This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa File: efb511d0-3c37-335c-ba0b-442e98173e1e.roa (raw, json) Hash identifier: c6RRao/qXi94y2F5NmTPokekRouqpxpJSIkWxwiz+Ew= Subject key identifier: A2:D0:F6:89:F0:04:54:06:33:F5:69:1E:5F:CA:63:34:61:53:C8:56 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584C7D7C6046B704B8656A8F3200 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 53508 IP address blocks: 206.255.152.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:60:46:b7:04:b8:65:6a:8f:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=8c2df451-7011-4ef9-8541-ef227b048f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:1d:e5:36:55:ea:14:61:6c:87:9b:59:7c: 07:ea:f8:47:e8:c8:2e:8c:07:ed:48:b5:ca:4e:25: 90:5a:3c:39:97:db:52:73:9f:82:3f:64:4f:8c:26: e8:83:5a:52:f8:ae:32:6a:cb:6e:c9:6b:44:31:04: d4:e3:a1:d9:8b:b6:55:2a:f7:c2:a5:80:24:9c:b1: 79:c0:1f:43:ca:77:05:91:2e:58:fd:55:3c:21:09: bc:1e:2c:1b:98:63:37:8d:d5:6d:22:f5:dc:36:39: 96:4d:4d:e9:00:09:2a:99:c2:ed:d4:49:b3:6d:87: 79:bc:fd:0b:e2:26:51:6d:82:7f:e4:92:d7:78:ec: ff:52:cf:ff:ae:66:4e:58:3b:4c:bb:72:7e:b5:fb: 82:b5:97:4d:25:a1:47:99:2f:6c:d5:89:87:f4:58: f7:e6:48:fa:ab:6e:06:b3:0c:88:c1:33:b8:b1:c1: 99:42:98:8b:ca:b4:84:69:5a:58:db:d3:f4:e5:c8: dd:55:f5:0a:60:16:96:98:be:40:13:52:5c:5c:20: e7:c0:72:da:28:a6:64:ef:01:dd:76:4c:ac:29:0d: a0:7c:a7:3b:d2:9e:20:4f:52:91:fc:7d:4b:8a:6a: 35:cb:47:4b:4d:70:a6:9b:bf:ed:88:72:f0:6e:d6: 7a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D0:F6:89:F0:04:54:06:33:F5:69:1E:5F:CA:63:34:61:53:C8:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/efb511d0-3c37-335c-ba0b-442e98173e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:3e:59:da:2f:f3:13:c3:e1:95:02:21:4c:6e:e0:7b:50:e4: e9:4a:8b:5e:16:e1:5c:bf:94:ac:07:30:f0:21:a0:dd:0a:ab: 4e:98:f6:b7:75:89:4d:05:72:ac:0c:66:41:05:ee:bc:99:c7: 55:38:a2:74:f9:dd:26:ff:68:48:e1:99:29:9d:20:1d:aa:f9: 17:a2:27:b0:b3:fd:c5:6a:42:2d:5c:01:7b:76:76:b8:4b:1a: fc:88:83:a1:99:ac:05:81:2f:68:4d:44:b1:1e:52:91:99:28: a7:bf:ac:3f:06:b1:e0:50:6d:19:26:2f:31:09:35:35:f0:c4: 9a:5e:70:c1:58:74:ab:74:d8:00:82:4a:8c:55:47:0b:8e:cf: 64:5c:00:19:74:4d:ee:3e:a2:1a:65:6c:d2:33:34:f6:5e:49: 26:2b:93:13:d9:e9:51:65:95:a6:37:19:18:4a:dd:0f:e1:ae: bc:cb:c4:6c:30:d5:dd:84:05:11:9f:01:98:74:8f:d1:f6:95: 1d:05:b3:d5:fd:4d:2e:e1:86:b8:11:71:6a:6a:7a:10:31:da: d0:f9:43:f8:1b:d1:ac:b7:fc:8c:d7:6e:d4:ed:eb:95:7d:d4: 3d:10:b4:3e:30:d2:eb:76:0f:40:50:ab:6b:49:2a:00:6b:9d: 2e:4e:86:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fGBGtwS4ZWqPMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk OGMyZGY0NTEtNzAxMS00ZWY5LTg1NDEtZWYyMjdiMDQ4ZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszcd5TZV6hRhbIebWXwH6vhH6MgujAftSLXK TiWQWjw5l9tSc5+CP2RPjCbog1pS+K4yastuyWtEMQTU46HZi7ZVKvfCpYAknLF5 wB9DyncFkS5Y/VU8IQm8HiwbmGM3jdVtIvXcNjmWTU3pAAkqmcLt1EmzbYd5vP0L 4iZRbYJ/5JLXeOz/Us//rmZOWDtMu3J+tfuCtZdNJaFHmS9s1YmH9Fj35kj6q24G swyIwTO4scGZQpiLyrSEaVpY29P05cjdVfUKYBaWmL5AE1JcXCDnwHLaKKZk7wHd dkysKQ2gfKc70p4gT1KR/H1Limo1y0dLTXCmm7/tiHLwbtZ69wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLQ9onwBFQGM/VpHl/KYzRhU8hWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvZWZiNTExZDAtM2MzNy0z MzVjLWJhMGItNDQyZTk4MTczZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE+Wdov8xPD4ZUCIUxu4HtQ5OlKi14W4Vy/lKwHMPAhoN0Kq06Y9rd1 iU0FcqwMZkEF7ryZx1U4onT53Sb/aEjhmSmdIB2q+ReiJ7Cz/cVqQi1cAXt2drhL GvyIg6GZrAWBL2hNRLEeUpGZKKe/rD8GseBQbRkmLzEJNTXwxJpecMFYdKt02ACC SoxVRwuOz2RcABl0Te4+ohplbNIzNPZeSSYrkxPZ6VFllaY3GRhK3Q/hrrzLxGww 1d2EBRGfAZh0j9H2lR0Fs9X9TS7hhrgRcWpqehAx2tD5Q/gb0ay3/IzXbtTt65V9 1D0QtD4w0ut2D0BQq2tJKgBrnS5Ohtw= -----END CERTIFICATE-----Generated at Sun Jan 25 12:35:32 2026 by rpki-client