This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/bfa9e1e2-b20e-3db3-a17d-e5c494b08e4b.roa File: bfa9e1e2-b20e-3db3-a17d-e5c494b08e4b.roa (raw, json) Hash identifier: 0AFAP9nJ4AItRvuD77RdMSD8oWNDZWrVFuhTl2FHmYU= Subject key identifier: A6:9C:40:97:8D:29:D1:B5:F6:F5:16:A3:16:5B:D6:74:5E:C5:5A:F5 Certificate issuer: /CN=c1195660-b269-4bf9-a104-54a76ebf3546 Certificate serial: 010D0C9F4328584BED671366A346A6DB32E8B680 Authority key identifier: 50:2D:B7:50:06:C8:ED:DC:6D:F6:1D:94:C8:76:CC:2F:F4:A9:64:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/bfa9e1e2-b20e-3db3-a17d-e5c494b08e4b.roa Signing time: Thu 20 Nov 2025 23:21:58 +0000 ROA not before: Thu 20 Nov 2025 23:21:58 +0000 ROA not after: Wed 18 Feb 2026 23:21:58 +0000 asID: 13335 IP address blocks: 66.71.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:67:13:66:a3:46:a6:db:32:e8:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1195660-b269-4bf9-a104-54a76ebf3546 Validity Not Before: Nov 20 23:21:58 2025 GMT Not After : Feb 18 23:21:58 2026 GMT Subject: CN=39031cb2-ebcf-4fcd-ae78-d08b74efa425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fd:46:aa:00:85:a3:d7:16:a7:ad:96:e3:83: 9e:ff:4b:a1:0e:64:cd:bf:58:35:48:b8:46:cc:be: cc:c7:d7:1b:20:d4:ed:89:d6:60:06:79:97:90:1b: 2b:37:ae:00:05:87:98:48:42:a5:cc:ae:a9:8d:f8: 3c:7d:62:db:ce:42:24:02:7d:ab:98:8c:dc:a9:b3: f1:38:6a:ce:53:ba:c2:81:22:60:e9:dd:91:ae:70: 32:b0:18:81:36:ac:bf:98:29:b1:35:ba:a5:98:5a: 13:2d:8a:c0:44:c3:d6:df:c5:83:a8:27:87:0b:58: c4:cd:a7:56:41:d4:14:45:47:ba:e9:7b:75:57:d8: b2:c6:02:9d:28:7e:37:06:a9:87:56:ca:80:b7:fb: 2d:6a:91:21:3d:77:9d:b0:ca:ff:d9:a7:c9:86:7f: a6:0d:53:65:b1:76:01:0a:b2:91:d2:9b:02:07:62: 42:3d:5c:23:eb:ac:21:96:4c:25:7c:f9:d5:9a:e9: f4:97:f9:22:12:96:96:c6:ee:f1:f9:3d:21:63:11: 8f:43:51:95:bc:8f:d3:69:7c:03:7f:68:0d:fa:c2: b5:29:84:79:ef:ed:6c:99:d0:0c:c3:51:f9:c2:95: b8:68:1f:16:08:fe:5c:cf:39:1b:10:08:ec:93:9c: 90:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9C:40:97:8D:29:D1:B5:F6:F5:16:A3:16:5B:D6:74:5E:C5:5A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/bfa9e1e2-b20e-3db3-a17d-e5c494b08e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.crl X509v3 Authority Key Identifier: keyid:50:2D:B7:50:06:C8:ED:DC:6D:F6:1D:94:C8:76:CC:2F:F4:A9:64:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer sbgp-ipAddrBlock: critical IPv4: 66.71.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ab:01:a1:74:db:37:c1:ab:0b:e3:c3:3d:57:3d:4d:11:29: 66:0c:36:3b:8a:63:f3:3f:5a:bb:f6:fe:c2:ee:10:70:76:31: 97:29:f5:27:b2:d8:f9:27:40:ef:6b:67:59:6f:6e:09:ba:32: 65:f9:a2:7e:0e:f2:a3:dc:4a:ce:a9:6f:f1:1a:20:89:9b:b0: 73:f4:25:62:41:d3:b5:e0:ef:a9:9e:af:10:f6:80:55:11:97: 6a:de:ca:dd:0a:a4:8d:52:b9:f4:ef:4b:19:1f:f7:fb:59:fd: 17:3f:4d:34:e4:15:a4:87:6f:f8:be:41:e2:17:1b:29:b1:87: 8f:5c:c5:a1:c4:76:db:2a:af:25:d7:c6:0b:b0:10:34:3b:55: 72:9c:d9:71:1d:f0:b5:d1:58:7d:06:c1:d3:93:0b:25:90:29: 89:62:d0:05:83:bc:65:8e:a1:e2:c8:5c:ae:59:7b:7a:27:db: 7e:88:0c:5f:17:f1:b5:f1:60:64:84:f4:e6:aa:0f:fb:67:b3: e5:b6:4a:9a:0d:74:b7:85:5f:6b:fb:a9:17:85:3c:9f:83:c7: f2:af:0e:85:14:24:59:cc:3a:8d:b0:d0:f1:95:e4:07:84:9c: 5b:73:d5:98:ad:ad:43:ba:56:99:b6:52:22:59:68:16:96:5a: 4b:d5:5d:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvtZxNmo0am2zLotoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzExOTU2NjAtYjI2OS00YmY5LWExMDQtNTRhNzZlYmYz NTQ2MB4XDTI1MTEyMDIzMjE1OFoXDTI2MDIxODIzMjE1OFowLzEtMCsGA1UEAxMk MzkwMzFjYjItZWJjZi00ZmNkLWFlNzgtZDA4Yjc0ZWZhNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv1GqgCFo9cWp62W44Oe/0uhDmTNv1g1SLhG zL7Mx9cbINTtidZgBnmXkBsrN64ABYeYSEKlzK6pjfg8fWLbzkIkAn2rmIzcqbPx OGrOU7rCgSJg6d2RrnAysBiBNqy/mCmxNbqlmFoTLYrARMPW38WDqCeHC1jEzadW QdQURUe66Xt1V9iyxgKdKH43BqmHVsqAt/stapEhPXedsMr/2afJhn+mDVNlsXYB CrKR0psCB2JCPVwj66whlkwlfPnVmun0l/kiEpaWxu7x+T0hYxGPQ1GVvI/TaXwD f2gN+sK1KYR57+1smdAMw1H5wpW4aB8WCP5czzkbEAjsk5yQ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKacQJeNKdG19vUWoxZb1nRexVr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMTE5 NTY2MC1iMjY5LTRiZjktYTEwNC01NGE3NmViZjM1NDYvYmZhOWUxZTItYjIwZS0z ZGIzLWExN2QtZTVjNDk0YjA4ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzExOTU2NjAtYjI2OS00YmY5LWEx MDQtNTRhNzZlYmYzNTQ2L2MxMTk1NjYwLWIyNjktNGJmOS1hMTA0LTU0YTc2ZWJm MzU0Ni5jcmwwHwYDVR0jBBgwFoAUUC23UAbI7dxt9h2UyHbML/SpZLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMTE5NTY2MC1iMjY5LTRiZjktYTEwNC01NGE3 NmViZjM1NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQkfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHirAaF02zfBqwvjwz1XPU0RKWYMNjuKY/M/Wrv2/sLuEHB2MZcp9Sey 2PknQO9rZ1lvbgm6MmX5on4O8qPcSs6pb/EaIImbsHP0JWJB07Xg76merxD2gFUR l2reyt0KpI1SufTvSxkf9/tZ/Rc/TTTkFaSHb/i+QeIXGymxh49cxaHEdtsqryXX xguwEDQ7VXKc2XEd8LXRWH0GwdOTCyWQKYli0AWDvGWOoeLIXK5Ze3on236IDF8X 8bXxYGSE9OaqD/tns+W2SpoNdLeFX2v7qReFPJ+Dx/KvDoUUJFnMOo2w0PGV5AeE nFtz1ZitrUO6Vpm2UiJZaBaWWkvVXTY= -----END CERTIFICATE-----Generated at Thu Dec 4 07:32:03 2025 by rpki-client