This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bf2a86be-ddfc-3570-9f60-30127542aaa1.roa File: bf2a86be-ddfc-3570-9f60-30127542aaa1.roa (raw, json) Hash identifier: YfY58s3On1PcyErE2oCTMRwYQKgZBbn6D7JtaI7v5zE= Subject key identifier: CD:43:39:53:DC:07:89:56:F8:85:FD:5E:66:64:7B:B7:7D:7E:A1:59 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584BD8C5CCA9EBCC8CF0A2A42F00 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bf2a86be-ddfc-3570-9f60-30127542aaa1.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 31898 IP address blocks: 130.35.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:cc:a9:eb:cc:8c:f0:a2:a4:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=8d4ac1fd-dcda-43d8-82a9-8b8323d8b03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:42:53:6c:2e:cd:76:33:7b:12:a5:10:91:19: 81:20:aa:84:f0:21:e2:a5:95:6c:ae:1a:ad:22:76: 87:ba:fa:f1:8f:9d:f7:47:c6:7d:81:55:e1:0a:3e: 53:d0:e9:62:01:0f:73:0d:a6:4a:cc:56:45:1a:f7: e9:23:ce:0f:9b:6f:0b:40:c6:7d:9d:3a:44:fd:63: 48:7d:92:a0:62:5d:5a:e7:82:37:c1:70:83:1d:16: 23:d0:92:21:75:bd:fb:7a:23:6c:3b:db:59:5c:3a: 8d:ef:88:79:02:85:c9:05:15:39:79:90:78:a2:d0: 84:53:a0:f0:bd:63:2f:6c:38:d9:a9:bf:c8:19:5f: f4:37:81:83:61:e2:cc:29:77:7b:d8:f7:3b:cd:94: 91:da:5f:ad:38:33:f2:8a:6b:86:d6:08:10:60:7a: b1:ab:34:1e:00:81:89:c5:49:a7:7f:d3:f8:90:95: 20:1d:26:f0:66:05:57:9c:8f:0f:a5:b5:b9:08:06: 14:85:4a:01:13:0c:b5:bd:47:ac:01:79:7d:50:36: 19:9c:e0:a5:0c:43:c6:9d:ba:bd:58:45:cb:7b:38: 69:79:68:15:f0:23:4e:dd:b5:57:58:6f:02:cd:a1: 07:ff:33:f1:90:30:85:3c:f7:7c:08:a6:98:f3:eb: f7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:43:39:53:DC:07:89:56:F8:85:FD:5E:66:64:7B:B7:7D:7E:A1:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/bf2a86be-ddfc-3570-9f60-30127542aaa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 130.35.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e2:e3:e2:1c:f7:62:d5:13:92:d8:dd:10:4d:20:a2:2d:1c: 87:df:7a:92:d0:fb:7f:6b:8a:ca:07:bd:d7:e2:4b:63:ac:f9: b6:fd:66:a9:89:b7:34:9e:86:de:f4:ed:31:e5:c2:b9:e2:53: 4e:ef:ad:77:11:9b:b1:d3:de:d7:52:71:82:6f:a3:15:90:20: 5c:85:5c:0b:4d:87:6b:83:86:59:c9:66:ed:9d:82:c1:fc:13: 89:68:0e:e3:f3:83:b1:0e:f0:7a:5c:46:05:31:89:07:62:c5: 7a:ff:c0:8f:08:18:d3:3d:63:b1:e3:45:01:43:4a:8f:87:7d: 69:4c:02:af:1c:b4:7f:03:9a:ff:d5:a5:06:4c:35:17:0d:35: 4f:34:ca:e6:26:4a:60:97:8e:46:69:69:1d:df:6b:2c:a2:4f: f0:fa:7e:c7:fd:79:2c:35:a4:60:b8:56:76:55:99:92:31:94: 60:2b:4c:34:6d:fc:3d:35:2c:05:40:4e:2e:c5:53:99:4e:02: 40:db:00:11:1d:71:f1:18:40:2f:d8:03:2b:b1:6a:3e:05:29: c3:37:bc:58:44:8f:38:fa:5e:4d:60:06:cd:68:77:ba:b4:fc: c9:65:62:5a:cc:4f:3e:08:c8:42:60:4a:fc:00:0d:6e:15:bd: 3e:b3:f5:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxcyp68yM8KKkLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk OGQ0YWMxZmQtZGNkYS00M2Q4LTgyYTktOGI4MzIzZDhiMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkJTbC7NdjN7EqUQkRmBIKqE8CHipZVsrhqt InaHuvrxj533R8Z9gVXhCj5T0OliAQ9zDaZKzFZFGvfpI84Pm28LQMZ9nTpE/WNI fZKgYl1a54I3wXCDHRYj0JIhdb37eiNsO9tZXDqN74h5AoXJBRU5eZB4otCEU6Dw vWMvbDjZqb/IGV/0N4GDYeLMKXd72Pc7zZSR2l+tODPyimuG1ggQYHqxqzQeAIGJ xUmnf9P4kJUgHSbwZgVXnI8PpbW5CAYUhUoBEwy1vUesAXl9UDYZnOClDEPGnbq9 WEXLezhpeWgV8CNO3bVXWG8CzaEH/zPxkDCFPPd8CKaY8+v3cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1DOVPcB4lW+IX9XmZke7d9fqFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvYmYyYTg2YmUtZGRmYy0z NTcwLTlmNjAtMzAxMjc1NDJhYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgiPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzi4+Ic92LVE5LY3RBNIKItHIffepLQ+39risoHvdfiS2Os+bb9ZqmJ tzSeht707THlwrniU07vrXcRm7HT3tdScYJvoxWQIFyFXAtNh2uDhlnJZu2dgsH8 E4loDuPzg7EO8HpcRgUxiQdixXr/wI8IGNM9Y7HjRQFDSo+HfWlMAq8ctH8Dmv/V pQZMNRcNNU80yuYmSmCXjkZpaR3fayyiT/D6fsf9eSw1pGC4VnZVmZIxlGArTDRt /D01LAVATi7FU5lOAkDbABEdcfEYQC/YAyuxaj4FKcM3vFhEjzj6Xk1gBs1od7q0 /MllYlrMTz4IyEJgSvwADW4VvT6z9cE= -----END CERTIFICATE-----Generated at Sat Nov 22 21:28:21 2025 by rpki-client