This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa File: 38c17b7a-0754-332b-ad37-ba79d152d002.roa (raw, json) Hash identifier: hI+HZEWCmEGeP3FsfxsOeT7g7/3sqNxuijKyzaJsGg8= Subject key identifier: 83:77:81:06:70:E4:B7:94:75:DB:5E:5C:A9:BE:0C:99:AE:6E:48:FC Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F4328584C602BD86F80E0586A6CB9D880 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa Signing time: Thu 01 Jan 2026 02:00:31 +0000 ROA not before: Thu 01 Jan 2026 02:00:31 +0000 ROA not after: Wed 01 Apr 2026 01:00:31 +0000 asID: 399726 IP address blocks: 204.144.180.0/24 maxlen: 24 204.144.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:60:2b:d8:6f:80:e0:58:6a:6c:b9:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Jan 1 02:00:31 2026 GMT Not After : Apr 1 01:00:31 2026 GMT Subject: CN=3868d40c-08c9-445e-9ecf-251d0d1cc1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:55:b2:8f:ab:d4:0c:e0:26:7a:2d:04:21: 32:a9:17:41:9c:0e:ea:57:ef:5b:a2:80:53:e1:12: 60:6e:51:fd:91:7e:1f:d1:84:21:01:d3:96:94:8d: 33:51:6c:78:bd:49:7a:4c:4d:65:7a:5e:d9:8b:3c: 63:ec:a6:46:85:32:24:47:5a:04:c5:69:83:b7:5a: 1b:92:ca:6b:59:c3:05:cc:c4:6b:32:c5:cd:ea:af: 81:33:c3:a8:a4:9b:75:f2:71:ea:0e:13:21:fc:75: a7:89:6b:ca:63:0d:4a:93:ea:83:f4:f9:9a:cc:77: df:bf:64:52:7f:ea:ee:44:36:a6:a3:8a:4a:84:f3: 43:2e:fc:99:c3:61:31:a4:f4:f6:77:c9:94:02:3c: af:4b:40:dd:6a:09:76:67:24:a2:13:c7:fd:59:fb: 03:fb:63:cf:55:fe:15:02:6c:9c:62:8d:eb:1c:f8: 1c:8e:67:d0:d1:99:88:6c:0b:86:b2:03:09:f9:70: 6f:44:54:d8:55:cd:ea:f0:8f:5c:de:6c:29:be:40: f0:4d:f9:de:9f:dc:70:79:e7:a9:b8:da:46:f2:c1: 1a:f3:93:b5:02:44:42:23:bf:c3:d6:88:5d:1e:2f: 8e:6e:d8:bb:5d:57:04:ee:51:a3:00:86:62:71:4d: 1a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:77:81:06:70:E4:B7:94:75:DB:5E:5C:A9:BE:0C:99:AE:6E:48:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/38c17b7a-0754-332b-ad37-ba79d152d002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 204.144.180.0/24 204.144.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:64:e5:52:9a:67:aa:21:c7:f4:1e:e8:2a:70:cd:2d:12:a0: 5b:d6:ed:0a:c2:8f:42:58:ff:76:e8:c7:00:96:83:d9:c6:86: 89:f5:a4:c7:48:9d:ac:f9:f0:4b:53:99:67:2c:4b:b3:1d:18: 15:66:31:00:67:cc:bc:c7:b8:77:c4:44:32:03:1e:b7:e7:7c: 78:9f:bb:e2:76:05:78:0b:c8:91:8a:ce:2e:3c:1a:9f:0e:f0: 6a:3b:20:e3:72:eb:14:ca:91:09:5e:bd:3b:c0:21:48:24:14: 18:b8:6e:b1:e9:ea:17:51:f7:1d:6f:6d:15:a3:0e:a4:5e:2d: db:62:40:0c:7c:6c:48:14:12:a6:c9:9f:50:03:99:2b:ef:06: 62:b2:27:c0:b7:df:9f:63:28:b9:40:85:fc:86:b7:8e:65:cf: 7d:b8:b0:97:70:57:b7:3f:be:7a:34:a3:33:1d:eb:b1:1b:10: da:7a:e9:a9:ea:96:eb:ce:de:42:c3:57:65:c0:bb:a7:16:77: b3:9e:29:18:cc:b1:ad:22:8b:7a:3f:d9:62:23:ce:ca:64:ab: 43:82:35:ca:e0:be:11:01:78:99:f2:1d:73:4a:8c:3b:c7:c5: 6a:0c:4c:2c:da:37:52:eb:ed:97:99:bb:ee:d5:c1:9b:cc:0e: ef:1f:4f:0f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWExgK9hvgOBYamy52IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI2MDEwMTAyMDAzMVoXDTI2MDQwMTAxMDAzMVowLzEtMCsGA1UEAxMk Mzg2OGQ0MGMtMDhjOS00NDVlLTllY2YtMjUxZDBkMWNjMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd5Vso+r1AzgJnotBCEyqRdBnA7qV+9booBT 4RJgblH9kX4f0YQhAdOWlI0zUWx4vUl6TE1lel7Zizxj7KZGhTIkR1oExWmDt1ob ksprWcMFzMRrMsXN6q+BM8OopJt18nHqDhMh/HWniWvKYw1Kk+qD9PmazHffv2RS f+ruRDamo4pKhPNDLvyZw2ExpPT2d8mUAjyvS0Ddagl2ZySiE8f9WfsD+2PPVf4V AmycYo3rHPgcjmfQ0ZmIbAuGsgMJ+XBvRFTYVc3q8I9c3mwpvkDwTfnen9xweeep uNpG8sEa85O1AkRCI7/D1ohdHi+Obti7XVcE7lGjAIZicU0axQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIN3gQZw5LeUddteXKm+DJmubkj8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvMzhjMTdiN2EtMDc1NC0z MzJiLWFkMzctYmE3OWQxNTJkMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzJC0AwQB zJC2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHFk5VKaZ6ohx/Qe6CpwzS0SoFvW7QrCj0JY/3boxwCWg9nG hon1pMdInaz58EtTmWcsS7MdGBVmMQBnzLzHuHfERDIDHrfnfHifu+J2BXgLyJGK zi48Gp8O8Go7IONy6xTKkQlevTvAIUgkFBi4brHp6hdR9x1vbRWjDqReLdtiQAx8 bEgUEqbJn1ADmSvvBmKyJ8C3359jKLlAhfyGt45lz324sJdwV7c/vno0ozMd67Eb ENp66anqluvO3kLDV2XAu6cWd7OeKRjMsa0ii3o/2WIjzspkq0OCNcrgvhEBeJny HXNKjDvHxWoMTCzaN1Lr7ZeZu+7VwZvMDu8fTw8= -----END CERTIFICATE-----Generated at Sun Jan 25 14:28:49 2026 by rpki-client