This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa File: bf1bc49a-0d53-3332-893b-589cda28cf4e.roa (raw, json) Hash identifier: k2N++WEVqkrkzcGDS8jhaBD8M0i1aeMUzX6blKcTpzw= Subject key identifier: 80:C7:41:4C:52:C4:DF:FE:70:1A:3A:F9:24:72:8D:4D:9C:E2:57:52 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584C2DEB9DF9E4CEDCC9477F7280 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa Signing time: Sun 14 Dec 2025 02:00:31 +0000 ROA not before: Sun 14 Dec 2025 02:00:31 +0000 ROA not after: Sat 14 Mar 2026 01:00:31 +0000 asID: 13536 IP address blocks: 68.70.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2d:eb:9d:f9:e4:ce:dc:c9:47:7f:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Dec 14 02:00:31 2025 GMT Not After : Mar 14 01:00:31 2026 GMT Subject: CN=bc15c4b2-2edb-4e1b-b077-11a21bb49943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:6d:5a:82:4f:99:67:69:40:1f:6f:26:1d: aa:b0:7d:32:6e:0a:4b:48:0f:25:fd:0f:8f:72:38: 4d:fd:4b:26:62:fe:a9:0c:fd:2c:4b:19:c2:30:52: 33:60:01:d3:b2:89:b6:a5:c6:48:13:e4:9e:0e:55: 32:ab:1d:91:99:25:77:ea:30:f6:19:d2:25:6c:b1: 45:bf:c3:f3:f0:0d:7a:cf:80:60:8e:1e:1e:36:82: 42:11:72:e5:ad:c1:74:81:86:ad:0c:05:69:81:62: 84:3b:c1:18:ec:9e:fb:06:30:aa:c5:dd:d4:06:03: 20:58:30:2d:e6:ab:f4:f2:05:68:d9:22:a4:3c:84: 3d:83:a8:f6:9b:99:7a:8c:e1:77:2e:08:5a:e7:72: 1f:6b:cd:fd:21:91:fd:a5:ff:94:4a:24:0b:9c:8b: 21:27:20:5d:c9:62:b0:37:ce:4b:49:3d:3e:8c:c8: 1c:45:7f:1f:23:7c:01:52:46:e2:1b:fd:71:44:fb: 8d:94:20:fc:cb:26:d2:12:97:58:2d:82:ae:33:ad: 53:83:03:ca:75:3a:b2:70:df:f1:9a:fb:71:fe:ea: 94:49:4a:19:96:72:43:23:3f:d0:6a:24:eb:4b:a3: 0c:4e:da:17:89:2f:53:0d:7c:01:68:3f:05:5c:11: 56:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C7:41:4C:52:C4:DF:FE:70:1A:3A:F9:24:72:8D:4D:9C:E2:57:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/bf1bc49a-0d53-3332-893b-589cda28cf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 68.70.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:58:50:28:dc:0e:80:84:ae:a0:3d:cf:d5:03:83:19:91:fd: 38:16:9a:f9:fe:e5:3c:ba:31:89:15:49:94:35:9c:c6:43:3f: 0d:f8:05:77:91:7c:1b:f6:cf:57:f7:3f:39:5d:1c:65:cf:69: 2e:14:fa:af:c8:e7:09:99:2e:e5:49:34:c7:63:bd:81:aa:fb: 2b:a7:d2:37:c3:9b:55:0a:2c:52:e5:1e:1a:17:ff:98:7d:ef: bf:79:41:3f:83:e5:c0:a1:66:b2:8b:30:ed:9d:3e:b4:3c:d8: a1:4f:47:14:f7:26:39:38:5e:6d:c6:78:71:32:6f:a7:e0:6d: ae:26:af:0f:86:e9:d0:09:e4:4a:5f:62:69:35:45:f9:c8:64: 81:e6:97:c2:2a:52:56:4a:b5:5f:46:2f:a9:0a:dd:86:86:a1: be:e6:44:4e:c8:c9:b0:63:41:65:c6:7d:96:52:6b:57:74:00: c0:75:c5:77:0b:76:5c:67:9b:2e:fb:33:d3:f6:3f:11:23:9a: 33:e3:c1:38:15:4e:96:a1:e3:b7:26:bf:bc:b8:97:50:85:2e: ce:d3:a6:ee:01:19:87:a4:c7:0c:10:ab:14:ae:3e:d7:a9:e4: 94:32:4f:d7:c6:a3:d5:0f:30:ad:a6:47:e5:50:99:1c:1c:0e: 64:7f:e0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwt65355M7cyUd/coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MTIxNDAyMDAzMVoXDTI2MDMxNDAxMDAzMVowLzEtMCsGA1UEAxMk YmMxNWM0YjItMmVkYi00ZTFiLWIwNzctMTFhMjFiYjQ5OTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBptWoJPmWdpQB9vJh2qsH0ybgpLSA8l/Q+P cjhN/UsmYv6pDP0sSxnCMFIzYAHTsom2pcZIE+SeDlUyqx2RmSV36jD2GdIlbLFF v8Pz8A16z4Bgjh4eNoJCEXLlrcF0gYatDAVpgWKEO8EY7J77BjCqxd3UBgMgWDAt 5qv08gVo2SKkPIQ9g6j2m5l6jOF3Lgha53Ifa839IZH9pf+USiQLnIshJyBdyWKw N85LST0+jMgcRX8fI3wBUkbiG/1xRPuNlCD8yybSEpdYLYKuM61TgwPKdTqycN/x mvtx/uqUSUoZlnJDIz/QaiTrS6MMTtoXiS9TDXwBaD8FXBFWwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDHQUxSxN/+cBo6+SRyjU2c4ldSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYmYxYmM0OWEtMGQ1My0z MzMyLTg5M2ItNTg5Y2RhMjhjZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFYUCjcDoCErqA9z9UDgxmR/TgWmvn+5Ty6MYkVSZQ1nMZDPw34BXeR fBv2z1f3PzldHGXPaS4U+q/I5wmZLuVJNMdjvYGq+yun0jfDm1UKLFLlHhoX/5h9 7795QT+D5cChZrKLMO2dPrQ82KFPRxT3Jjk4Xm3GeHEyb6fgba4mrw+G6dAJ5Epf Ymk1RfnIZIHml8IqUlZKtV9GL6kK3YaGob7mRE7IybBjQWXGfZZSa1d0AMB1xXcL dlxnmy77M9P2PxEjmjPjwTgVTpah47cmv7y4l1CFLs7Tpu4BGYekxwwQqxSuPtep 5JQyT9fGo9UPMK2mR+VQmRwcDmR/4N8= -----END CERTIFICATE-----Generated at Sat Dec 20 20:28:31 2025 by rpki-client