This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa File: dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa (raw, json) Hash identifier: BCeYijZUTgyUjpCo5bXoSWS9OVJj2K75Y09YRHapToY= Subject key identifier: 55:26:5F:A3:B6:B3:40:C6:AC:35:AF:C3:75:CD:CA:D4:B5:13:33:B4 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584C5666B17071C08374023F9100 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 32870 IP address blocks: 136.147.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:b1:70:71:c0:83:74:02:3f:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=4c871aba-40e5-4052-bbf6-ffae0f9bfdaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:e1:09:4a:7a:7c:ea:f7:52:71:7f:03:67: c6:ba:05:23:c3:f4:21:31:78:a8:e4:db:4b:8f:51: 46:08:d3:ab:84:e4:bf:73:8a:87:ed:e7:e3:24:47: 3a:64:ef:93:ff:3a:99:4f:a6:40:88:d7:db:fe:56: 78:b3:01:17:bb:44:1c:3f:9b:8c:fa:10:6a:01:b4: 36:8d:51:c8:49:3f:b4:1f:86:23:60:0c:84:f3:58: 47:b7:76:98:aa:37:61:34:b0:e8:0e:22:be:16:18: 05:16:66:e1:fd:b8:3c:1f:5e:b9:5b:4a:b3:21:cd: b1:c0:df:72:d3:53:10:79:43:3c:2e:2a:25:00:2b: 31:65:37:63:d0:f7:08:b1:23:3d:a8:27:8f:73:b3: d3:69:1b:72:5c:48:76:de:44:72:b4:59:70:f5:b4: a8:51:cb:d1:12:f4:af:ec:e6:3f:65:85:4f:8d:cf: f3:da:d2:c5:75:50:67:b6:51:54:d2:b5:c6:75:e5: 65:6e:14:d3:2c:74:3d:d6:1b:0a:bd:a5:e5:ce:b4: ea:4b:8d:09:43:4c:46:b2:3e:55:23:6c:4c:c3:2c: 2c:e4:0c:f6:c8:5c:74:11:85:db:21:95:b8:ba:8c: 3e:00:42:1d:5b:c4:23:6c:29:0a:f3:4e:20:b0:ee: 0e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:26:5F:A3:B6:B3:40:C6:AC:35:AF:C3:75:CD:CA:D4:B5:13:33:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/dd3401dc-00d9-31c3-aea8-4150a87f1e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 136.147.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:79:a9:f7:b9:64:b3:d1:d8:29:7b:40:6d:8e:bf:04:74:b3: 89:72:d0:39:f6:96:d8:40:e4:cc:72:c3:1f:f4:be:27:84:2c: e3:2a:d3:44:b9:ed:9c:64:14:a9:c9:de:80:0e:bb:c3:18:69: d7:e6:92:32:02:27:96:b7:3d:e8:ef:9b:aa:c1:70:96:3c:21: 09:cf:71:f1:bc:41:36:2b:47:c8:9c:3e:e8:6b:38:f7:3d:f2: 18:33:57:34:77:35:68:de:29:12:cf:1a:15:15:13:2b:07:35: 95:49:5a:90:e6:5e:f6:13:52:be:f3:5e:4e:23:29:36:4d:5e: a8:65:1e:c3:a8:62:9b:16:f1:70:ae:f3:39:d7:76:c8:92:22: 3d:e8:f2:20:76:0e:a5:fb:82:2c:31:e8:97:c2:ff:50:8a:43: 0e:0d:00:d5:55:34:0e:eb:87:06:ae:ef:71:1c:31:7e:c2:a2: 92:28:47:8e:0d:9d:6b:28:20:68:0e:6d:96:3e:7d:0e:cc:0f: dd:82:81:51:83:44:2e:e5:68:23:4c:75:bb:53:d7:24:e5:bd: 13:bf:a7:31:82:51:45:d9:98:f2:ba:87:f4:22:58:07:9c:ee: cf:05:2b:62:a0:2e:6b:8c:29:f4:88:6f:0e:3c:4f:30:df:e0: 60:ee:6a:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZrFwccCDdAI/kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk NGM4NzFhYmEtNDBlNS00MDUyLWJiZjYtZmZhZTBmOWJmZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGjhCUp6fOr3UnF/A2fGugUjw/QhMXio5NtL j1FGCNOrhOS/c4qH7efjJEc6ZO+T/zqZT6ZAiNfb/lZ4swEXu0QcP5uM+hBqAbQ2 jVHIST+0H4YjYAyE81hHt3aYqjdhNLDoDiK+FhgFFmbh/bg8H165W0qzIc2xwN9y 01MQeUM8LiolACsxZTdj0PcIsSM9qCePc7PTaRtyXEh23kRytFlw9bSoUcvREvSv 7OY/ZYVPjc/z2tLFdVBntlFU0rXGdeVlbhTTLHQ91hsKvaXlzrTqS40JQ0xGsj5V I2xMwyws5Az2yFx0EYXbIZW4uow+AEIdW8QjbCkK804gsO4OFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUmX6O2s0DGrDWvw3XNytS1EzO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZGQzNDAxZGMtMDBkOS0z MWMzLWFlYTgtNDE1MGE4N2YxZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiJOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB5qfe5ZLPR2Cl7QG2OvwR0s4ly0Dn2lthA5Mxywx/0vieELOMq00S5 7ZxkFKnJ3oAOu8MYadfmkjICJ5a3Pejvm6rBcJY8IQnPcfG8QTYrR8icPuhrOPc9 8hgzVzR3NWjeKRLPGhUVEysHNZVJWpDmXvYTUr7zXk4jKTZNXqhlHsOoYpsW8XCu 8znXdsiSIj3o8iB2DqX7giwx6JfC/1CKQw4NANVVNA7rhwau73EcMX7CopIoR44N nWsoIGgObZY+fQ7MD92CgVGDRC7laCNMdbtT1yTlvRO/pzGCUUXZmPK6h/QiWAec 7s8FK2KgLmuMKfSIbw48TzDf4GDuap0= -----END CERTIFICATE-----Generated at Mon Jan 19 13:26:41 2026 by rpki-client