e2:bc:0b:1d:95:22:63:40:95:51:bb: 03:07:ed:b9:dd:7c:33:6e:ce:a4:0c:b7:31:cb:18:6d:66:e3: 9a:85:f6:b9:13:c4:e4:b5:b1:f1:7f:2b:66:fb:87:4d:ec:0a: 58:dd:76:7b:8b:8d:a1:f7:91:6a:ce:d8:94:9b:f0:a7:31:a6: 57:6e:e5:77:0b:92:63:9b:37:b3:4f:9a:a9:bf:db:9a:d7:97: be:cd:c3:4d:4e:f6:b9:f5:0f:53:6b:a9:47:f7:42:4a:30:c1: 25:a5:52:8b:92:0f:bd:73:9f:bf:d1:0a:87:c0:16:02:7a:87: af:9e:5c:87:8b:79:d0:f5:44:8b:50:35:da:bc:fc:2f:e2:6b: 71:8b:ad:ed:9a:1f:3f:4b:ea:07:4f:1d:61:6a:59:6c:63:d3: b0:ee:69:59 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEwQm23CSZ10R3VWFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI1MTIwMzE0MDAzOFoXDTI2MDMwMzE0MDAzOFowLzEtMCsGA1UEAxMk MzM3ODU0ZWYtMDA1Ny00Zjk2LTg1YWUtMjQ2MjdlYzE1ZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+2ncS5UFzzzPFZs1UNge7nQWgJnhR6cVwK2 p6vSinm9ryzXPy2gyvWN8lJCqheoXXDTfoUJ1H4KR7kvjOsCikPyMgJJy3zArQnV Ii1Lh7DCKzsOGs0fcY/IW9JGfMb4P+02FL3FApirlZbC3GkJ+ISTU1nCBwkujSc8 rTUyogwQ8Mq9xCdNKkQbeeZAIT/b114WVTzPKQFZkh8VBlxg3GKPhqfQvqNNLzJk 3c16ZrWOJvVPb8W1C+4N3fmOurT9NJ7XyvXzRmh3T3pVZVeu3GFy6LWp/pGAi5sO lNu24IK4ZEbuYrhf4gtFZTRa3SIfm+6zFwvZP+LZW3AfUq6GowIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGkunbYYDPyIC8wj+4OiRIZXNlWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvOGI1YjNmNjAtZDk0ZC0z Yjk2LWJkNTEtN2VjZWY5MTlhMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDSnJIAwQD rFbwAwQD0FpgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAC6U8rSuvcTxkpzdv5uC+o7n4yYkbIdrz1MF7lnO YYfbkDNk9r0lyZlnw8Npgw+ppvb6Oix72VwK2NL1M9JQNqNNnF6t+qcSRF9v+HMd hl/cODltOdllqWb2IKjAh2QtuYPivAsdlSJjQJVRuwMH7bndfDNuzqQMtzHLGG1m 45qF9rkTxOS1sfF/K2b7h03sCljddnuLjaH3kWrO2JSb8Kcxpldu5XcLkmObN7NP mqm/25rXl77Nw01O9rn1D1NrqUf3QkowwSWlUouSD71zn7/RCofAFgJ6h6+eXIeL edD1RItQNdq8/C/ia3GLre2aHz9L6gdPHWFqWWxj07DuaVk= -----END CERTIFICATE-----Generated at Sun Dec 14 17:23:43 2025 by rpki-client