This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa File: 520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa (raw, json) Hash identifier: Oi2cbjH41j+AfHBfAkNNCpCsOkeNg0CKW8drDXgGDG4= Subject key identifier: 85:7A:04:A8:1B:1F:2E:AD:7E:10:EB:22:74:C0:D4:C1:DF:1E:25:60 Certificate issuer: /CN=bc6884d6-b11e-4280-9c4c-8177287d9869 Certificate serial: 010D0C9F4328584C0F360965CFF4604B6FE0C340 Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa Signing time: Wed 03 Dec 2025 02:00:30 +0000 ROA not before: Wed 03 Dec 2025 02:00:30 +0000 ROA not after: Tue 03 Mar 2026 02:00:30 +0000 asID: 398324 IP address blocks: 206.168.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0f:36:09:65:cf:f4:60:4b:6f:e0:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869 Validity Not Before: Dec 3 02:00:30 2025 GMT Not After : Mar 3 02:00:30 2026 GMT Subject: CN=ead839fe-9c23-4d62-b64d-e328b4f4760a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e7:60:a5:22:44:a5:a9:64:68:44:60:14:f1: e1:11:08:0f:6e:44:4f:2a:c6:77:2a:1f:88:a0:76: 5e:00:ec:3e:0c:96:b9:ac:a8:8e:94:41:6d:20:71: 5c:18:89:5d:cf:96:b6:e2:1a:c5:36:4d:8b:b4:25: 5c:21:2c:b1:c9:66:79:77:54:74:ef:f0:a0:fa:34: c9:ed:02:f1:32:7d:ce:0a:da:a8:7c:76:87:6f:4f: 0a:9d:2b:e2:9b:62:5a:58:10:c5:ad:1d:47:04:b1: 2f:c7:26:b5:e2:65:91:f5:1f:73:1e:1f:78:32:11: da:e3:e8:98:c5:9e:39:a4:ff:ee:1e:4f:5d:0d:22: 94:b2:77:5e:91:8e:4d:04:ae:d2:0d:ab:a3:2b:90: f3:2e:87:c3:cc:86:b6:4a:0d:62:ca:e3:7e:dd:d9: 5d:ac:ed:81:73:72:d9:53:58:16:03:ac:be:27:91: 2e:dc:ed:00:61:91:c6:eb:5a:60:60:4f:24:17:b6: a5:5c:b4:8f:5f:59:04:45:55:07:ef:0f:d9:4b:8e: 76:48:c0:5c:6c:f6:d7:f4:5a:75:09:66:11:ff:d5: 88:34:33:af:c6:56:ea:9c:37:37:e1:95:27:bb:12: d7:d1:a7:56:c3:20:69:19:80:a7:5f:c4:b9:0f:34: 0a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7A:04:A8:1B:1F:2E:AD:7E:10:EB:22:74:C0:D4:C1:DF:1E:25:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl X509v3 Authority Key Identifier: keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer sbgp-ipAddrBlock: critical IPv4: 206.168.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c9:4c:8b:26:c4:c5:0d:3f:51:7c:38:51:95:c0:33:6c:b5: 85:0c:74:e0:56:9c:aa:54:e6:0e:8b:8f:73:bb:4c:fe:94:e2: f8:dc:93:56:f8:dd:44:ec:cd:25:87:86:2f:4f:f6:e6:00:d4: a8:a1:a3:b8:87:a3:c1:92:1f:98:f3:08:23:a1:12:9c:d3:b3: ec:49:05:50:b7:43:5c:08:85:da:c2:44:33:03:53:d4:8b:10: 17:1c:2f:2c:c3:34:65:61:3e:55:33:fa:a8:b1:d4:25:94:4b: d1:e9:32:90:64:d0:6b:04:07:a7:2b:01:fc:71:e6:3e:51:98: 92:e4:07:57:03:2f:7d:39:78:9d:c0:61:61:b2:b5:07:95:1e: 80:9f:05:ff:0a:b3:82:e7:1b:c0:25:06:b7:c4:ee:d2:23:24: 0e:05:3a:9d:8f:0e:f7:5c:c8:a8:2c:d8:e7:61:d6:1d:ed:2a: 11:ff:6e:72:32:1d:fa:0a:30:b1:39:e0:e7:9e:b7:6e:a3:ee: 0b:57:b6:92:ce:29:e3:ff:5b:3c:5a:57:0b:a3:ba:91:ec:d9: 1d:e1:5e:4b:1d:bf:7c:be:f5:ca:08:ff:a7:8d:b6:c1:9c:7b: 4c:bd:83:4a:48:72:b9:f6:a5:76:fc:4a:e6:2e:df:d9:35:8a: d2:b2:3f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwPNgllz/RgS2/gw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM2ODg0ZDYtYjExZS00MjgwLTljNGMtODE3NzI4N2Q5 ODY5MB4XDTI1MTIwMzAyMDAzMFoXDTI2MDMwMzAyMDAzMFowLzEtMCsGA1UEAxMk ZWFkODM5ZmUtOWMyMy00ZDYyLWI2NGQtZTMyOGI0ZjQ3NjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkudgpSJEpalkaERgFPHhEQgPbkRPKsZ3Kh+I oHZeAOw+DJa5rKiOlEFtIHFcGIldz5a24hrFNk2LtCVcISyxyWZ5d1R07/Cg+jTJ 7QLxMn3OCtqofHaHb08KnSvim2JaWBDFrR1HBLEvxya14mWR9R9zHh94MhHa4+iY xZ45pP/uHk9dDSKUsndekY5NBK7SDaujK5DzLofDzIa2Sg1iyuN+3dldrO2Bc3LZ U1gWA6y+J5Eu3O0AYZHG61pgYE8kF7alXLSPX1kERVUH7w/ZS452SMBcbPbX9Fp1 CWYR/9WINDOvxlbqnDc34ZUnuxLX0adWwyBpGYCnX8S5DzQKhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIV6BKgbHy6tfhDrInTA1MHfHiVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4 ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3Mjg3ZDk4NjkvNTIwYzhiZjEtN2Y3Yi0z MmU4LWEyMDEtMmE1YWE4ZDZmZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmM2ODg0ZDYtYjExZS00MjgwLTlj NGMtODE3NzI4N2Q5ODY5L2JjNjg4NGQ2LWIxMWUtNDI4MC05YzRjLTgxNzcyODdk OTg2OS5jcmwwHwYDVR0jBBgwFoAUFcjuvBdfaxDD3HrPV9TR85APDocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3 Mjg3ZDk4NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqgjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzJTIsmxMUNP1F8OFGVwDNstYUMdOBWnKpU5g6Lj3O7TP6U4vjck1b4 3UTszSWHhi9P9uYA1Kiho7iHo8GSH5jzCCOhEpzTs+xJBVC3Q1wIhdrCRDMDU9SL EBccLyzDNGVhPlUz+qix1CWUS9HpMpBk0GsEB6crAfxx5j5RmJLkB1cDL305eJ3A YWGytQeVHoCfBf8Ks4LnG8AlBrfE7tIjJA4FOp2PDvdcyKgs2Odh1h3tKhH/bnIy HfoKMLE54Oeet26j7gtXtpLOKeP/WzxaVwujupHs2R3hXksdv3y+9coI/6eNtsGc e0y9g0pIcrn2pXb8SuYu39k1itKyPy8= -----END CERTIFICATE-----Generated at Fri Dec 5 12:39:10 2025 by rpki-client