This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa File: 5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa (raw, json) Hash identifier: g2byB+xEYbVeDpSd/ConMomJRavyq/9eK3UheN/kce0= Subject key identifier: 54:BA:6F:42:6D:AB:62:23:07:AD:6A:69:66:2D:DB:13:F3:71:7E:AA Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584C40115CA3833662E376DEE680 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 14618 IP address blocks: 129.77.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:5c:a3:83:36:62:e3:76:de:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=92b4ab12-39dc-4160-b48c-db8e9aac010f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f3:60:2d:17:db:d1:73:80:d4:49:b2:69:4b: 5d:9a:db:ca:0a:45:50:a3:f1:d3:99:65:f3:25:1f: 19:13:9f:d9:04:7a:77:8b:e6:57:36:89:42:0c:88: cc:54:ee:ed:54:79:7b:8a:ac:a6:c1:dc:31:21:da: 3d:ba:55:ef:0a:c7:b8:6f:fd:09:ce:21:f9:a0:13: 4a:3f:b3:96:cf:55:d8:63:42:72:64:ef:ca:4f:b1: 23:b6:2e:00:77:70:56:6d:12:d4:97:34:71:7d:18: 0e:94:f8:ba:04:9d:ba:3e:f9:59:f9:57:3f:97:33: f8:67:27:4b:1b:df:ec:3b:9d:0a:14:44:9f:85:86: 8f:81:8b:f0:2c:b6:0c:fd:a3:3b:a8:8f:ef:0e:d5: 86:3b:7b:df:dd:bf:8f:e7:a2:65:64:26:95:a4:b0: d7:00:a1:17:3d:ec:7f:ed:24:0a:bb:be:72:0e:3b: 01:40:5d:d2:4d:eb:50:0a:cd:ef:4a:22:10:7a:29: 1c:c8:b3:3b:37:20:72:c1:71:d1:7b:2e:60:22:ac: 97:39:66:82:cc:c7:09:e4:fa:e9:11:17:23:48:db: a0:ad:87:06:98:70:d8:e4:cf:de:ce:8d:03:8a:0c: d9:64:e2:5b:44:07:a2:ec:ec:25:01:69:36:79:47: ee:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BA:6F:42:6D:AB:62:23:07:AD:6A:69:66:2D:DB:13:F3:71:7E:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5b541df7-c227-3c1a-8a7d-0ce4e92e4e77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 129.77.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:4f:c6:5c:7e:a1:ab:f6:e1:71:a0:e6:7e:6b:85:3a:af:b5: a5:15:b3:b7:d1:38:e2:51:96:1b:71:72:90:6a:f6:35:37:ff: ff:6a:69:ae:25:b2:96:ca:ab:7d:d3:95:5e:d1:58:76:ce:9c: 22:1b:39:7d:f6:d2:04:bc:9f:23:e2:e7:19:b1:a6:26:56:cc: 62:00:d2:e7:e1:48:20:d1:53:9c:78:c4:80:04:f3:07:4b:bf: 83:00:10:c1:ae:8b:0b:f6:ac:e6:e8:88:6f:61:38:65:b1:64: ef:b5:87:42:83:bd:45:b1:38:ee:0e:f7:ca:2e:aa:a2:5f:b0: 8e:ae:91:2d:a4:0f:53:c9:80:65:1b:69:93:a4:e8:d2:a5:23: 9f:d7:11:e0:f8:18:ca:e5:ca:db:51:c8:85:7b:6a:64:91:8f: e2:4f:c9:81:b7:0a:45:99:68:2c:16:8d:e2:17:23:15:64:2b: e0:62:d3:35:4f:5f:99:5d:7d:5a:22:78:f3:40:0c:87:5b:b0: 33:39:a7:ab:a0:d1:e3:d3:40:4b:7d:4a:56:b4:25:bc:08:62: e3:5f:dc:3d:c3:cb:37:a0:fa:9c:94:4e:7a:1a:72:b2:c6:ee: 27:09:7f:40:92:7d:16:1c:78:9f:f8:45:bd:99:f7:db:c7:18: d6:27:2c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEVyjgzZi43be5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk OTJiNGFiMTItMzlkYy00MTYwLWI0OGMtZGI4ZTlhYWMwMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvNgLRfb0XOA1EmyaUtdmtvKCkVQo/HTmWXz JR8ZE5/ZBHp3i+ZXNolCDIjMVO7tVHl7iqymwdwxIdo9ulXvCse4b/0JziH5oBNK P7OWz1XYY0JyZO/KT7Ejti4Ad3BWbRLUlzRxfRgOlPi6BJ26PvlZ+Vc/lzP4ZydL G9/sO50KFESfhYaPgYvwLLYM/aM7qI/vDtWGO3vf3b+P56JlZCaVpLDXAKEXPex/ 7SQKu75yDjsBQF3STetQCs3vSiIQeikcyLM7NyBywXHRey5gIqyXOWaCzMcJ5Prp ERcjSNugrYcGmHDY5M/ezo0DigzZZOJbRAei7OwlAWk2eUfuKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFS6b0Jtq2IjB61qaWYt2xPzcX6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNWI1NDFkZjctYzIyNy0z YzFhLThhN2QtMGNlNGU5MmU0ZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgU0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJPxlx+oav24XGg5n5rhTqvtaUVs7fROOJRlhtxcpBq9jU3//9qaa4l spbKq33TlV7RWHbOnCIbOX320gS8nyPi5xmxpiZWzGIA0ufhSCDRU5x4xIAE8wdL v4MAEMGuiwv2rOboiG9hOGWxZO+1h0KDvUWxOO4O98ouqqJfsI6ukS2kD1PJgGUb aZOk6NKlI5/XEeD4GMrlyttRyIV7amSRj+JPyYG3CkWZaCwWjeIXIxVkK+Bi0zVP X5ldfVoiePNADIdbsDM5p6ug0ePTQEt9Sla0JbwIYuNf3D3Dyzeg+pyUTnoacrLG 7icJf0CSfRYceJ/4Rb2Z99vHGNYnLLI= -----END CERTIFICATE-----Generated at Mon Jan 19 13:26:21 2026 by rpki-client