This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa File: bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa (raw, json) Hash identifier: sKjM07XNT29GalHpRFEKsuXblYoR2v1Vj6hFbF0MigE= Subject key identifier: C8:FC:7C:C9:65:F8:C5:46:7B:B3:4E:41:A3:24:89:E5:D5:ED:F9:F8 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584C59315307DA6160E3CE72DE0C Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 23467 IP address blocks: 152.38.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:53:07:da:61:60:e3:ce:72:de:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=8f5526cc-0ad1-480b-9762-c7c2dec84fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:fa:0a:c7:14:87:1a:85:e1:82:b0:91:5e: c1:af:59:23:d7:02:d9:86:1b:ce:b1:11:f9:d6:a0: 36:88:d3:95:5e:32:cc:9a:4b:86:17:64:25:a0:27: 2f:4d:b6:15:87:88:b7:d6:c9:71:9a:97:d0:4d:c8: 90:b6:c5:66:5b:8e:c6:76:16:4d:86:53:40:37:60: 9b:3c:9b:ad:55:d9:a3:0d:f2:88:09:c3:6f:6f:09: c9:d2:62:45:04:c9:1f:9f:c6:a2:52:ce:eb:6b:90: 7e:a1:7f:7b:7a:ad:58:3f:4b:42:d3:0c:bf:d6:db: 52:88:05:ba:14:21:9b:a6:5f:4d:18:2b:2c:fc:a3: 59:6b:e6:82:aa:ed:4c:7e:f7:0d:1b:cc:2b:70:77: 2c:ed:5b:a7:c1:a6:4d:de:63:46:c5:b0:59:a1:ca: 79:ab:e2:e6:3f:a5:1d:e1:3c:3c:87:9a:6c:a2:59: 93:94:0d:92:d2:47:47:5b:05:87:00:64:35:09:e1: 1d:3a:62:f6:f3:5a:57:ce:6d:94:9d:af:5e:75:4e: bb:93:62:f7:28:c8:42:ba:bc:4b:3f:75:98:e6:48: 03:1e:f6:b7:f3:7d:9c:5f:8e:3a:66:37:a9:cc:ed: 62:a5:4e:9f:23:8e:07:08:e6:25:21:cf:9c:9d:44: 46:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FC:7C:C9:65:F8:C5:46:7B:B3:4E:41:A3:24:89:E5:D5:ED:F9:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:1e:08:81:66:4a:23:ba:de:4b:24:2d:7c:ce:3d:6b:cf:da: 90:07:dd:3e:02:bb:99:fd:85:a8:49:bc:cf:99:a9:82:8e:05: 86:40:75:3e:f1:00:50:f4:be:09:95:05:5d:32:2f:49:be:5a: 8f:41:ff:98:60:31:83:2c:f8:55:d4:29:17:32:e5:a0:58:cd: ff:0d:10:e6:b3:c0:f2:65:57:f1:90:c9:26:6a:9d:06:31:9d: ff:61:b6:1b:df:6a:91:47:bf:41:03:18:05:aa:c6:08:8b:f5: ed:96:19:85:49:7e:e1:02:5e:6a:1e:7a:45:cd:01:b5:54:6b: 5c:2f:f6:da:9b:9e:9e:f4:53:f3:ee:d1:df:d9:ec:2a:8d:1b: c1:c7:ab:77:56:ab:be:22:b5:4b:a6:82:d1:30:c7:a1:45:89: 04:ea:61:49:3b:81:a7:b2:2c:89:27:41:8d:e7:a7:bb:a8:02: d4:55:09:3b:63:6d:49:62:ec:89:53:99:40:fd:77:b4:66:1c: 69:25:5e:43:39:e9:d7:54:8e:1d:66:70:f1:07:b4:0c:a8:39: 44:40:8d:ff:32:db:6d:48:93:1d:1d:f9:00:92:5a:99:45:72: 39:d3:98:04:25:c6:1a:1c:7b:66:f5:cd:e2:9d:c7:8d:d6:59: fb:64:34:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMVMH2mFg485y3gwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk OGY1NTI2Y2MtMGFkMS00ODBiLTk3NjItYzdjMmRlYzg0ZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmn6CscUhxqF4YKwkV7Br1kj1wLZhhvOsRH5 1qA2iNOVXjLMmkuGF2QloCcvTbYVh4i31slxmpfQTciQtsVmW47GdhZNhlNAN2Cb PJutVdmjDfKICcNvbwnJ0mJFBMkfn8aiUs7ra5B+oX97eq1YP0tC0wy/1ttSiAW6 FCGbpl9NGCss/KNZa+aCqu1MfvcNG8wrcHcs7VunwaZN3mNGxbBZocp5q+LmP6Ud 4Tw8h5psolmTlA2S0kdHWwWHAGQ1CeEdOmL281pXzm2Una9edU67k2L3KMhCurxL P3WY5kgDHva3832cX446ZjepzO1ipU6fI44HCOYlIc+cnURG5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj8fMll+MVGe7NOQaMkieXV7fn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvYmQ5Y2RiNWYtZGVhNy0z ODJkLTkxY2UtMTQyMmU4ZmQzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAseCIFmSiO63kskLXzOPWvP2pAH3T4Cu5n9hahJvM+ZqYKOBYZAdT7x AFD0vgmVBV0yL0m+Wo9B/5hgMYMs+FXUKRcy5aBYzf8NEOazwPJlV/GQySZqnQYx nf9hthvfapFHv0EDGAWqxgiL9e2WGYVJfuECXmoeekXNAbVUa1wv9tqbnp70U/Pu 0d/Z7CqNG8HHq3dWq74itUumgtEwx6FFiQTqYUk7gaeyLIknQY3np7uoAtRVCTtj bUli7IlTmUD9d7RmHGklXkM56ddUjh1mcPEHtAyoOURAjf8y221Ikx0d+QCSWplF cjnTmAQlxhoce2b1zeKdx43WWftkNM0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:30:45 2026 by rpki-client