This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38/d8f53276-4396-332d-b6bd-13bd5f560dc7.roa File: d8f53276-4396-332d-b6bd-13bd5f560dc7.roa (raw, json) Hash identifier: OG/mkvJlapotGqK+chES89XNj11cyqQXU7ZAD1VA0Mw= Subject key identifier: B5:9D:CE:FC:FF:35:79:B0:47:06:10:CC:73:55:A5:D2:D3:5C:0D:C0 Certificate issuer: /CN=bb5c56f4-a742-4d7a-836d-03eb4bf08f38 Certificate serial: 010D0C9F4328584B5DF388D44BE4C2E6FB9FB600 Authority key identifier: 80:84:01:5A:0E:FC:78:85:59:79:96:5D:6B:81:19:D0:42:04:D3:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38/d8f53276-4396-332d-b6bd-13bd5f560dc7.roa Signing time: Tue 30 Sep 2025 14:07:35 +0000 ROA not before: Tue 30 Sep 2025 14:07:35 +0000 ROA not after: Mon 29 Dec 2025 15:07:35 +0000 asID: 401754 IP address blocks: 208.122.31.0/24 maxlen: 24 2602:f617::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38/bb5c56f4-a742-4d7a-836d-03eb4bf08f38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38/bb5c56f4-a742-4d7a-836d-03eb4bf08f38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:f3:88:d4:4b:e4:c2:e6:fb:9f:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb5c56f4-a742-4d7a-836d-03eb4bf08f38 Validity Not Before: Sep 30 14:07:35 2025 GMT Not After : Dec 29 15:07:35 2025 GMT Subject: CN=d7c850d0-9d72-4495-aa02-10d244c390f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3a:fb:44:6f:f2:5d:c3:91:67:18:90:6c:7b: 4a:6f:fb:d2:71:9e:fb:76:a2:66:e9:27:57:8b:55: 75:c2:3c:fb:81:2b:f5:cb:02:e1:3a:fd:f7:02:76: d7:aa:17:c1:d4:b6:ca:de:48:a0:ce:5c:bf:8b:5a: ba:75:4b:19:90:5d:4f:3b:40:40:66:d6:f2:c5:13: 00:38:cc:d9:9e:c7:bd:5b:5f:d9:f2:50:2d:15:68: 4c:68:5c:ab:cd:34:0d:72:51:2b:47:88:0e:63:92: 36:28:03:5c:4f:20:4d:32:bf:b9:01:ac:9f:53:e5: d4:10:f8:27:48:c0:04:4c:f3:2a:06:e3:3f:32:e1: 8b:e9:69:65:3c:f3:90:1f:ce:53:5d:12:c2:74:0e: 62:6d:d7:2e:8f:3e:b0:24:52:e9:44:84:02:42:43: 77:53:90:1a:82:b2:47:32:8a:4c:06:bc:a7:f3:3e: 23:cb:5d:de:c4:64:85:d6:59:b6:38:12:41:e0:73: 41:f6:1b:2c:ee:c1:88:07:d1:79:0d:58:75:4e:f4: a8:a5:88:53:19:aa:35:f5:5e:d3:5a:ec:f3:f2:f2: da:8d:c1:41:5b:69:3b:49:31:b8:a6:42:42:5a:70: 35:21:63:e9:66:df:c6:04:25:7f:5f:07:c8:f9:b6: 3f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9D:CE:FC:FF:35:79:B0:47:06:10:CC:73:55:A5:D2:D3:5C:0D:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38/d8f53276-4396-332d-b6bd-13bd5f560dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38/bb5c56f4-a742-4d7a-836d-03eb4bf08f38.crl X509v3 Authority Key Identifier: keyid:80:84:01:5A:0E:FC:78:85:59:79:96:5D:6B:81:19:D0:42:04:D3:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bb5c56f4-a742-4d7a-836d-03eb4bf08f38.cer sbgp-ipAddrBlock: critical IPv4: 208.122.31.0/24 IPv6: 2602:f617::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:25:e5:cf:26:2c:0f:f0:6c:cd:13:6e:34:cf:e8:b2:71:25: a8:62:4c:f0:7d:d6:d5:67:4b:c7:7c:c3:c6:3b:b7:93:c1:a9: 03:34:74:28:6d:15:c4:d3:81:c3:02:c9:18:61:69:1d:4e:16: a2:cb:b4:06:5d:52:f6:9b:b6:da:6c:0e:c2:7b:e8:8f:bc:bc: 99:b8:34:28:8e:3f:cf:a1:1c:a8:a6:69:f7:68:07:c2:a7:31: 8a:c4:89:26:32:29:79:3c:76:48:6a:83:81:11:d2:ee:df:fe: 6b:b1:c3:80:dd:e2:ae:e6:b0:6d:51:c1:a3:56:a7:e9:ee:39: c9:62:cd:52:6e:5d:eb:ef:ef:fe:0f:c2:28:cd:9b:e5:9d:32: fa:c6:e7:7b:78:8f:29:99:44:ec:4d:c6:13:10:37:d6:f8:54: 10:0e:76:be:89:c2:d6:c8:78:8a:5f:fc:66:35:45:99:bd:db: cd:22:a3:0b:de:3b:ce:37:40:26:02:cb:b2:30:63:c9:a0:93: 88:dd:02:13:ee:17:a5:fd:70:31:b0:31:3b:3a:a3:81:6d:b8: d6:16:18:11:ac:6e:0c:14:7a:12:96:80:88:0b:37:dd:ce:ff: 5c:76:8b:90:1f:90:a2:e9:af:05:22:09:37:6b:08:7f:f2:e8: 3d:25:fa:f8 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtd84jUS+TC5vuftgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI1YzU2ZjQtYTc0Mi00ZDdhLTgzNmQtMDNlYjRiZjA4 ZjM4MB4XDTI1MDkzMDE0MDczNVoXDTI1MTIyOTE1MDczNVowLzEtMCsGA1UEAxMk ZDdjODUwZDAtOWQ3Mi00NDk1LWFhMDItMTBkMjQ0YzM5MGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzr7RG/yXcORZxiQbHtKb/vScZ77dqJm6SdX i1V1wjz7gSv1ywLhOv33AnbXqhfB1LbK3kigzly/i1q6dUsZkF1PO0BAZtbyxRMA OMzZnse9W1/Z8lAtFWhMaFyrzTQNclErR4gOY5I2KANcTyBNMr+5AayfU+XUEPgn SMAETPMqBuM/MuGL6WllPPOQH85TXRLCdA5ibdcujz6wJFLpRIQCQkN3U5AagrJH MopMBryn8z4jy13exGSF1lm2OBJB4HNB9hss7sGIB9F5DVh1TvSopYhTGao19V7T Wuzz8vLajcFBW2k7STG4pkJCWnA1IWPpZt/GBCV/XwfI+bY/fwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLWdzvz/NXmwRwYQzHNVpdLTXA3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYjVj NTZmNC1hNzQyLTRkN2EtODM2ZC0wM2ViNGJmMDhmMzgvZDhmNTMyNzYtNDM5Ni0z MzJkLWI2YmQtMTNiZDVmNTYwZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmI1YzU2ZjQtYTc0Mi00ZDdhLTgz NmQtMDNlYjRiZjA4ZjM4L2JiNWM1NmY0LWE3NDItNGQ3YS04MzZkLTAzZWI0YmYw OGYzOC5jcmwwHwYDVR0jBBgwFoAUgIQBWg78eIVZeZZda4EZ0EIE05MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYjVjNTZmNC1hNzQyLTRkN2EtODM2ZC0wM2Vi NGJmMDhmMzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA0HofMA4E AgACMAgDBgAmAvYXADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVJeXPJiwP8GzNE240z+iycSWoYkzwfdbV Z0vHfMPGO7eTwakDNHQobRXE04HDAskYYWkdThaiy7QGXVL2m7babA7Ce+iPvLyZ uDQojj/PoRyopmn3aAfCpzGKxIkmMil5PHZIaoOBEdLu3/5rscOA3eKu5rBtUcGj Vqfp7jnJYs1Sbl3r7+/+D8IozZvlnTL6xud7eI8pmUTsTcYTEDfW+FQQDna+icLW yHiKX/xmNUWZvdvNIqML3jvON0AmAsuyMGPJoJOI3QIT7hel/XAxsDE7OqOBbbjW FhgRrG4MFHoSloCICzfdzv9cdouQH5Ci6a8FIgk3awh/8ug9Jfr4 -----END CERTIFICATE-----Generated at Wed Nov 26 11:32:34 2025 by rpki-client