This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa File: bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa (raw, json) Hash identifier: RiGwWHfUvBeZDNDE73gA133aoueu+XRYsklbGLNuTa0= Subject key identifier: 65:B4:69:C8:96:6C:72:37:E9:19:C9:7D:DD:3B:08:7B:E0:FA:ED:CE Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584BFBAB3C7A214BFBBD38A39200 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 1239 IP address blocks: 149.143.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:3c:7a:21:4b:fb:bd:38:a3:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=ab12bd1f-b3ec-479d-898d-eb94ccd9e456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:ec:30:b6:81:43:3a:50:91:27:2c:9d:5c: e0:02:59:33:0e:6c:c0:34:93:81:8c:21:69:7e:4e: a5:65:8e:ec:15:f2:a5:d4:78:27:33:f8:db:dd:3a: a4:9e:35:db:cf:33:8e:85:5e:39:5b:f8:56:10:7d: b3:8e:7d:b6:e2:ce:49:8e:fb:78:5a:6c:70:ee:8d: e8:43:2c:fa:74:78:00:a1:19:92:cd:cf:e7:ed:bf: aa:09:62:1f:38:24:bc:7a:dc:37:43:42:21:e8:0f: 2b:b5:72:dd:60:37:7b:73:c9:d5:0f:00:0f:a0:e6: 54:12:95:a3:f7:38:f7:16:6b:e5:22:ba:a7:d5:d3: 4d:96:82:00:bc:35:b8:3e:d4:94:c7:fd:fa:3c:7f: 48:99:e0:35:67:0f:64:1f:15:3d:b2:c0:c4:a5:b1: 91:0f:19:5a:40:81:81:fa:fb:35:22:4f:aa:c2:b2: 9f:87:02:27:bf:9e:62:5b:93:27:e0:c8:86:8b:96: f4:80:92:3c:9d:25:c2:a0:f4:4d:d5:b3:18:0e:55: 21:6d:1f:3e:16:21:bd:eb:08:c8:a7:ea:3a:b6:88: 00:70:49:72:3f:47:db:25:da:30:8f:9c:15:bb:0e: 49:92:dc:77:86:a8:0f:23:f2:1d:e6:a4:62:2c:87: e6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B4:69:C8:96:6C:72:37:E9:19:C9:7D:DD:3B:08:7B:E0:FA:ED:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/bfa6ba25-68fd-3493-8d45-45583c8b97c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:44:6a:d8:c3:1d:77:ac:ad:6e:30:0c:39:71:ec:66:d4:ef: af:a4:a8:95:b5:8f:a8:56:1e:0b:bc:70:12:92:ee:83:98:27: 2e:f9:ad:fb:fc:c0:82:fa:30:e0:68:6e:64:dd:ec:02:41:da: 3d:0f:56:9b:2a:ed:dd:af:94:9a:06:91:4b:b8:e7:95:ce:d5: dd:f3:3e:be:62:a1:b0:73:47:5a:98:91:78:74:ff:14:7a:d8: 2a:a2:90:22:2b:c0:b3:21:f8:4c:9f:23:e0:09:d3:ef:9b:4c: aa:e9:42:ed:6f:0d:bd:a3:40:e8:32:5b:9e:ea:c4:0e:ba:7c: 6b:0c:fd:6b:d7:4f:dc:a6:be:aa:97:69:08:79:13:d2:3d:34: 75:3d:58:4a:c3:9e:4a:8d:68:94:c1:1c:55:78:cb:28:d4:e3: db:6c:fa:2b:74:ba:0b:07:b2:c0:66:e5:52:83:af:9b:ef:72: 6c:b1:b2:1c:85:2e:84:be:c9:fd:6c:fd:fe:2c:4b:b8:34:cd: 04:22:44:1d:b8:07:7e:2f:38:b8:1c:25:36:c0:84:69:be:19: 1f:27:5a:ba:1d:fc:32:9c:20:e0:27:5e:be:83:ec:83:d0:e9: 35:00:1d:cd:e7:a3:71:c5:8f:11:ac:c7:09:cb:e0:9a:84:f8: 8b:be:c6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7qzx6IUv7vTijkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk YWIxMmJkMWYtYjNlYy00NzlkLTg5OGQtZWI5NGNjZDllNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvabsMLaBQzpQkScsnVzgAlkzDmzANJOBjCFp fk6lZY7sFfKl1HgnM/jb3TqknjXbzzOOhV45W/hWEH2zjn224s5Jjvt4Wmxw7o3o Qyz6dHgAoRmSzc/n7b+qCWIfOCS8etw3Q0Ih6A8rtXLdYDd7c8nVDwAPoOZUEpWj 9zj3FmvlIrqn1dNNloIAvDW4PtSUx/36PH9ImeA1Zw9kHxU9ssDEpbGRDxlaQIGB +vs1Ik+qwrKfhwInv55iW5Mn4MiGi5b0gJI8nSXCoPRN1bMYDlUhbR8+FiG96wjI p+o6togAcElyP0fbJdowj5wVuw5Jktx3hqgPI/Id5qRiLIfmrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGW0aciWbHI36RnJfd07CHvg+u3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYmZhNmJhMjUtNjhmZC0z NDkzLThkNDUtNDU1ODNjOGI5N2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJEatjDHXesrW4wDDlx7GbU76+kqJW1j6hWHgu8cBKS7oOYJy75rfv8 wIL6MOBobmTd7AJB2j0PVpsq7d2vlJoGkUu455XO1d3zPr5iobBzR1qYkXh0/xR6 2CqikCIrwLMh+EyfI+AJ0++bTKrpQu1vDb2jQOgyW57qxA66fGsM/WvXT9ymvqqX aQh5E9I9NHU9WErDnkqNaJTBHFV4yyjU49ts+it0ugsHssBm5VKDr5vvcmyxshyF LoS+yf1s/f4sS7g0zQQiRB24B34vOLgcJTbAhGm+GR8nWrod/DKcIOAnXr6D7IPQ 6TUAHc3no3HFjxGsxwnL4JqE+Iu+xs0= -----END CERTIFICATE-----Generated at Sat Nov 29 22:29:30 2025 by rpki-client