This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/ba9ab405-d555-3a62-98d7-994c77b7f1e7.roa File: ba9ab405-d555-3a62-98d7-994c77b7f1e7.roa (raw, json) Hash identifier: qfBcUh13J/UQ82rTHY7d49dgLA4E3G0TFlN3L+t5VZM= Subject key identifier: FC:10:FD:2D:C8:16:B9:C4:FA:97:AD:A5:18:FB:14:02:EA:AA:BD:99 Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Certificate serial: 010D0C9F4328584C3A868D5B80997446E883FF40 Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/ba9ab405-d555-3a62-98d7-994c77b7f1e7.roa Signing time: Thu 18 Dec 2025 14:22:38 +0000 ROA not before: Thu 18 Dec 2025 14:22:38 +0000 ROA not after: Wed 18 Mar 2026 13:22:38 +0000 asID: 20326 IP address blocks: 216.170.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3a:86:8d:5b:80:99:74:46:e8:83:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Validity Not Before: Dec 18 14:22:38 2025 GMT Not After : Mar 18 13:22:38 2026 GMT Subject: CN=98793dec-e1df-4ef0-903a-fbcbd2a51bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:86:1c:cc:b5:20:57:ac:61:4b:90:94:9f:a4: ff:b0:53:33:56:d3:0e:d4:e9:d4:1d:58:cb:29:4f: 1e:9d:6e:57:ee:2f:37:29:9a:79:ec:26:c0:b1:ed: 96:3f:8b:20:d2:cf:04:d3:f7:6a:dc:b0:0c:50:fa: 9d:93:38:d2:ba:05:61:74:86:f8:b0:df:43:a9:73: 3f:3b:7f:f3:58:1f:e4:28:89:ca:af:9f:26:e5:75: 57:a1:a5:0c:de:81:3a:a4:d0:da:a2:98:f6:fc:c0: ca:6c:bf:a5:02:b5:c2:8b:98:db:d8:f7:18:24:10: 5b:01:18:6c:90:33:10:bd:4f:0b:d9:c6:0c:08:af: 7b:ab:f1:a1:fa:67:51:64:f3:cf:29:c9:91:58:29: fb:34:b9:bc:86:53:7a:b6:48:e8:c3:28:84:1f:d4: bf:d1:b6:6c:55:66:e0:45:2a:62:7f:18:22:2d:4c: 64:f1:9d:96:40:1f:be:99:d7:28:c3:8a:db:2a:37: 0e:bb:06:ef:35:a2:c6:bb:97:d9:6e:86:63:9f:61: f8:64:14:e5:36:f1:51:ca:e7:1d:13:4d:72:f8:bf: 52:0c:a9:1b:2a:00:2a:67:ba:99:91:66:58:91:61: 75:1c:49:69:84:71:f4:4d:62:72:35:b6:99:c4:1e: 3f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:10:FD:2D:C8:16:B9:C4:FA:97:AD:A5:18:FB:14:02:EA:AA:BD:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/ba9ab405-d555-3a62-98d7-994c77b7f1e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl X509v3 Authority Key Identifier: keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer sbgp-ipAddrBlock: critical IPv4: 216.170.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:41:12:af:57:69:00:8d:a3:8c:bb:d2:ec:76:2f:3f:c3:c5: d9:a5:60:10:7c:19:6c:e5:6d:1e:2e:df:68:84:a4:ea:e9:70: 8b:1c:ea:92:4c:20:b1:5a:d3:15:20:7b:67:d8:57:f1:92:5f: 5d:55:bc:2e:61:96:c5:b6:1f:7c:bd:88:86:e2:c4:76:ec:f3: 34:5d:2c:2d:04:b2:93:b3:7d:cc:8c:f6:c6:cf:35:96:1d:d6: 22:5a:ff:07:ca:f2:c3:ad:e3:31:61:5d:fe:69:fe:b6:be:84: b2:65:22:f8:90:89:70:f7:35:27:d4:1a:61:08:8d:5c:f2:e4: b9:e7:d5:5e:1a:bc:4f:97:fc:e3:34:27:3d:4f:d6:25:ad:a1: ed:2d:7d:a7:80:90:17:ff:de:73:b0:c9:05:8c:41:b9:3c:a7: 0a:7d:87:24:20:33:7a:22:82:29:a2:12:bf:fe:95:d8:bd:87: 13:91:60:82:a9:2a:0a:54:96:9e:0e:2e:ec:28:d6:ad:10:fd: 91:70:14:b2:01:da:42:78:5e:89:a6:d6:e8:85:0a:41:85:e7: d1:34:2e:21:8f:b1:f7:f1:79:74:c1:b8:24:22:31:db:da:27: 81:f1:70:d7:df:8b:af:37:3b:cc:57:0e:5d:fa:01:d4:2e:bb: 20:95:f9:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw6ho1bgJl0RuiD/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2ZTlhMjUtMTU5OS00ZTliLWE4YTItMDE1OTk1Yzgw NWI4MB4XDTI1MTIxODE0MjIzOFoXDTI2MDMxODEzMjIzOFowLzEtMCsGA1UEAxMk OTg3OTNkZWMtZTFkZi00ZWYwLTkwM2EtZmJjYmQyYTUxYmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIYczLUgV6xhS5CUn6T/sFMzVtMO1OnUHVjL KU8enW5X7i83KZp57CbAse2WP4sg0s8E0/dq3LAMUPqdkzjSugVhdIb4sN9DqXM/ O3/zWB/kKInKr58m5XVXoaUM3oE6pNDaopj2/MDKbL+lArXCi5jb2PcYJBBbARhs kDMQvU8L2cYMCK97q/Gh+mdRZPPPKcmRWCn7NLm8hlN6tkjowyiEH9S/0bZsVWbg RSpifxgiLUxk8Z2WQB++mdcow4rbKjcOuwbvNaLGu5fZboZjn2H4ZBTlNvFRyucd E01y+L9SDKkbKgAqZ7qZkWZYkWF1HElphHH0TWJyNbaZxB4/JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwQ/S3IFrnE+petpRj7FALqqr2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YzZl OWEyNS0xNTk5LTRlOWItYThhMi0wMTU5OTVjODA1YjgvYmE5YWI0MDUtZDU1NS0z YTYyLTk4ZDctOTk0Yzc3YjdmMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWM2ZTlhMjUtMTU5OS00ZTliLWE4 YTItMDE1OTk1YzgwNWI4LzljNmU5YTI1LTE1OTktNGU5Yi1hOGEyLTAxNTk5NWM4 MDViOC5jcmwwHwYDVR0jBBgwFoAUjvfJnlBoZhsQD1ZqN6tb/9Qmj6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YzZlOWEyNS0xNTk5LTRlOWItYThhMi0wMTU5 OTVjODA1YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxBEq9XaQCNo4y70ux2Lz/DxdmlYBB8GWzlbR4u32iEpOrpcIsc6pJM ILFa0xUge2fYV/GSX11VvC5hlsW2H3y9iIbixHbs8zRdLC0EspOzfcyM9sbPNZYd 1iJa/wfK8sOt4zFhXf5p/ra+hLJlIviQiXD3NSfUGmEIjVzy5Lnn1V4avE+X/OM0 Jz1P1iWtoe0tfaeAkBf/3nOwyQWMQbk8pwp9hyQgM3oigimiEr/+ldi9hxORYIKp KgpUlp4OLuwo1q0Q/ZFwFLIB2kJ4Xomm1uiFCkGF59E0LiGPsffxeXTBuCQiMdva J4HxcNffi683O8xXDl36AdQuuyCV+QM= -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:14 2025 by rpki-client