This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/bc6daf32-8311-3408-ab08-6000c81457c8.roa File: bc6daf32-8311-3408-ab08-6000c81457c8.roa (raw, json) Hash identifier: qKhjw6q6iiyQ2Rsa5e4QNjrHctPgYCLLU/aiMRYJ4/E= Subject key identifier: 30:94:C6:6F:7A:A6:D7:71:86:FD:1D:9B:9F:C0:A7:F6:03:9B:CC:E0 Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584BE4E4B6B696D190C227D2D820 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/bc6daf32-8311-3408-ab08-6000c81457c8.roa Signing time: Mon 17 Nov 2025 22:12:50 +0000 ROA not before: Mon 17 Nov 2025 22:12:50 +0000 ROA not after: Sun 15 Feb 2026 22:12:50 +0000 asID: 4922 IP address blocks: 173.249.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e4:e4:b6:b6:96:d1:90:c2:27:d2:d8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Nov 17 22:12:50 2025 GMT Not After : Feb 15 22:12:50 2026 GMT Subject: CN=71bbac19-d0ea-491d-b5e2-c21b65eee132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:54:96:91:53:c3:9c:ab:8d:bc:0b:95:39:00: 44:70:bd:7a:44:8f:ae:d7:da:1c:75:12:5f:95:d2: 48:58:02:d8:c6:ee:ae:fd:bf:51:9d:15:87:90:94: ae:d9:93:00:cb:ba:01:79:9e:b8:18:da:7c:de:09: 87:b1:30:00:20:07:43:c2:23:bf:c5:5c:b4:cb:b5: b6:6f:91:46:04:60:e1:c5:17:6c:fd:85:28:17:61: c3:92:73:fb:60:a7:4b:53:fc:12:44:f7:64:fb:33: f0:de:87:ac:e6:d1:d0:57:ce:3a:a7:8f:10:a5:81: 86:a3:04:b5:7e:47:20:ee:1e:be:31:88:1c:96:61: fc:2c:b2:3e:71:69:fc:6d:9f:45:7f:64:8a:04:bc: b0:df:e6:c7:b7:57:bd:a1:4e:7c:74:6f:2a:0b:0e: 3f:31:28:ef:d6:f4:77:48:0c:0f:b8:2e:de:63:a2: 98:1a:e2:1d:d6:01:2c:bf:10:e7:07:05:a0:73:22: 30:89:1f:18:de:7b:1c:1b:4a:de:fa:97:44:0f:ee: 79:55:ad:24:05:85:f2:0f:5c:73:ed:f0:42:11:7f: 01:af:a5:dd:db:59:4d:f3:99:64:d6:3d:97:d4:d8: 3e:c4:01:ad:f6:fc:d9:66:71:78:7e:ec:5f:d4:d9: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:94:C6:6F:7A:A6:D7:71:86:FD:1D:9B:9F:C0:A7:F6:03:9B:CC:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/bc6daf32-8311-3408-ab08-6000c81457c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv4: 173.249.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:3a:6b:6d:48:13:64:74:e8:4f:a8:d5:ba:3f:a2:97:85:9e: 5a:f0:30:3a:6d:92:bb:5c:9e:34:48:23:79:31:3c:36:dc:4c: cc:a4:61:83:1f:41:0e:d4:3e:68:77:5a:0a:d2:ea:89:ec:33: 70:cf:2b:89:b3:03:c5:5f:60:ac:d3:3c:13:07:c5:ba:d1:84: d3:09:70:f0:fe:34:f2:6f:40:3e:f9:8c:ca:58:9d:5a:a0:50: 05:10:67:fe:04:95:f6:96:1c:b6:da:05:e0:34:64:2f:a9:c5: 60:97:50:37:bc:9a:30:c9:85:75:01:d7:b2:c0:a4:e4:d2:6a: 36:3f:28:20:f6:f3:bf:d3:5b:51:fe:41:74:2f:9f:48:6e:37: e1:f1:89:73:f8:42:d9:ee:b9:da:a5:86:7e:04:de:0c:87:b0: 70:c0:fa:88:d6:b3:01:6a:e7:b5:07:aa:ed:22:70:bd:e1:4b: 57:09:bc:a4:cc:d7:21:b9:54:4b:5e:2e:37:f6:3d:00:0e:2c: f5:e5:e9:51:f4:64:de:87:3e:66:77:89:e8:3d:47:93:61:00: ae:51:06:83:b2:40:71:78:55:1c:fc:ff:61:a0:ca:d2:1e:a4: dc:d3:3f:8d:6f:00:e5:39:66:73:1d:e0:75:2f:53:8c:1a:74: bc:e6:95:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvk5La2ltGQwifS2CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI1MTExNzIyMTI1MFoXDTI2MDIxNTIyMTI1MFowLzEtMCsGA1UEAxMk NzFiYmFjMTktZDBlYS00OTFkLWI1ZTItYzIxYjY1ZWVlMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylSWkVPDnKuNvAuVOQBEcL16RI+u19ocdRJf ldJIWALYxu6u/b9RnRWHkJSu2ZMAy7oBeZ64GNp83gmHsTAAIAdDwiO/xVy0y7W2 b5FGBGDhxRds/YUoF2HDknP7YKdLU/wSRPdk+zPw3oes5tHQV846p48QpYGGowS1 fkcg7h6+MYgclmH8LLI+cWn8bZ9Ff2SKBLyw3+bHt1e9oU58dG8qCw4/MSjv1vR3 SAwPuC7eY6KYGuId1gEsvxDnBwWgcyIwiR8Y3nscG0re+pdED+55Va0kBYXyD1xz 7fBCEX8Br6Xd21lN85lk1j2X1Ng+xAGt9vzZZnF4fuxf1NkVMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCUxm96ptdxhv0dm5/Ap/YDm8zgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvYmM2ZGFmMzItODMxMS0z NDA4LWFiMDgtNjAwMGM4MTQ1N2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE6a21IE2R06E+o1bo/opeFnlrwMDptkrtcnjRII3kxPDbcTMykYYMf QQ7UPmh3WgrS6onsM3DPK4mzA8VfYKzTPBMHxbrRhNMJcPD+NPJvQD75jMpYnVqg UAUQZ/4ElfaWHLbaBeA0ZC+pxWCXUDe8mjDJhXUB17LApOTSajY/KCD287/TW1H+ QXQvn0huN+HxiXP4Qtnuudqlhn4E3gyHsHDA+ojWswFq57UHqu0icL3hS1cJvKTM 1yG5VEteLjf2PQAOLPXl6VH0ZN6HPmZ3ieg9R5NhAK5RBoOyQHF4VRz8/2GgytIe pNzTP41vAOU5ZnMd4HUvU4wadLzmlRw= -----END CERTIFICATE-----Generated at Tue Nov 25 11:32:39 2025 by rpki-client