This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/bc28aea9-4f7b-3ffb-a223-8fc9b43f6513.roa File: bc28aea9-4f7b-3ffb-a223-8fc9b43f6513.roa (raw, json) Hash identifier: zzChX0tACik5pcuADLAqMR10A4cGgwtC7f+c6tRwlfI= Subject key identifier: 52:0B:BA:E4:77:02:AC:73:F8:E0:E3:A9:11:FD:4B:D8:3B:EB:BF:F4 Certificate issuer: /CN=0b77bb3c-d132-4e1d-adee-58a5fd374e08 Certificate serial: 010D0C9F4328584C2B20FA7C344C4552185F2E80 Authority key identifier: 03:46:7C:16:39:4A:2F:1F:C7:C9:5B:B1:29:ED:4F:07:F8:61:48:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/bc28aea9-4f7b-3ffb-a223-8fc9b43f6513.roa Signing time: Sat 13 Dec 2025 02:00:30 +0000 ROA not before: Sat 13 Dec 2025 02:00:30 +0000 ROA not after: Fri 13 Mar 2026 01:00:30 +0000 asID: 401710 IP address blocks: 104.204.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/0b77bb3c-d132-4e1d-adee-58a5fd374e08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/0b77bb3c-d132-4e1d-adee-58a5fd374e08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2b:20:fa:7c:34:4c:45:52:18:5f:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b77bb3c-d132-4e1d-adee-58a5fd374e08 Validity Not Before: Dec 13 02:00:30 2025 GMT Not After : Mar 13 01:00:30 2026 GMT Subject: CN=7c321f37-d9cf-4a62-b9ea-9ef8d52996cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:61:2b:66:90:45:8d:c9:82:63:7f:86:ac:4c: 9b:9a:88:27:a4:d0:d6:0c:e6:9c:99:c0:ea:ca:37: 41:d9:6d:b1:fc:71:a5:92:f4:9c:d4:1e:3d:ec:27: 2a:a5:68:ba:a7:9f:44:d2:b4:bf:7b:f1:18:c0:de: be:23:13:83:01:0d:92:7a:09:b4:b0:1c:e1:e8:a0: 03:5c:aa:38:61:30:27:14:19:76:d5:e0:6c:89:74: d0:7b:1d:d6:81:4d:ef:48:26:b5:2c:f4:d5:bc:0e: 6e:fe:14:1c:41:a4:43:fa:15:4a:79:02:c6:3d:61: cc:cd:1a:69:bb:35:81:14:e9:da:1f:ba:5e:d4:da: de:f6:d2:2b:93:ba:6e:a2:a9:f7:21:f4:06:b1:f6: 76:b4:f0:e9:ea:a5:d5:85:08:f5:15:5a:f7:c4:53: 1a:38:fd:0b:72:bd:cb:89:51:0d:85:05:6d:e4:d1: 60:24:c3:36:43:74:16:d4:b6:7c:c6:e0:fa:4f:45: 1e:f9:1f:d1:cf:fd:f3:4e:1f:83:1d:81:47:77:54: 7d:11:b0:c7:8d:18:f1:4b:3e:b9:6c:c9:fd:8d:5a: 34:31:55:8d:24:ba:6f:11:61:75:05:a6:81:22:fd: a6:92:0c:ea:75:5d:94:c4:8c:17:1e:41:5e:26:23: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0B:BA:E4:77:02:AC:73:F8:E0:E3:A9:11:FD:4B:D8:3B:EB:BF:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/bc28aea9-4f7b-3ffb-a223-8fc9b43f6513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/0b77bb3c-d132-4e1d-adee-58a5fd374e08.crl X509v3 Authority Key Identifier: keyid:03:46:7C:16:39:4A:2F:1F:C7:C9:5B:B1:29:ED:4F:07:F8:61:48:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08.cer sbgp-ipAddrBlock: critical IPv4: 104.204.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ab:d9:d7:46:1f:84:40:9d:d8:83:72:54:a5:fa:5e:2c:56: a8:dd:4a:85:df:9c:6c:3e:32:25:48:7f:61:e0:3f:08:aa:c1: 2c:d1:4b:4a:30:f8:16:c4:71:de:00:12:06:cf:40:66:eb:d9: be:88:0b:38:94:1d:35:0e:8e:6d:6d:22:17:65:45:ef:70:d6: 49:c6:82:4a:7a:e1:a4:c2:67:72:14:5b:7f:7e:4f:3a:d3:c7: da:d5:e1:d5:07:67:b3:74:f8:2d:dd:db:fe:64:f6:c1:60:6a: c1:5b:37:ca:da:0f:58:89:b4:34:8d:96:8d:a8:5f:fd:57:c0: 36:a9:b9:e4:96:c9:5f:92:18:fd:ac:72:d4:cf:f1:81:ac:28: c6:1f:ca:a5:7b:d3:68:07:14:5a:06:ab:2e:97:97:a0:6a:6b: 6e:db:47:f4:68:2f:09:cc:74:c2:6f:81:74:ba:24:b4:05:ae: 0e:f9:60:75:78:b2:61:1d:07:9f:1e:31:af:ef:c3:31:ee:b8: 48:55:f2:74:9a:d0:a3:7d:f5:12:3e:e6:8e:51:d1:d6:0b:83: 2a:0c:7a:3a:20:ac:fa:a1:ba:b7:e9:ae:f4:e5:ec:5f:b5:d3: 61:2e:f4:ea:db:67:6c:e7:d9:49:1d:d1:2c:87:20:01:8d:ba: 66:91:88:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwrIPp8NExFUhhfLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI3N2JiM2MtZDEzMi00ZTFkLWFkZWUtNThhNWZkMzc0 ZTA4MB4XDTI1MTIxMzAyMDAzMFoXDTI2MDMxMzAxMDAzMFowLzEtMCsGA1UEAxMk N2MzMjFmMzctZDljZi00YTYyLWI5ZWEtOWVmOGQ1Mjk5NmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mErZpBFjcmCY3+GrEybmognpNDWDOacmcDq yjdB2W2x/HGlkvSc1B497CcqpWi6p59E0rS/e/EYwN6+IxODAQ2Segm0sBzh6KAD XKo4YTAnFBl21eBsiXTQex3WgU3vSCa1LPTVvA5u/hQcQaRD+hVKeQLGPWHMzRpp uzWBFOnaH7pe1Nre9tIrk7puoqn3IfQGsfZ2tPDp6qXVhQj1FVr3xFMaOP0Lcr3L iVENhQVt5NFgJMM2Q3QW1LZ8xuD6T0Ue+R/Rz/3zTh+DHYFHd1R9EbDHjRjxSz65 bMn9jVo0MVWNJLpvEWF1BaaBIv2mkgzqdV2UxIwXHkFeJiMpIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFILuuR3Aqxz+ODjqRH9S9g767/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYjc3 YmIzYy1kMTMyLTRlMWQtYWRlZS01OGE1ZmQzNzRlMDgvYmMyOGFlYTktNGY3Yi0z ZmZiLWEyMjMtOGZjOWI0M2Y2NTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGI3N2JiM2MtZDEzMi00ZTFkLWFk ZWUtNThhNWZkMzc0ZTA4LzBiNzdiYjNjLWQxMzItNGUxZC1hZGVlLTU4YTVmZDM3 NGUwOC5jcmwwHwYDVR0jBBgwFoAUA0Z8FjlKLx/HyVuxKe1PB/hhSF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYjc3YmIzYy1kMTMyLTRlMWQtYWRlZS01OGE1 ZmQzNzRlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyr2ddGH4RAndiDclSl+l4sVqjdSoXfnGw+MiVIf2HgPwiqwSzRS0ow +BbEcd4AEgbPQGbr2b6ICziUHTUOjm1tIhdlRe9w1knGgkp64aTCZ3IUW39+TzrT x9rV4dUHZ7N0+C3d2/5k9sFgasFbN8raD1iJtDSNlo2oX/1XwDapueSWyV+SGP2s ctTP8YGsKMYfyqV702gHFFoGqy6Xl6Bqa27bR/RoLwnMdMJvgXS6JLQFrg75YHV4 smEdB58eMa/vwzHuuEhV8nSa0KN99RI+5o5R0dYLgyoMejogrPqhurfprvTl7F+1 02Eu9OrbZ2zn2Ukd0SyHIAGNumaRiGA= -----END CERTIFICATE-----Generated at Mon Dec 22 03:45:56 2025 by rpki-client