This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/066b4f4e-c861-3946-a26e-9e25c56e7451.roa File: 066b4f4e-c861-3946-a26e-9e25c56e7451.roa (raw, json) Hash identifier: /wD/CtC/wvdlxRfX+b2L9aRSsaxqEhTYp0cPGHVPu8U= Subject key identifier: 6A:2E:26:F3:81:D4:30:3C:D4:5E:8F:01:A2:E7:BD:16:EE:18:72:D9 Certificate issuer: /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Certificate serial: 010D0C9F4328584C401112E5E73A6A379D144180 Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/066b4f4e-c861-3946-a26e-9e25c56e7451.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 30041 IP address blocks: 67.211.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:12:e5:e7:3a:6a:37:9d:14:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=b0ddd434-c903-41a4-8ef5-05bed517bfa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:06:a8:be:31:4c:b9:8a:c9:0a:81:42:a0: 91:05:5f:d8:c6:46:4e:2b:c8:d5:f5:91:5e:32:6a: e1:e8:a8:9b:b3:41:46:f3:1e:56:44:da:62:cb:5b: 84:c8:a4:03:5e:95:24:85:ee:a9:cc:4c:4f:ee:ef: 7d:5b:23:67:e5:89:76:ce:ca:12:d7:57:53:1c:61: 3e:c3:81:8d:04:3f:dd:3c:46:60:80:91:50:ad:57: d7:53:20:c8:fa:8e:e0:cf:38:f1:b8:64:5a:e4:6b: bb:e4:92:69:0a:1c:0f:4e:3d:b3:f7:42:21:4b:45: 0c:08:84:c0:48:58:28:ea:2b:03:5b:c6:b8:c0:19: e5:80:95:bc:56:a3:7f:be:d1:84:b8:df:f7:f9:90: 3c:d4:0d:39:55:22:3e:d3:26:e6:ba:75:4e:dc:0d: e5:3e:8a:46:d1:cc:76:33:bc:63:dd:eb:96:ec:76: f9:6f:7f:25:43:03:f0:e2:b9:36:d7:30:58:52:36: 0f:17:fd:f4:e4:4d:57:85:0b:3d:86:3d:47:f6:69: 59:76:5e:90:db:38:c8:ba:c2:ea:d7:16:ee:3d:23: 04:f4:4d:c3:4a:38:cc:c6:73:f9:8a:e2:ec:d0:65: c6:9a:8a:02:f3:4b:42:29:3c:63:14:0d:c7:36:13: 41:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2E:26:F3:81:D4:30:3C:D4:5E:8F:01:A2:E7:BD:16:EE:18:72:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/066b4f4e-c861-3946-a26e-9e25c56e7451.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl X509v3 Authority Key Identifier: keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer sbgp-ipAddrBlock: critical IPv4: 67.211.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:1b:3d:92:68:aa:b2:a2:30:b1:38:be:3c:c8:29:dc:4e:a3: bb:c7:4e:4c:40:9e:d8:2b:e8:90:35:c6:39:a4:8f:7a:79:0a: f9:2b:9e:ac:2e:d8:e2:4a:f9:62:c6:65:fa:fd:7c:d6:3f:27: 47:a3:91:4a:b6:eb:ca:96:2e:71:65:73:0c:57:cb:98:cf:b1: 97:b4:ac:d3:ed:1f:d0:26:ec:75:6c:f8:47:c5:04:81:dd:9c: 6e:91:32:6c:d4:45:dc:66:e3:21:43:10:ec:0c:01:f1:02:61: eb:7f:a7:2b:9d:95:88:1d:c1:b4:f1:c1:d3:1e:7c:46:8d:64: 0b:41:a6:c7:8a:be:4d:64:07:f3:d2:fd:02:5e:f9:90:8c:90: 7a:67:a8:37:09:24:d3:e6:a5:75:6b:77:64:c7:10:1e:c5:52: f4:29:59:a0:37:77:1e:d2:d3:48:99:f5:23:de:ef:f9:29:0e: a1:3f:6c:2c:92:ef:d0:db:9c:fa:93:b3:53:c7:18:88:cb:e6: 56:c1:3c:de:85:86:65:56:78:2b:63:ee:79:58:20:03:91:46: 04:5e:ba:92:1e:15:1f:49:d4:84:bf:ef:e5:7f:e6:fc:98:22: a3:98:62:11:97:dc:1b:68:40:da:09:ec:f9:2e:da:16:26:db: d3:9c:1e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAERLl5zpqN50UQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJhOGJkZDAtNmM3Zi00N2I3LWI0MjctNmUyYjQ1NGZh MzQzMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk YjBkZGQ0MzQtYzkwMy00MWE0LThlZjUtMDViZWQ1MTdiZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLMGqL4xTLmKyQqBQqCRBV/YxkZOK8jV9ZFe Mmrh6Kibs0FG8x5WRNpiy1uEyKQDXpUkhe6pzExP7u99WyNn5Yl2zsoS11dTHGE+ w4GNBD/dPEZggJFQrVfXUyDI+o7gzzjxuGRa5Gu75JJpChwPTj2z90IhS0UMCITA SFgo6isDW8a4wBnlgJW8VqN/vtGEuN/3+ZA81A05VSI+0ybmunVO3A3lPopG0cx2 M7xj3euW7Hb5b38lQwPw4rk21zBYUjYPF/305E1XhQs9hj1H9mlZdl6Q2zjIusLq 1xbuPSME9E3DSjjMxnP5iuLs0GXGmooC80tCKTxjFA3HNhNBIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGouJvOB1DA81F6PAaLnvRbuGHLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4 YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJiNDU0ZmEzNDMvMDY2YjRmNGUtYzg2MS0z OTQ2LWEyNmUtOWUyNWM1NmU3NDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWJhOGJkZDAtNmM3Zi00N2I3LWI0 MjctNmUyYjQ1NGZhMzQzLzliYThiZGQwLTZjN2YtNDdiNy1iNDI3LTZlMmI0NTRm YTM0My5jcmwwHwYDVR0jBBgwFoAUsWj3t9BOo5ekclbjM5CgXUrxK0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJi NDU0ZmEzNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4bPZJoqrKiMLE4vjzIKdxOo7vHTkxAntgr6JA1xjmkj3p5Cvkrnqwu 2OJK+WLGZfr9fNY/J0ejkUq268qWLnFlcwxXy5jPsZe0rNPtH9Am7HVs+EfFBIHd nG6RMmzURdxm4yFDEOwMAfECYet/pyudlYgdwbTxwdMefEaNZAtBpseKvk1kB/PS /QJe+ZCMkHpnqDcJJNPmpXVrd2THEB7FUvQpWaA3dx7S00iZ9SPe7/kpDqE/bCyS 79DbnPqTs1PHGIjL5lbBPN6FhmVWeCtj7nlYIAORRgReupIeFR9J1IS/7+V/5vyY IqOYYhGX3BtoQNoJ7Pku2hYm29OcHqg= -----END CERTIFICATE-----Generated at Wed Dec 24 21:34:54 2025 by rpki-client