This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bca9f9d7-d0db-3df9-acf8-7d93676af797.roa File: bca9f9d7-d0db-3df9-acf8-7d93676af797.roa (raw, json) Hash identifier: qTfb7jgPrOQOmAAwI6QR31uCHSVBoCWgog9KHs1NrLY= Subject key identifier: 5A:2A:9E:DF:A3:43:50:57:75:2B:5C:F1:E7:79:73:9A:2B:C9:0E:8D Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584C5931442600076E7EE3AE4800 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bca9f9d7-d0db-3df9-acf8-7d93676af797.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 203 IP address blocks: 20.149.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:44:26:00:07:6e:7e:e3:ae:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=bb7846a5-d33c-448e-91e1-5f0a282827a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:ad:99:a4:d0:65:76:6a:8d:b1:37:a6:84: 3a:6c:69:8f:76:4e:c4:5f:e4:cb:39:32:f3:6a:95: ca:9f:a4:cc:99:82:c2:f0:71:7c:89:e1:c9:4d:2c: 42:d8:5f:bd:a7:43:1e:0a:a2:0b:6d:ab:ec:9d:05: ec:b1:7a:5f:d0:4c:e3:8b:27:a4:d5:85:ba:02:46: 3d:28:9d:08:11:9c:93:dc:40:58:01:ae:30:02:83: 43:24:c5:4c:b5:2d:30:3e:30:87:ab:c2:36:43:67: 3a:e7:21:04:95:df:5a:9a:ff:70:6c:76:0d:4a:fd: 7b:93:ab:85:f0:25:9b:f6:f9:8e:10:1a:f0:75:ad: a4:c0:21:fb:ff:dd:84:0b:c6:59:6f:db:ba:2d:89: ca:70:ab:d8:18:2c:e7:6b:06:00:31:ca:c1:bb:59: c6:c9:4a:f6:f1:33:a6:b8:04:db:b1:ca:5b:03:d1: 94:29:8a:89:24:3d:3d:c8:d1:28:90:84:91:7f:64: dc:dc:79:30:92:78:c1:ba:05:3c:f6:cb:2f:04:34: ff:90:93:3e:30:64:b4:26:03:05:95:6a:28:e1:7a: d9:78:cb:5a:6c:d6:83:3a:1c:bd:b4:bd:ac:a7:a1: b1:1f:1e:b4:8b:e1:28:4a:79:4b:64:7e:d7:d9:2e: b7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2A:9E:DF:A3:43:50:57:75:2B:5C:F1:E7:79:73:9A:2B:C9:0E:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/bca9f9d7-d0db-3df9-acf8-7d93676af797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.149.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:bf:e2:73:76:02:99:36:2f:0b:f5:3d:b1:a7:f4:fd:27:6f: 08:69:0e:cd:4c:ef:7e:42:1c:aa:f5:b1:1b:75:58:fe:56:c1: 00:78:57:9e:fb:9f:b8:2a:2d:d4:cd:12:78:ac:e6:5a:9d:8c: e4:c3:76:ae:21:96:8f:e6:6d:b7:0f:d7:e9:bc:e8:3a:df:55: ca:1d:70:48:53:75:4d:a8:c1:89:c0:46:5a:92:3d:c1:c5:ce: c9:2f:b5:30:ce:7d:03:b2:e3:a6:06:3f:95:0c:b8:f3:d3:fd: f1:fc:3c:30:62:ec:d0:99:dc:0d:fa:06:ba:85:1c:d9:40:29: bc:0d:66:b1:38:51:21:07:d5:08:9f:be:44:f9:d0:f0:7f:76: 7f:f3:30:4a:cc:a3:03:eb:2e:87:b3:ae:5b:d0:50:4d:a2:0f: b4:56:9d:cb:12:5f:17:81:b7:46:c5:3e:82:8f:48:2e:93:36: 59:8c:44:37:c9:63:98:b6:a0:72:8b:f8:02:67:28:10:7f:a4: 87:6e:24:f9:c7:ec:21:4a:da:82:f2:2e:78:d3:f8:0c:3f:78: 14:74:a8:5c:8f:20:0b:dc:09:5c:fd:c5:75:e9:d3:38:21:32: 4a:41:0a:fd:97:34:c5:f3:c2:3a:72:85:e3:08:87:62:ad:9e: cd:62:a5:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMUQmAAdufuOuSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk YmI3ODQ2YTUtZDMzYy00NDhlLTkxZTEtNWYwYTI4MjgyN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniqtmaTQZXZqjbE3poQ6bGmPdk7EX+TLOTLz apXKn6TMmYLC8HF8ieHJTSxC2F+9p0MeCqILbavsnQXssXpf0Ezjiyek1YW6AkY9 KJ0IEZyT3EBYAa4wAoNDJMVMtS0wPjCHq8I2Q2c65yEEld9amv9wbHYNSv17k6uF 8CWb9vmOEBrwda2kwCH7/92EC8ZZb9u6LYnKcKvYGCznawYAMcrBu1nGyUr28TOm uATbscpbA9GUKYqJJD09yNEokISRf2Tc3HkwknjBugU89ssvBDT/kJM+MGS0JgMF lWoo4XrZeMtabNaDOhy9tL2sp6GxHx60i+EoSnlLZH7X2S63dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoqnt+jQ1BXdStc8ed5c5oryQ6NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvYmNhOWY5ZDctZDBkYi0z ZGY5LWFjZjgtN2Q5MzY3NmFmNzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFJUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC/4nN2Apk2Lwv1PbGn9P0nbwhpDs1M735CHKr1sRt1WP5WwQB4V577 n7gqLdTNEnis5lqdjOTDdq4hlo/mbbcP1+m86DrfVcodcEhTdU2owYnARlqSPcHF zskvtTDOfQOy46YGP5UMuPPT/fH8PDBi7NCZ3A36BrqFHNlAKbwNZrE4USEH1Qif vkT50PB/dn/zMErMowPrLoezrlvQUE2iD7RWncsSXxeBt0bFPoKPSC6TNlmMRDfJ Y5i2oHKL+AJnKBB/pIduJPnH7CFK2oLyLnjT+Aw/eBR0qFyPIAvcCVz9xXXp0zgh MkpBCv2XNMXzwjpyheMIh2Ktns1ipRs= -----END CERTIFICATE-----Generated at Thu Jan 22 09:54:11 2026 by rpki-client