This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa File: bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa (raw, json) Hash identifier: 3i3qaM91RbvC2VEWGTaVmrSspiYRIweyvxMBf7qUc/8= Subject key identifier: F4:59:D5:8A:28:A2:CA:6C:2F:99:8A:E1:94:56:C5:2B:5A:03:81:91 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584C725176D970212F139138D600 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa Signing time: Wed 07 Jan 2026 14:00:39 +0000 ROA not before: Wed 07 Jan 2026 14:00:39 +0000 ROA not after: Tue 07 Apr 2026 13:00:39 +0000 asID: 16839 IP address blocks: 149.96.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:72:51:76:d9:70:21:2f:13:91:38:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jan 7 14:00:39 2026 GMT Not After : Apr 7 13:00:39 2026 GMT Subject: CN=77c4304e-c4c1-4a3a-8942-702b7bbafcbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:42:71:e0:11:91:c8:86:4d:84:fa:92:2f:2b: 60:c9:21:03:be:b3:dc:85:fa:b4:5f:3c:10:fa:d5: 71:34:bb:5d:10:76:d4:4e:63:f2:3e:ff:3e:76:30: ef:db:05:86:39:bb:fe:fb:4f:c1:76:40:ec:8d:1c: bb:1a:10:97:d8:4c:f0:e7:a3:0f:b8:26:9f:8e:91: 81:49:b0:87:a4:3b:3c:d0:b6:91:9f:3b:73:78:75: d2:a4:5d:6d:35:e6:86:5a:26:86:f4:df:26:10:eb: 6f:d3:20:e9:09:0f:51:ba:00:ef:2a:0a:66:7d:9c: 5a:2f:09:c8:f4:58:33:82:e2:1d:d8:bd:35:b5:9a: c0:7d:a1:a9:e4:d1:17:f8:22:66:71:4f:bb:23:6d: b4:e1:3e:70:5f:2a:43:69:e1:4a:06:be:00:a2:9f: ab:23:fb:ed:a3:f2:5b:21:b8:12:77:ca:73:c1:41: f5:af:e9:20:73:95:9c:52:fe:70:90:df:90:b3:cf: 53:4b:3f:bf:ed:7e:fc:d6:9a:ca:80:cb:fd:f0:f1: 2e:b0:c7:20:3b:65:e9:03:76:bd:85:15:84:d6:c6: 8c:c7:23:7e:fd:7b:01:05:7e:1a:bc:f4:f3:a5:b2: 40:a3:12:41:dc:20:9b:a1:19:5d:db:b9:a6:3d:2f: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:59:D5:8A:28:A2:CA:6C:2F:99:8A:E1:94:56:C5:2B:5A:03:81:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/bc0a4c03-ba12-3646-a075-a9a9630afe2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 149.96.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:96:7f:93:50:2f:4a:01:e5:5c:b7:d7:77:ec:e1:4f:b1:1e: 24:4f:d2:7e:6f:f2:68:cc:7e:c8:d3:7c:75:2f:95:a1:af:59: 76:fe:2a:5f:13:ab:ed:fe:0c:0f:44:f0:fe:76:ca:12:39:9b: 60:d4:80:93:97:e0:5c:59:14:ef:3e:a5:a0:05:ef:a4:6b:68: c6:ef:9f:04:42:cf:5f:04:11:b7:ac:31:23:28:37:87:60:87: 33:9d:8b:11:2c:01:07:91:ad:c4:48:3f:56:c9:b6:3c:2e:53: dd:e6:5a:ee:85:58:06:7d:28:71:c6:3d:a1:17:89:32:c4:c6: b1:7c:e3:45:84:80:05:22:f1:48:da:ad:c9:a3:5f:92:2e:16: f0:db:21:fe:71:df:63:b3:d1:cd:27:4e:c6:ab:63:b7:c4:b4: 6e:1e:2b:b4:be:f2:30:39:1c:c2:5e:cd:e5:f6:72:15:3b:c9: 70:a5:06:8c:05:80:6c:e3:b0:4c:fd:8a:31:49:64:e0:26:bc: c1:b8:46:2d:e7:c3:f7:be:34:d0:a2:75:f2:42:77:d9:c0:1d: 76:67:c4:56:b2:35:af:35:d8:91:fa:81:c4:97:c8:aa:50:7d: 4b:16:77:de:fa:66:da:58:88:c6:8e:b7:a1:a4:68:61:08:25: 01:f5:60:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExyUXbZcCEvE5E41gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDEwNzE0MDAzOVoXDTI2MDQwNzEzMDAzOVowLzEtMCsGA1UEAxMk NzdjNDMwNGUtYzRjMS00YTNhLTg5NDItNzAyYjdiYmFmY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0Jx4BGRyIZNhPqSLytgySEDvrPchfq0XzwQ +tVxNLtdEHbUTmPyPv8+djDv2wWGObv++0/BdkDsjRy7GhCX2Ezw56MPuCafjpGB SbCHpDs80LaRnztzeHXSpF1tNeaGWiaG9N8mEOtv0yDpCQ9RugDvKgpmfZxaLwnI 9FgzguId2L01tZrAfaGp5NEX+CJmcU+7I2204T5wXypDaeFKBr4Aop+rI/vto/Jb IbgSd8pzwUH1r+kgc5WcUv5wkN+Qs89TSz+/7X781prKgMv98PEusMcgO2XpA3a9 hRWE1saMxyN+/XsBBX4avPTzpbJAoxJB3CCboRld27mmPS/8TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRZ1YooospsL5mK4ZRWxStaA4GRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvYmMwYTRjMDMtYmExMi0z NjQ2LWEwNzUtYTlhOTYzMGFmZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElWAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuWf5NQL0oB5Vy313fs4U+xHiRP0n5v8mjMfsjTfHUvlaGvWXb+Kl8T q+3+DA9E8P52yhI5m2DUgJOX4FxZFO8+paAF76RraMbvnwRCz18EEbesMSMoN4dg hzOdixEsAQeRrcRIP1bJtjwuU93mWu6FWAZ9KHHGPaEXiTLExrF840WEgAUi8Uja rcmjX5IuFvDbIf5x32Oz0c0nTsarY7fEtG4eK7S+8jA5HMJezeX2chU7yXClBowF gGzjsEz9ijFJZOAmvMG4Ri3nw/e+NNCidfJCd9nAHXZnxFayNa812JH6gcSXyKpQ fUsWd976ZtpYiMaOt6GkaGEIJQH1YEM= -----END CERTIFICATE-----Generated at Mon Jan 26 01:06:10 2026 by rpki-client