This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/521fe84b-33b8-32d7-bfce-f7d4ad729db9.roa File: 521fe84b-33b8-32d7-bfce-f7d4ad729db9.roa (raw, json) Hash identifier: H6neLtLefQC4zynbYx4F8C3HnN4mpJD6pWz0KUuH49g= Subject key identifier: 7E:77:24:CA:DA:ED:99:B2:6F:66:CF:C6:E2:0B:01:CC:45:4A:64:A6 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584BF293CA8599DCD5FDC2F08F58 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/521fe84b-33b8-32d7-bfce-f7d4ad729db9.roa Signing time: Sat 22 Nov 2025 19:51:06 +0000 ROA not before: Sat 22 Nov 2025 19:51:06 +0000 ROA not after: Fri 20 Feb 2026 19:51:06 +0000 asID: 834 IP address blocks: 207.180.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f2:93:ca:85:99:dc:d5:fd:c2:f0:8f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Nov 22 19:51:06 2025 GMT Not After : Feb 20 19:51:06 2026 GMT Subject: CN=c10944e5-24bd-4678-8890-e0bed3642113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c9:c6:ee:af:cb:08:c9:21:15:28:3b:88:6c: 55:8d:ab:c5:e0:07:18:fe:d0:98:f7:df:0d:64:28: 1a:56:3a:29:ee:be:49:2f:c3:a9:4e:02:fa:c2:fc: 2f:a9:de:27:bc:11:3e:b4:51:fe:ae:2b:06:9a:84: e6:aa:53:68:ad:d4:78:ca:bd:40:68:6d:19:a2:a3: 16:d4:29:02:79:bc:0b:fe:12:d7:ee:d5:45:c4:af: c0:a2:69:db:95:91:a4:35:91:98:fe:4a:cb:1c:54: 54:07:4c:e3:17:5e:47:84:1a:26:81:54:68:34:97: e9:dc:aa:8a:fb:3a:86:22:24:9e:ff:ca:bb:96:ac: 7c:13:b0:13:15:d5:06:c4:08:da:e7:d2:b5:8f:b5: 03:8d:1b:3e:e7:d0:66:69:82:23:57:3b:14:fa:3c: 80:1d:dd:ff:39:19:11:e2:c1:5a:26:f6:77:4b:88: c7:d6:35:0a:92:ef:7b:d0:b0:00:fa:3d:2d:75:0e: 78:6d:7a:f9:3a:e2:77:03:ad:2b:18:ed:71:33:ba: 38:52:73:b4:6f:46:25:e9:c0:af:26:a1:d4:d5:96: d9:7e:e6:b4:3a:57:81:3b:22:20:bc:48:99:15:fc: 5b:0d:5e:67:51:d8:bf:f7:91:96:a0:ad:c8:df:78: 4e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:77:24:CA:DA:ED:99:B2:6F:66:CF:C6:E2:0B:01:CC:45:4A:64:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/521fe84b-33b8-32d7-bfce-f7d4ad729db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 207.180.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e0:60:b7:88:8b:1f:49:c2:bf:f0:d0:91:7f:5f:01:bf:a5: 63:d0:02:5a:7d:1f:ee:f0:db:2a:57:9f:f9:21:5a:5f:d1:16: f9:a2:fe:6e:ff:a9:91:37:74:2e:b2:1d:1c:a2:96:70:a4:c5: 1e:1f:1e:43:9b:95:6d:a4:27:37:6a:48:47:d7:13:f4:42:f5: dc:56:02:d7:e8:71:c1:65:b3:fa:6c:68:d9:42:36:93:01:3c: 79:c4:9a:b1:09:e2:3c:21:fa:ed:06:c4:a9:0c:40:fb:e8:d4: df:7d:76:cf:d6:7a:23:14:7b:39:af:f9:fc:5e:ec:7a:c2:45: 74:6a:1f:47:0c:f6:97:c7:5d:d3:5d:65:12:7e:b5:a3:57:07: 44:bd:e0:4f:da:8d:b9:ed:74:fd:66:7b:92:8b:8a:8b:5d:fa: fc:d2:72:e0:29:51:d1:14:c7:fa:dc:22:03:c7:9c:92:71:ed: ed:be:23:37:33:ad:3e:31:c3:fd:1c:4e:91:7e:05:8c:4d:77: fa:a0:fe:da:44:86:db:99:4d:b4:ff:63:05:f3:05:7d:c3:f7: 5e:92:a4:e5:80:80:c9:60:3d:25:5f:0f:dc:37:03:c6:fb:2c: b3:78:90:a0:2f:fc:d7:54:86:0c:fd:1b:3a:78:ef:8a:6c:65: 82:0c:dd:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvyk8qFmdzV/cLwj1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MTEyMjE5NTEwNloXDTI2MDIyMDE5NTEwNlowLzEtMCsGA1UEAxMk YzEwOTQ0ZTUtMjRiZC00Njc4LTg4OTAtZTBiZWQzNjQyMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcnG7q/LCMkhFSg7iGxVjavF4AcY/tCY998N ZCgaVjop7r5JL8OpTgL6wvwvqd4nvBE+tFH+risGmoTmqlNordR4yr1AaG0ZoqMW 1CkCebwL/hLX7tVFxK/AomnblZGkNZGY/krLHFRUB0zjF15HhBomgVRoNJfp3KqK +zqGIiSe/8q7lqx8E7ATFdUGxAja59K1j7UDjRs+59BmaYIjVzsU+jyAHd3/ORkR 4sFaJvZ3S4jH1jUKku970LAA+j0tdQ54bXr5OuJ3A60rGO1xM7o4UnO0b0Yl6cCv JqHU1ZbZfua0OleBOyIgvEiZFfxbDV5nUdi/95GWoK3I33hOiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH53JMra7Zmyb2bPxuILAcxFSmSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvNTIxZmU4NGItMzNiOC0z MmQ3LWJmY2UtZjdkNGFkNzI5ZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7QjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzgYLeIix9Jwr/w0JF/XwG/pWPQAlp9H+7w2ypXn/khWl/RFvmi/m7/ qZE3dC6yHRyilnCkxR4fHkOblW2kJzdqSEfXE/RC9dxWAtfoccFls/psaNlCNpMB PHnEmrEJ4jwh+u0GxKkMQPvo1N99ds/WeiMUezmv+fxe7HrCRXRqH0cM9pfHXdNd ZRJ+taNXB0S94E/ajbntdP1me5KLiotd+vzScuApUdEUx/rcIgPHnJJx7e2+Izcz rT4xw/0cTpF+BYxNd/qg/tpEhtuZTbT/YwXzBX3D916SpOWAgMlgPSVfD9w3A8b7 LLN4kKAv/NdUhgz9Gzp474psZYIM3YQ= -----END CERTIFICATE-----Generated at Sat Dec 6 05:42:09 2025 by rpki-client