This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/8db1943e-17fa-375d-aa4b-b018e52e3c40.roa File: 8db1943e-17fa-375d-aa4b-b018e52e3c40.roa (raw, json) Hash identifier: e8s0ftdmqNUdEKo6mlYV5hvXtOJpqtvh2aFzVv3m1fU= Subject key identifier: 1D:69:AF:58:75:F6:0D:9F:62:30:C5:41:2E:11:9C:E8:D4:6A:AB:91 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F4328584C0B061679C30A667CD0119300 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/8db1943e-17fa-375d-aa4b-b018e52e3c40.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 21777 IP address blocks: 199.45.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:16:79:c3:0a:66:7c:d0:11:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=092b15e1-5d4b-440a-b257-3605545a934e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:34:9f:b8:c7:0c:c7:57:8a:e7:cb:98:4a:bd: 15:f8:11:54:dc:ea:c8:98:c4:b4:b1:ef:a4:61:a0: c0:aa:10:d3:be:72:34:41:63:3b:e0:4c:00:c9:ea: 5a:2a:19:f2:8a:26:e0:76:94:b0:f7:7d:f8:d1:27: 61:5b:95:25:db:fa:ac:87:d8:98:96:30:7d:c1:8e: cd:11:54:3b:af:dd:b5:e4:38:9a:81:8d:a6:61:4b: 4b:f8:ac:ae:10:1a:35:d6:19:11:11:b6:1d:31:1d: da:68:9c:81:7a:b5:08:cd:21:d5:9b:99:72:fe:cc: b2:ba:b3:0b:be:16:db:53:1c:45:54:1c:8d:07:f9: d8:43:95:50:57:c8:54:4e:c0:98:f1:84:b1:c3:85: 86:f6:61:67:20:ca:33:ef:ae:47:a9:37:60:f4:bb: 04:b0:74:21:ca:0b:b1:c5:1f:ac:72:41:7b:80:83: 91:a0:77:af:4e:fe:79:1e:3a:1e:54:86:f7:1d:af: cb:c8:e2:c9:f2:5f:01:07:dc:f3:76:c5:2e:50:5e: af:d0:54:ff:2a:8b:38:98:d4:8e:03:f3:fd:37:bf: 6c:88:44:3e:b1:9e:7f:ab:a3:ea:f1:69:77:a8:ac: 2b:34:ea:23:19:28:ed:dc:9f:8d:dd:55:34:c3:82: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:69:AF:58:75:F6:0D:9F:62:30:C5:41:2E:11:9C:E8:D4:6A:AB:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/8db1943e-17fa-375d-aa4b-b018e52e3c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 199.45.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:dd:b5:50:49:b4:b0:82:41:69:1b:07:34:4d:a5:48:fe:3b: 6a:5a:e7:fa:9e:c5:c6:3a:53:e7:e2:f0:0f:94:0a:fa:0a:11: 23:d0:2c:97:19:8b:c0:0a:bc:5d:e9:35:cd:62:67:c1:4a:ff: d8:0b:6c:3c:b2:9b:1f:98:23:43:ae:38:09:f4:0b:4c:3d:d7: e7:98:9b:c8:46:fa:5a:37:92:a9:40:0d:a3:4d:f7:dd:4c:3d: 00:e3:4d:34:68:bf:80:20:2f:b9:d1:0a:7c:5d:a3:d3:91:a0: aa:1c:b7:72:5b:75:2d:58:00:b3:49:79:d3:74:b4:9c:ea:da: 87:04:cb:46:7c:ba:6b:f6:1a:82:bd:c2:03:e1:90:cc:0b:a5: c9:15:a1:42:f5:34:62:69:85:a0:4e:5d:70:3c:a3:b9:39:6c: 71:d5:79:41:2c:ca:f3:51:06:09:12:58:74:a9:28:e6:9b:dd: 11:92:0a:2a:6b:09:bb:50:1e:d1:ac:29:1a:87:d2:48:27:af: 7b:25:5a:ff:2b:5f:cd:73:83:7c:f9:e0:65:4b:4f:c9:61:82: 22:46:22:43:84:96:09:b8:7b:7e:ea:33:14:af:a6:43:af:e0: c3:3d:ce:f0:98:63:80:2f:bc:18:e7:e8:ca:5d:06:57:f6:37: 35:5f:86:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBhZ5wwpmfNARkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk MDkyYjE1ZTEtNWQ0Yi00NDBhLWIyNTctMzYwNTU0NWE5MzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjSfuMcMx1eK58uYSr0V+BFU3OrImMS0se+k YaDAqhDTvnI0QWM74EwAyepaKhnyiibgdpSw93340SdhW5Ul2/qsh9iYljB9wY7N EVQ7r9215DiagY2mYUtL+KyuEBo11hkREbYdMR3aaJyBerUIzSHVm5ly/syyurML vhbbUxxFVByNB/nYQ5VQV8hUTsCY8YSxw4WG9mFnIMoz765HqTdg9LsEsHQhygux xR+sckF7gIORoHevTv55HjoeVIb3Ha/LyOLJ8l8BB9zzdsUuUF6v0FT/Kos4mNSO A/P9N79siEQ+sZ5/q6Pq8Wl3qKwrNOojGSjt3J+N3VU0w4Ka8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1pr1h19g2fYjDFQS4RnOjUaquRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvOGRiMTk0M2UtMTdmYS0z NzVkLWFhNGItYjAxOGU1MmUzYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPdtVBJtLCCQWkbBzRNpUj+O2pa5/qexcY6U+fi8A+UCvoKESPQLJcZ i8AKvF3pNc1iZ8FK/9gLbDyymx+YI0OuOAn0C0w91+eYm8hG+lo3kqlADaNN991M PQDjTTRov4AgL7nRCnxdo9ORoKoct3JbdS1YALNJedN0tJzq2ocEy0Z8umv2GoK9 wgPhkMwLpckVoUL1NGJphaBOXXA8o7k5bHHVeUEsyvNRBgkSWHSpKOab3RGSCipr CbtQHtGsKRqH0kgnr3slWv8rX81zg3z54GVLT8lhgiJGIkOElgm4e37qMxSvpkOv 4MM9zvCYY4AvvBjn6MpdBlf2NzVfhl8= -----END CERTIFICATE-----Generated at Thu Dec 25 05:34:23 2025 by rpki-client