This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/bc0a08e4-1fdd-36f3-aa49-99dd057cae71.roa File: bc0a08e4-1fdd-36f3-aa49-99dd057cae71.roa (raw, json) Hash identifier: 94NOJS11P+84XPbp9cQ1U1Hce8Vldazri2EGJ/DOLFk= Subject key identifier: D2:24:59:C1:70:DB:BD:4F:C5:30:57:B6:DC:61:EE:2A:3A:5E:13:46 Certificate issuer: /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861 Certificate serial: 010D0C9F4328584C364BAB0109D8A6A61AE7CC40 Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/bc0a08e4-1fdd-36f3-aa49-99dd057cae71.roa Signing time: Wed 17 Dec 2025 02:00:31 +0000 ROA not before: Wed 17 Dec 2025 02:00:31 +0000 ROA not after: Tue 17 Mar 2026 01:00:31 +0000 asID: 63201 IP address blocks: 213.159.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:36:4b:ab:01:09:d8:a6:a6:1a:e7:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861 Validity Not Before: Dec 17 02:00:31 2025 GMT Not After : Mar 17 01:00:31 2026 GMT Subject: CN=7d42209c-151a-40a2-9741-e234486b3d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:a9:77:5c:28:c4:13:52:51:62:69:8c:5d: 57:a1:ca:b4:28:da:4b:14:9c:2c:8c:de:0c:4b:8a: df:1e:90:b9:b0:75:43:48:33:2b:77:ff:0e:78:4d: b1:50:f8:fe:e6:da:cb:d4:77:78:d8:e6:71:4f:e0: 08:e5:ac:63:a3:35:20:66:04:e5:75:5e:8c:81:37: 64:0b:fa:68:cf:04:31:b4:f4:b1:3e:ba:0e:31:65: 52:b8:b3:3c:06:cb:dc:72:61:53:f9:b1:9f:fc:1c: f4:d0:d7:54:c7:26:66:a6:79:d5:c4:7e:8f:d7:20: 25:5d:fc:e5:64:bd:a3:11:94:77:c5:e0:bf:be:f4: b4:ca:d1:72:dc:96:a4:f0:1d:b9:fe:c4:df:a9:d9: 2c:99:be:e7:12:c5:d2:09:79:11:aa:cc:8c:a8:b0: e4:6b:df:e8:09:8a:7d:0e:49:3c:43:c6:67:f2:c0: 14:69:66:f5:12:a5:3a:0b:03:e1:e2:b7:80:d8:f0: c4:75:78:0b:7a:ef:83:d0:ca:a4:09:55:92:e1:7a: 4e:39:27:43:78:eb:00:35:c4:fd:ac:00:18:3a:55: 20:09:69:5e:69:74:01:34:ec:c0:9a:4e:89:17:23: b2:a7:73:70:bd:01:ae:e1:d6:1d:bd:c3:a8:e1:3f: aa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:24:59:C1:70:DB:BD:4F:C5:30:57:B6:DC:61:EE:2A:3A:5E:13:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/bc0a08e4-1fdd-36f3-aa49-99dd057cae71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl X509v3 Authority Key Identifier: keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer sbgp-ipAddrBlock: critical IPv4: 213.159.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1a:ff:07:3d:f9:6d:02:74:ca:32:cc:59:e8:c1:23:3d:d4: b2:7c:2f:f4:04:8d:ad:cf:88:18:f5:6c:57:29:d6:f2:c3:13: 80:f2:2c:3f:ed:54:77:f3:b5:52:c1:48:66:c9:df:a2:95:8a: 38:c1:0f:4a:32:5b:9c:59:db:79:f1:86:b1:e4:d3:b7:3a:e0: 26:bb:ee:5b:33:f5:e1:c2:0c:00:56:dd:83:1a:1f:49:8d:92: 71:71:1a:74:61:02:7f:c7:ba:27:67:6d:c3:22:7f:55:9f:02: 32:e6:b2:2c:5b:9b:59:3c:a1:c3:59:df:dd:5b:5a:5e:ab:de: 2d:fd:4b:97:a4:0a:2e:ac:80:43:ac:4d:2a:46:bf:d2:14:bd: d0:83:49:44:da:87:04:b7:0d:3b:75:43:f2:84:dd:4b:a5:64: b9:18:cd:fc:a1:a9:4b:14:09:32:9d:16:dc:9a:e1:9a:fd:98: f0:2d:0b:58:10:72:d4:74:e0:2c:4f:3a:4a:1c:dd:42:68:3e: 1a:b1:b3:85:6b:98:55:57:ea:85:42:dd:9f:3e:da:fa:d7:2f: 73:22:5a:21:1b:0a:c3:cc:5c:04:99:e5:f3:34:02:20:7e:03: b6:84:f2:f9:b3:e5:13:76:9a:b0:e1:f2:95:d1:e6:0e:33:02: 59:c7:0c:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw2S6sBCdimphrnzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkMGUwMmEtZTRmMC00OTYwLWFkNzktNjhmM2I1M2Ez ODYxMB4XDTI1MTIxNzAyMDAzMVoXDTI2MDMxNzAxMDAzMVowLzEtMCsGA1UEAxMk N2Q0MjIwOWMtMTUxYS00MGEyLTk3NDEtZTIzNDQ4NmIzZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIipd1woxBNSUWJpjF1Xocq0KNpLFJwsjN4M S4rfHpC5sHVDSDMrd/8OeE2xUPj+5trL1Hd42OZxT+AI5axjozUgZgTldV6MgTdk C/pozwQxtPSxProOMWVSuLM8BsvccmFT+bGf/Bz00NdUxyZmpnnVxH6P1yAlXfzl ZL2jEZR3xeC/vvS0ytFy3Jak8B25/sTfqdksmb7nEsXSCXkRqsyMqLDka9/oCYp9 Dkk8Q8Zn8sAUaWb1EqU6CwPh4reA2PDEdXgLeu+D0MqkCVWS4XpOOSdDeOsANcT9 rAAYOlUgCWleaXQBNOzAmk6JFyOyp3NwvQGu4dYdvcOo4T+qmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIkWcFw271PxTBXttxh7io6XhNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQw ZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYzYjUzYTM4NjEvYmMwYTA4ZTQtMWZkZC0z NmYzLWFhNDktOTlkZDA1N2NhZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjJkMGUwMmEtZTRmMC00OTYwLWFk NzktNjhmM2I1M2EzODYxLzIyZDBlMDJhLWU0ZjAtNDk2MC1hZDc5LTY4ZjNiNTNh Mzg2MS5jcmwwHwYDVR0jBBgwFoAUe63A+wvfQ2rIyKWeWz1EEpSjXD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQwZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYz YjUzYTM4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1Z+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoa/wc9+W0CdMoyzFnowSM91LJ8L/QEja3PiBj1bFcp1vLDE4DyLD/t VHfztVLBSGbJ36KVijjBD0oyW5xZ23nxhrHk07c64Ca77lsz9eHCDABW3YMaH0mN knFxGnRhAn/HuidnbcMif1WfAjLmsixbm1k8ocNZ391bWl6r3i39S5ekCi6sgEOs TSpGv9IUvdCDSUTahwS3DTt1Q/KE3UulZLkYzfyhqUsUCTKdFtya4Zr9mPAtC1gQ ctR04CxPOkoc3UJoPhqxs4VrmFVX6oVC3Z8+2vrXL3MiWiEbCsPMXASZ5fM0AiB+ A7aE8vmz5RN2mrDh8pXR5g4zAlnHDO8= -----END CERTIFICATE-----Generated at Mon Dec 22 03:30:41 2025 by rpki-client