This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a897618a-4040-3184-a2f7-6b8bbb840675.roa File: a897618a-4040-3184-a2f7-6b8bbb840675.roa (raw, json) Hash identifier: 2tWSS3xl2FVbB7bAq7vupT5BnGL7YYf6KDQ7dnjQ6ag= Subject key identifier: 16:0D:CB:D3:A0:0D:83:EA:67:57:C7:64:F9:67:4E:5D:42:E4:AB:5B Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584C29BB98AD82E8A0C714411E00 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a897618a-4040-3184-a2f7-6b8bbb840675.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 14340 IP address blocks: 140.190.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:98:ad:82:e8:a0:c7:14:41:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=0ceeec01-5535-4bfe-ac1a-e1fde5cb1b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bc:10:04:49:13:6e:19:c0:16:c9:26:b8:7c: 73:98:6e:eb:8c:56:95:4a:13:c9:33:dc:a2:13:ba: c3:a3:58:45:e9:a4:62:b4:9f:fc:e7:b6:43:04:28: 9e:54:97:b9:36:aa:49:3e:6b:0c:60:d1:ef:7c:bd: 0a:d7:d5:92:65:63:81:d9:6d:cb:bd:f5:0f:fa:9f: d2:7d:33:1a:53:10:c3:e5:7c:e4:4b:a9:52:e3:f1: c5:1d:c6:b4:e5:ab:c8:54:8a:c8:31:b3:77:f0:e4: c3:4a:43:35:38:32:bb:80:3e:82:24:78:e2:6d:d5: bc:c9:5a:24:92:53:44:48:fa:a2:9b:fa:13:cb:c6: 4d:01:af:47:a5:3e:01:38:ae:2c:3f:4c:c3:83:e6: e0:8d:9f:b8:2e:1e:9b:e6:47:49:48:60:cf:96:bc: d2:33:15:42:6c:35:5d:6b:9e:47:a3:76:26:94:3f: 3f:5e:e7:1e:c5:5a:de:62:df:05:dc:d4:e8:fd:30: c8:ad:b9:2d:7b:30:4d:56:0a:6a:47:e5:3d:3b:97: 5f:2e:ac:dd:47:79:4d:e0:32:05:65:a7:a2:81:ad: 4f:62:d4:f6:54:44:db:c9:2d:0c:5f:ae:62:fa:65: 00:52:69:c0:10:c5:bc:7f:ba:8c:fc:84:e7:73:c9: f3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0D:CB:D3:A0:0D:83:EA:67:57:C7:64:F9:67:4E:5D:42:E4:AB:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a897618a-4040-3184-a2f7-6b8bbb840675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0e:67:d7:b3:65:80:9b:80:74:c0:ee:75:3f:13:f3:ba:b1: 0f:76:4d:e8:e0:e1:34:6e:84:65:d8:1f:2f:8a:11:ce:ee:b2: 3b:7c:a1:ba:b1:8e:6b:3e:69:24:51:c2:59:19:db:cb:02:9f: 07:ba:5b:7d:bd:64:8f:04:d1:85:08:19:4c:7b:95:18:d5:50: 16:ad:14:a7:f1:6e:e7:78:74:ba:ee:92:a2:59:bb:e0:b3:cf: cb:d8:42:6a:4e:b8:db:c0:d6:93:2a:b2:3d:ab:a0:e1:63:fb: 75:b2:e4:79:06:da:38:2b:94:64:eb:b4:c6:f3:fa:8d:b0:41: 94:0f:45:2a:f7:a8:48:fe:97:d6:b3:c5:5e:c8:58:70:c9:46: 29:c8:62:97:ee:62:99:ff:ab:d7:d2:1d:03:14:87:8f:df:17: 18:df:a5:e2:69:9f:50:01:eb:0d:ca:0a:2f:0e:73:42:50:0b: b6:71:50:c2:ef:a7:54:e7:3d:e0:30:2e:d3:52:0f:b4:a8:88: ac:13:7e:14:0a:bc:43:24:bf:d9:a2:e8:d1:5f:81:81:9a:df: 04:83:f9:11:7a:37:4d:a5:03:57:c7:78:96:98:ab:23:e5:a7: 6f:85:1f:4e:aa:fb:e8:be:e7:45:09:2d:24:ab:1e:85:53:76: 36:16:46:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwpu5itguigxxRBHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk MGNlZWVjMDEtNTUzNS00YmZlLWFjMWEtZTFmZGU1Y2IxYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rwQBEkTbhnAFskmuHxzmG7rjFaVShPJM9yi E7rDo1hF6aRitJ/857ZDBCieVJe5NqpJPmsMYNHvfL0K19WSZWOB2W3LvfUP+p/S fTMaUxDD5XzkS6lS4/HFHca05avIVIrIMbN38OTDSkM1ODK7gD6CJHjibdW8yVok klNESPqim/oTy8ZNAa9HpT4BOK4sP0zDg+bgjZ+4Lh6b5kdJSGDPlrzSMxVCbDVd a55Ho3YmlD8/XucexVreYt8F3NTo/TDIrbktezBNVgpqR+U9O5dfLqzdR3lN4DIF Zaeiga1PYtT2VETbyS0MX65i+mUAUmnAEMW8f7qM/ITnc8nzaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYNy9OgDYPqZ1fHZPlnTl1C5KtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvYTg5NzYxOGEtNDA0MC0z MTg0LWEyZjctNmI4YmJiODQwNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjL7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwOZ9ezZYCbgHTA7nU/E/O6sQ92Tejg4TRuhGXYHy+KEc7usjt8obqx jms+aSRRwlkZ28sCnwe6W329ZI8E0YUIGUx7lRjVUBatFKfxbud4dLrukqJZu+Cz z8vYQmpOuNvA1pMqsj2roOFj+3Wy5HkG2jgrlGTrtMbz+o2wQZQPRSr3qEj+l9az xV7IWHDJRinIYpfuYpn/q9fSHQMUh4/fFxjfpeJpn1AB6w3KCi8Oc0JQC7ZxUMLv p1TnPeAwLtNSD7SoiKwTfhQKvEMkv9mi6NFfgYGa3wSD+RF6N02lA1fHeJaYqyPl p2+FH06q++i+50UJLSSrHoVTdjYWRrY= -----END CERTIFICATE-----Generated at Sat Dec 20 04:57:53 2025 by rpki-client