This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf34d82d-5c31-3904-bc17-ce9070dc6e27.roa File: bf34d82d-5c31-3904-bc17-ce9070dc6e27.roa (raw, json) Hash identifier: nYfJZRwjEx57JhyDERKUFDWVAMPS2eIRn3qYbS0NIUg= Subject key identifier: 21:FF:70:12:B4:E0:70:0F:9C:2E:8A:DF:60:1F:22:8B:95:9D:61:6F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BE9C1F749248D5D88E17E5100 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf34d82d-5c31-3904-bc17-ce9070dc6e27.roa Signing time: Wed 19 Nov 2025 16:01:52 +0000 ROA not before: Wed 19 Nov 2025 16:01:52 +0000 ROA not after: Tue 17 Feb 2026 16:01:52 +0000 asID: 274155 IP address blocks: 216.28.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e9:c1:f7:49:24:8d:5d:88:e1:7e:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Nov 19 16:01:52 2025 GMT Not After : Feb 17 16:01:52 2026 GMT Subject: CN=2f328558-61d9-40b1-915e-60a5448d5155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:21:9d:17:b9:bc:0a:d7:89:25:74:9c:1c:df: ba:aa:b4:83:fb:54:70:05:8b:89:62:9f:85:3c:7a: ce:9b:26:32:f0:cf:7c:6b:a7:b2:11:40:fc:3a:b0: b2:3f:98:b7:86:f2:57:0d:d2:ee:56:c5:83:48:5c: b4:be:5a:ef:ea:f9:0a:9d:2c:18:ba:56:6d:70:86: 34:78:a1:e3:f8:09:b7:06:a8:c9:80:da:89:4e:2c: 02:9b:77:19:ad:a2:5b:1e:b4:79:bb:ea:bd:84:f7: e7:43:ae:55:8d:7f:1c:0e:61:2a:a2:8f:07:6f:7d: 12:ea:e2:75:d6:02:5d:a4:a6:b9:f9:e2:81:ac:99: 71:1f:e6:06:b2:65:63:f5:68:82:0d:60:ec:49:23: 26:ba:07:07:a5:02:e0:ae:4e:1b:0e:a0:cc:cd:55: 04:e9:98:58:77:0d:29:8c:5e:d6:ae:bb:85:f2:2d: f6:67:ee:44:ba:e9:bc:f1:ce:03:c3:76:a6:10:7c: 28:99:91:86:54:d7:20:9e:6a:ed:80:e4:57:3e:c7: 31:e7:20:0d:86:29:59:9a:a5:69:c0:c0:8a:35:4d: 8b:66:ea:9c:a4:a9:99:f0:40:7f:5c:4d:5b:7f:5a: db:48:40:7c:c3:85:13:07:f8:d2:27:ea:39:31:4a: ac:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FF:70:12:B4:E0:70:0F:9C:2E:8A:DF:60:1F:22:8B:95:9D:61:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/bf34d82d-5c31-3904-bc17-ce9070dc6e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 216.28.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:41:60:9b:31:84:8b:47:2a:04:70:d9:25:c9:38:f5:ed:e0: a8:3c:18:e2:5f:14:9e:2c:bc:2b:1f:9c:31:83:37:d9:0b:f8: 03:b6:02:1b:54:d4:03:82:ee:27:31:ba:a2:90:98:22:f1:80: 62:b3:eb:5b:e4:a0:b4:53:73:08:18:08:97:98:e1:7e:a8:55: c5:e6:f0:b5:b2:c8:4c:4a:12:c7:30:eb:ee:77:7d:52:b2:24: 4e:89:bf:bb:47:32:1c:84:df:74:9b:8f:06:83:b8:93:f8:73: dd:89:60:27:62:25:4f:56:5e:0e:c8:76:75:f0:9f:8c:41:52: 3c:dc:d3:ee:52:d5:88:f9:e7:c3:ba:1f:d0:cd:12:0f:b3:54: 97:2a:bf:ba:85:ac:02:6d:91:e6:7e:d5:0e:89:2e:77:69:c9: 6a:af:21:7b:9c:ef:68:df:a4:73:fc:82:2e:bf:6e:61:b4:cf: 73:80:1c:87:01:e1:7c:1c:cd:e8:9b:3c:92:30:9a:20:bd:78: 47:06:e5:de:31:9b:98:72:70:d7:cf:2d:91:0e:8d:61:af:3a: b0:8a:aa:b7:31:8e:89:28:8c:39:6a:1f:dd:8e:15:cf:6c:34: 60:39:75:88:be:7b:c2:d4:2e:c3:e2:d7:3f:f6:48:cd:a8:65: ee:51:42:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvpwfdJJI1diOF+UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTExOTE2MDE1MloXDTI2MDIxNzE2MDE1MlowLzEtMCsGA1UEAxMk MmYzMjg1NTgtNjFkOS00MGIxLTkxNWUtNjBhNTQ0OGQ1MTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyGdF7m8CteJJXScHN+6qrSD+1RwBYuJYp+F PHrOmyYy8M98a6eyEUD8OrCyP5i3hvJXDdLuVsWDSFy0vlrv6vkKnSwYulZtcIY0 eKHj+Am3BqjJgNqJTiwCm3cZraJbHrR5u+q9hPfnQ65VjX8cDmEqoo8Hb30S6uJ1 1gJdpKa5+eKBrJlxH+YGsmVj9WiCDWDsSSMmugcHpQLgrk4bDqDMzVUE6ZhYdw0p jF7WrruF8i32Z+5Euum88c4Dw3amEHwomZGGVNcgnmrtgORXPscx5yANhilZmqVp wMCKNU2LZuqcpKmZ8EB/XE1bf1rbSEB8w4UTB/jSJ+o5MUqskwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH/cBK04HAPnC6K32AfIouVnWFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmYzNGQ4MmQtNWMzMS0z OTA0LWJjMTctY2U5MDcwZGM2ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2BzSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFBYJsxhItHKgRw2SXJOPXt4Kg8GOJfFJ4svCsfnDGDN9kL+AO2AhtU 1AOC7icxuqKQmCLxgGKz61vkoLRTcwgYCJeY4X6oVcXm8LWyyExKEscw6+53fVKy JE6Jv7tHMhyE33SbjwaDuJP4c92JYCdiJU9WXg7IdnXwn4xBUjzc0+5S1Yj558O6 H9DNEg+zVJcqv7qFrAJtkeZ+1Q6JLndpyWqvIXuc72jfpHP8gi6/bmG0z3OAHIcB 4XwczeibPJIwmiC9eEcG5d4xm5hycNfPLZEOjWGvOrCKqrcxjokojDlqH92OFc9s NGA5dYi+e8LULsPi1z/2SM2oZe5RQiE= -----END CERTIFICATE-----Generated at Tue Nov 25 15:45:20 2025 by rpki-client