This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa File: bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa (raw, json) Hash identifier: 7QL8VEvyufcv2fNBp+ARa0Hw8CtZgN3Ry4yrHT62qos= Subject key identifier: 9B:2F:7B:0B:6E:2A:71:C1:0A:EE:D1:48:DE:48:07:E1:7C:43:F2:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C401147F29A49ABF80415AFC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 15169 IP address blocks: 108.177.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:47:f2:9a:49:ab:f8:04:15:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=b1bcb408-00ba-4522-9ee9-22b8d0e06434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:a6:90:c8:8d:ec:bd:37:ee:9b:e3:e2:0f: 82:ab:08:a9:e6:e2:28:4a:bf:12:31:19:d4:c2:aa: 86:8d:37:cd:fd:46:09:ad:ae:8d:38:23:5f:55:50: 53:44:66:cf:de:7c:72:95:50:43:28:4c:75:69:81: 34:b5:1a:69:8e:0b:4f:fc:0b:c1:c7:9f:f2:e9:ef: 73:69:d5:70:f0:fb:d2:00:18:8c:63:90:86:d9:9e: 08:d6:d7:f4:74:51:93:31:b6:f5:19:99:36:2e:84: 65:bd:52:9b:55:89:de:c6:a2:89:4f:a8:43:32:e4: 2a:27:46:7a:62:15:7c:72:98:e5:da:1d:90:1f:22: 2e:e4:06:80:99:f6:db:eb:52:11:0b:c2:83:e7:fe: fa:70:9d:fc:5a:81:ed:44:ea:cb:87:58:7f:79:a2: 03:f3:46:00:b4:e6:2f:24:0e:4e:6b:c7:1e:1c:3e: b1:12:7a:93:c6:5b:3f:b2:f7:ec:c5:72:0a:77:fb: 6f:59:b0:c9:bb:8e:4e:1c:98:9a:d2:9a:68:d6:7d: 7f:d1:e1:e2:e3:dd:13:b0:41:00:8f:74:c1:d1:b6: 5c:25:c8:3c:26:ac:f5:7d:8e:3a:b2:32:4d:1c:6b: c9:91:f4:70:56:87:45:fc:46:6c:21:c9:bf:70:88: 95:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2F:7B:0B:6E:2A:71:C1:0A:EE:D1:48:DE:48:07:E1:7C:43:F2:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6f:06:ba:70:b9:d3:00:90:52:fd:b5:9c:aa:05:be:4b:2e: b6:81:e1:12:fc:7d:12:81:4d:08:58:14:2d:da:fe:cc:23:6b: 6a:90:0d:6a:c4:dc:77:92:ce:21:bb:f7:ab:79:f0:19:83:8a: 4f:82:56:79:f6:8a:e2:e9:73:c4:72:47:2c:27:c1:2c:be:45: d7:cf:95:b6:85:f0:98:af:59:3e:8a:19:ec:1d:09:26:98:ab: d2:ae:66:c7:c1:bb:85:76:14:6b:26:e9:f4:c9:1b:a1:aa:45: 82:7f:ee:8a:bb:e8:9c:11:ad:d0:e2:97:97:c3:e2:7d:5a:f0: 30:86:e0:4d:55:e6:55:89:33:98:7c:7c:b7:b9:5f:6d:de:7c: b6:1f:4b:ff:e6:ff:5f:30:0b:b1:18:ec:98:a3:51:05:27:de: 2a:31:f9:0d:9d:59:ea:20:a4:f8:e7:f8:64:f5:f5:19:2f:56: 16:51:d8:8b:4a:76:d3:77:e6:73:b7:3a:84:15:c9:5a:46:fd: 0d:e5:43:42:f8:de:b7:e4:d5:1b:d9:a6:6c:a8:c3:f0:06:8b: 3f:00:1d:e1:70:29:15:9e:d2:42:3a:95:66:03:08:41:1b:20: 9d:ed:03:42:3f:24:72:72:85:a7:e0:3e:74:5b:dc:59:a7:0b: 3e:0e:a1:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEUfymkmr+AQVr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk YjFiY2I0MDgtMDBiYS00NTIyLTllZTktMjJiOGQwZTA2NDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorqmkMiN7L037pvj4g+Cqwip5uIoSr8SMRnU wqqGjTfN/UYJra6NOCNfVVBTRGbP3nxylVBDKEx1aYE0tRppjgtP/AvBx5/y6e9z adVw8PvSABiMY5CG2Z4I1tf0dFGTMbb1GZk2LoRlvVKbVYnexqKJT6hDMuQqJ0Z6 YhV8cpjl2h2QHyIu5AaAmfbb61IRC8KD5/76cJ38WoHtROrLh1h/eaID80YAtOYv JA5Oa8ceHD6xEnqTxls/svfsxXIKd/tvWbDJu45OHJia0ppo1n1/0eHi490TsEEA j3TB0bZcJcg8Jqz1fY46sjJNHGvJkfRwVodF/EZsIcm/cIiVHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsvewtuKnHBCu7RSN5IB+F8Q/IaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmZhNjY4YjAtYjViMC0z OGE2LWI2Y2UtNTIwYzRhOWQwZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJvBrpwudMAkFL9tZyqBb5LLraB4RL8fRKBTQhYFC3a/swja2qQDWrE 3HeSziG796t58BmDik+CVnn2iuLpc8RyRywnwSy+RdfPlbaF8JivWT6KGewdCSaY q9KuZsfBu4V2FGsm6fTJG6GqRYJ/7oq76JwRrdDil5fD4n1a8DCG4E1V5lWJM5h8 fLe5X23efLYfS//m/18wC7EY7JijUQUn3iox+Q2dWeogpPjn+GT19RkvVhZR2ItK dtN35nO3OoQVyVpG/Q3lQ0L43rfk1RvZpmyow/AGiz8AHeFwKRWe0kI6lWYDCEEb IJ3tA0I/JHJyhafgPnRb3FmnCz4OofQ= -----END CERTIFICATE-----Generated at Sun Dec 21 22:37:50 2025 by rpki-client