This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/28c297e9-6701-3a4f-bea0-343929f7fbc3.roa File: 28c297e9-6701-3a4f-bea0-343929f7fbc3.roa (raw, json) Hash identifier: VpYjVkaMMKkHGCBnL/J2Q8Xm28qn9G4I6g4/Qjkh15g= Subject key identifier: 87:58:10:67:56:4A:B2:01:44:5B:EB:F6:A4:5F:5A:D4:C6:84:EF:77 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584C29BB914D56C2D1E08ED2F540 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/28c297e9-6701-3a4f-bea0-343929f7fbc3.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 14340 IP address blocks: 140.190.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:91:4d:56:c2:d1:e0:8e:d2:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=9ef595eb-4fdd-45a1-bd02-562f4001090e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:93:e9:e3:ad:52:bb:30:4a:7e:9f:78:82:e0: 23:69:28:7c:f4:cf:87:f0:de:4b:0a:83:33:14:7c: fe:1d:90:9b:71:8a:f4:b0:21:f0:d8:0d:dd:fe:6f: c1:63:3e:8e:7f:00:40:28:5d:41:85:26:6c:92:1d: 25:de:e2:3b:a8:6f:73:c7:66:f7:b0:68:8a:40:6a: 78:8b:74:ad:2e:b0:19:89:43:2e:a5:55:f5:9b:8b: b4:af:26:95:ca:b9:20:fc:11:2a:9b:18:0c:55:d2: b6:c0:68:f9:68:5c:67:6e:3d:68:d8:0f:39:d2:84: a1:d2:b5:1c:bf:08:ca:f1:a7:f5:34:c5:ba:a3:88: c3:d2:46:b4:86:27:0c:e2:a7:d2:ba:70:49:7a:33: 6b:01:1a:00:b4:67:42:5c:ff:2b:48:30:c1:67:de: 81:34:f8:66:44:36:34:59:c5:89:8c:50:d2:3b:17: 27:de:a1:88:c5:a1:d3:17:ac:b1:00:41:a9:39:08: ff:5e:42:c9:8b:0d:51:c8:e8:4c:7c:91:91:80:18: 6b:cf:d7:46:30:85:db:42:e0:62:23:74:72:5f:9a: 8f:ba:cc:da:3d:fb:8a:0d:42:7c:b5:d0:ae:8b:e7: 94:2f:4d:96:6a:08:61:d6:56:de:41:4f:45:d1:84: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:58:10:67:56:4A:B2:01:44:5B:EB:F6:A4:5F:5A:D4:C6:84:EF:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/28c297e9-6701-3a4f-bea0-343929f7fbc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:cd:36:7e:9a:1f:7a:2f:7d:e6:36:4a:b0:c0:6d:93:24:6e: fb:e2:a1:c1:b3:59:65:60:10:82:90:06:06:22:d1:fe:7c:f1: a5:e0:6d:4c:7c:56:15:3c:f4:27:f5:eb:63:b0:f6:ae:cd:f3: c0:de:df:b7:c1:b1:f8:c9:24:c2:b1:00:43:aa:e2:6f:c0:94: 17:7f:f7:50:9c:c1:4a:06:53:33:9e:37:c9:8c:c5:eb:fb:6b: 5c:89:fb:8d:f5:8a:60:d0:2e:16:2f:2b:7f:dc:83:8a:8f:c0: 7e:37:04:92:7d:a0:a8:d7:35:10:25:b0:eb:5d:03:7f:fe:be: b3:31:eb:06:22:c0:24:90:30:1e:71:c1:91:eb:5c:11:2e:41: 9f:89:bb:37:ac:a8:da:1a:f0:94:f6:fc:da:a4:ad:54:01:a8: f6:f8:1c:1d:21:6d:8d:17:e7:b9:c2:f1:69:dc:95:82:9f:7e: 27:6c:c4:ca:6e:be:7d:dd:fa:d8:9b:1a:48:92:d0:e0:13:f2: 63:06:3e:cf:67:85:07:d1:1c:93:cf:56:42:bd:23:68:03:36: cd:1c:8d:d3:10:6f:c5:39:03:55:2e:0d:3b:22:94:bc:90:99: fb:49:a2:ce:ec:2f:a8:87:ab:7e:9e:d3:9d:22:6c:3b:c3:2c: b7:a3:23:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwpu5FNVsLR4I7S9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk OWVmNTk1ZWItNGZkZC00NWExLWJkMDItNTYyZjQwMDEwOTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJPp461SuzBKfp94guAjaSh89M+H8N5LCoMz FHz+HZCbcYr0sCHw2A3d/m/BYz6OfwBAKF1BhSZskh0l3uI7qG9zx2b3sGiKQGp4 i3StLrAZiUMupVX1m4u0ryaVyrkg/BEqmxgMVdK2wGj5aFxnbj1o2A850oSh0rUc vwjK8af1NMW6o4jD0ka0hicM4qfSunBJejNrARoAtGdCXP8rSDDBZ96BNPhmRDY0 WcWJjFDSOxcn3qGIxaHTF6yxAEGpOQj/XkLJiw1RyOhMfJGRgBhrz9dGMIXbQuBi I3RyX5qPuszaPfuKDUJ8tdCui+eUL02Waghh1lbeQU9F0YSoHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdYEGdWSrIBRFvr9qRfWtTGhO93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMjhjMjk3ZTktNjcwMS0z YTRmLWJlYTAtMzQzOTI5ZjdmYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjL5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvNNn6aH3ovfeY2SrDAbZMkbvviocGzWWVgEIKQBgYi0f588aXgbUx8 VhU89Cf162Ow9q7N88De37fBsfjJJMKxAEOq4m/AlBd/91CcwUoGUzOeN8mMxev7 a1yJ+431imDQLhYvK3/cg4qPwH43BJJ9oKjXNRAlsOtdA3/+vrMx6wYiwCSQMB5x wZHrXBEuQZ+JuzesqNoa8JT2/NqkrVQBqPb4HB0hbY0X57nC8WnclYKffidsxMpu vn3d+tibGkiS0OAT8mMGPs9nhQfRHJPPVkK9I2gDNs0cjdMQb8U5A1UuDTsilLyQ mftJos7sL6iHq36e050ibDvDLLejI7w= -----END CERTIFICATE-----Generated at Sat Dec 20 03:22:17 2025 by rpki-client