This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfce8ee9-03a3-3f7e-a75b-7c8f3c824089.roa File: bfce8ee9-03a3-3f7e-a75b-7c8f3c824089.roa (raw, json) Hash identifier: gCvGhTAEeSONYv5xvQchbDmaoeOsmb5x/xrKZF6L3jY= Subject key identifier: C3:3E:E3:44:E0:FA:3C:FF:DA:70:B3:D5:31:F0:1F:9E:63:F6:24:FB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C1E93966A05F439CD36BED840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfce8ee9-03a3-3f7e-a75b-7c8f3c824089.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 33287 IP address blocks: 68.84.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:93:96:6a:05:f4:39:cd:36:be:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=43c9a51d-f551-454c-93cc-54323988aced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0d:5c:6e:c7:11:76:31:01:8a:35:50:b1:55: ad:da:ac:fd:c7:b5:7e:49:8d:a8:4a:bb:ee:93:f3: c1:49:be:ac:3c:aa:fb:37:36:86:5b:6f:c1:df:6c: d6:d3:0f:6d:37:99:c0:af:04:2e:e0:69:19:4d:33: a9:de:17:f6:0f:b1:89:f0:81:36:32:b7:d6:44:9b: 1d:4b:c5:d9:86:0f:67:a1:ed:7a:a0:f6:ae:2e:6f: 59:b5:6f:db:c1:01:05:23:09:4d:3c:41:cd:4b:a5: c0:3d:06:4a:08:e1:fd:67:20:ca:fd:c1:7e:7c:c0: d5:3e:42:f3:da:8a:bb:b9:94:1d:37:df:04:e7:84: 61:c1:e7:4e:3b:63:05:57:51:61:f2:02:06:74:c2: 54:fd:d4:fc:4e:6f:0c:40:fa:41:13:98:dc:83:30: e3:b5:94:ee:e4:85:bd:9d:f2:1b:c6:56:db:1a:01: b6:a7:a8:92:bd:5f:4e:f0:b1:4a:84:49:2b:78:be: be:c1:9a:5e:82:e2:1c:eb:49:c1:2e:5f:e0:8c:e0: 1a:9f:33:94:72:76:ef:83:a9:e3:0a:2d:7f:27:41: 39:05:9e:25:c0:2f:63:43:66:04:1f:52:aa:92:97: d1:27:58:15:d0:98:39:7c:f6:6d:0d:a7:65:d3:cb: 9a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3E:E3:44:E0:FA:3C:FF:DA:70:B3:D5:31:F0:1F:9E:63:F6:24:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfce8ee9-03a3-3f7e-a75b-7c8f3c824089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.84.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:3a:91:81:65:34:7d:9f:b4:f8:a0:ca:fc:a0:a6:71:30:bb: 5f:77:7c:9d:bc:30:8f:da:92:b0:eb:6e:a7:7f:b7:31:fd:74: 71:09:e6:12:f6:7d:1f:70:e1:ab:71:f6:49:68:14:ad:6d:79: 8c:b2:22:29:53:68:32:15:43:06:ba:6f:db:00:82:2f:be:c2: c5:4b:12:b8:73:93:89:ef:54:3b:7d:8a:bd:49:8b:a2:97:82: 17:57:12:36:4a:65:5a:e9:96:97:f3:c3:08:26:76:a9:d9:e5: 27:b0:28:01:07:a1:b2:ce:65:0d:93:29:3a:5b:c4:1e:7a:74: 28:6d:14:87:69:8d:0d:b5:d0:5c:e3:4e:94:91:3d:8f:a1:b8: b5:2b:3c:12:4a:aa:e0:25:23:b9:13:e9:fa:f2:1d:e5:02:7f: eb:f4:c8:c7:6b:b1:e7:19:9c:7f:57:21:89:c9:d5:14:cd:8a: 9e:03:56:cb:1b:7e:60:81:77:2e:7a:43:7f:39:1d:ac:e9:13: 8d:56:a5:90:88:f6:95:f0:50:cd:ec:0b:3b:f4:b0:4c:ff:50: 5a:ca:0c:b5:bc:cd:5d:af:e3:ad:ad:2b:6c:be:54:07:dc:00: 65:12:d1:b4:e3:35:37:de:a7:2c:b8:03:12:e7:4b:c4:96:87: 34:dd:ab:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwek5ZqBfQ5zTa+2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk NDNjOWE1MWQtZjU1MS00NTRjLTkzY2MtNTQzMjM5ODhhY2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8g1cbscRdjEBijVQsVWt2qz9x7V+SY2oSrvu k/PBSb6sPKr7NzaGW2/B32zW0w9tN5nArwQu4GkZTTOp3hf2D7GJ8IE2MrfWRJsd S8XZhg9noe16oPauLm9ZtW/bwQEFIwlNPEHNS6XAPQZKCOH9ZyDK/cF+fMDVPkLz 2oq7uZQdN98E54RhwedOO2MFV1Fh8gIGdMJU/dT8Tm8MQPpBE5jcgzDjtZTu5IW9 nfIbxlbbGgG2p6iSvV9O8LFKhEkreL6+wZpeguIc60nBLl/gjOAanzOUcnbvg6nj Ci1/J0E5BZ4lwC9jQ2YEH1KqkpfRJ1gV0Jg5fPZtDadl08uadwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMM+40Tg+jz/2nCz1THwH55j9iT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZjZThlZTktMDNhMy0z ZjdlLWE3NWItN2M4ZjNjODI0MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERFTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo6kYFlNH2ftPigyvygpnEwu193fJ28MI/akrDrbqd/tzH9dHEJ5hL2 fR9w4atx9kloFK1teYyyIilTaDIVQwa6b9sAgi++wsVLErhzk4nvVDt9ir1Ji6KX ghdXEjZKZVrplpfzwwgmdqnZ5SewKAEHobLOZQ2TKTpbxB56dChtFIdpjQ210Fzj TpSRPY+huLUrPBJKquAlI7kT6fryHeUCf+v0yMdrsecZnH9XIYnJ1RTNip4DVssb fmCBdy56Q385HazpE41WpZCI9pXwUM3sCzv0sEz/UFrKDLW8zV2v462tK2y+VAfc AGUS0bTjNTfepyy4AxLnS8SWhzTdqxo= -----END CERTIFICATE-----Generated at Mon Dec 22 01:43:05 2025 by rpki-client