This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/bde1949e-0125-3cca-b3f6-350aaa861a6e.roa File: bde1949e-0125-3cca-b3f6-350aaa861a6e.roa (raw, json) Hash identifier: 0u/7KURPSBbW4BCmKVt6M+nKtLql4dAbjUXxnTa8Il8= Subject key identifier: AC:66:E1:9F:4E:C4:61:52:F9:12:D5:68:3D:54:B2:64:78:37:6B:7B Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Certificate serial: 010D0C9F4328584C391642A0D631968B84C9B980 Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/bde1949e-0125-3cca-b3f6-350aaa861a6e.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 14618 IP address blocks: 23.189.120.0/24 maxlen: 24 2602:f805::/48 maxlen: 48 2602:f805:900::/48 maxlen: 48 2602:f805:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:42:a0:d6:31:96:8b:84:c9:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=cee99188-8a47-4a2e-ac78-ed0d97d40327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:98:84:8a:49:bf:c8:2d:55:92:05:ee:ed:67: 04:3f:70:f2:20:80:a0:8e:a0:5b:b5:d1:08:85:90: c5:1f:4e:e0:48:1c:d8:38:d2:8e:fe:65:df:b5:a6: 7a:d4:8e:32:2f:16:d6:fc:1e:99:cc:cf:ed:0c:29: d1:bc:86:2e:c7:69:c8:1c:c9:46:eb:4e:19:74:20: d1:de:bf:3b:d7:ef:8c:4a:32:13:81:e5:cd:8c:8c: 56:cd:66:da:de:96:68:01:39:b6:0d:a7:33:70:15: 01:e4:6e:7d:fa:be:dc:00:a9:e7:ad:e5:6b:ff:c2: 52:f4:a3:d4:5d:49:6a:47:bd:24:cb:90:80:c9:4c: ed:37:3c:fb:65:47:b1:09:ea:01:a5:13:4f:e2:8c: 89:70:78:21:59:e4:fd:1f:a6:dd:b9:cd:01:25:99: 07:8a:dc:de:87:aa:af:e3:95:dd:5d:0f:f4:ad:a8: 1b:82:ef:8b:64:1e:37:9b:3b:20:eb:96:05:2a:fd: ab:d5:64:5b:b9:a1:25:c6:f9:c1:64:0a:91:b6:65: be:24:27:da:ff:c1:f8:46:f6:98:75:d0:c0:f4:6e: ea:ca:be:79:42:ae:26:66:9e:af:4b:e6:e1:7b:30: 7a:3b:e5:0f:02:69:6e:01:18:71:3c:5a:97:10:44: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:66:E1:9F:4E:C4:61:52:F9:12:D5:68:3D:54:B2:64:78:37:6B:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/bde1949e-0125-3cca-b3f6-350aaa861a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl X509v3 Authority Key Identifier: keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer sbgp-ipAddrBlock: critical IPv4: 23.189.120.0/24 IPv6: 2602:f805::/48 2602:f805:900::/48 2602:f805:c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:18:12:a8:df:2e:3b:44:87:10:02:20:18:73:74:0b:f6:2e: aa:fc:cd:e2:a9:2f:c5:5c:22:13:d6:65:2c:e3:f9:ac:2e:48: 04:40:e9:59:31:46:34:6f:53:26:ac:29:e2:14:46:1d:00:58: eb:b4:8c:9a:26:96:89:cc:c7:18:42:3c:1d:8b:04:de:3a:46: 74:ea:24:ab:87:25:1a:a1:99:c4:73:0d:27:b5:d8:87:d4:bf: bd:f3:6c:09:f5:f3:f2:8a:6b:86:52:51:24:07:d4:61:e5:a2: 45:1e:79:b9:60:97:cb:7a:b0:c1:80:25:a5:12:06:6b:87:5a: e5:82:d1:62:a8:59:a7:e4:c1:9f:46:59:59:a5:6d:60:8e:f1: f8:de:6e:20:8c:7c:0c:df:ae:a4:ee:99:89:9d:2c:1c:c0:23: 55:c0:e7:d9:78:da:c5:f3:0c:10:24:66:43:e1:ec:55:d1:b1: ff:b9:ab:85:24:5f:cd:a1:82:bb:f9:7e:a9:8f:4a:11:0c:f8: 56:1d:ee:1d:b1:07:48:54:71:04:1a:4d:06:54:78:4d:b6:6d: 2d:56:42:18:ba:38:e5:84:d0:0e:71:c7:75:82:7b:bd:e8:fe: d6:52:67:b8:5b:ad:59:4c:3a:45:4b:56:cb:e6:fd:35:cb:2d: 4e:90:5a:62 -----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgIUAQ0Mn0MoWEw5FkKg1jGWi4TJuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2YTk1YjMtZGQzYy00MGRlLTliZDItODQzNTdiNzRm ODAxMB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk Y2VlOTkxODgtOGE0Ny00YTJlLWFjNzgtZWQwZDk3ZDQwMzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5iEikm/yC1VkgXu7WcEP3DyIICgjqBbtdEI hZDFH07gSBzYONKO/mXftaZ61I4yLxbW/B6ZzM/tDCnRvIYux2nIHMlG604ZdCDR 3r871++MSjITgeXNjIxWzWba3pZoATm2DaczcBUB5G59+r7cAKnnreVr/8JS9KPU XUlqR70ky5CAyUztNzz7ZUexCeoBpRNP4oyJcHghWeT9H6bduc0BJZkHitzeh6qv 45XdXQ/0ragbgu+LZB43mzsg65YFKv2r1WRbuaElxvnBZAqRtmW+JCfa/8H4RvaY ddDA9G7qyr55Qq4mZp6vS+bhezB6O+UPAmluARhxPFqXEEQYEwIDAQABo4IDeDCC A3QwHQYDVR0OBBYEFKxm4Z9OxGFS+RLVaD1UsmR4N2t7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTZh OTViMy1kZDNjLTQwZGUtOWJkMi04NDM1N2I3NGY4MDEvYmRlMTk0OWUtMDEyNS0z Y2NhLWIzZjYtMzUwYWFhODYxYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmE2YTk1YjMtZGQzYy00MGRlLTli ZDItODQzNTdiNzRmODAxL2JhNmE5NWIzLWRkM2MtNDBkZS05YmQyLTg0MzU3Yjc0 ZjgwMS5jcmwwHwYDVR0jBBgwFoAUVoM58N8yt2DFZSaxnWkfb2xEoXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTZhOTViMy1kZDNjLTQwZGUtOWJkMi04NDM1 N2I3NGY4MDEuY2VyMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAF714MCEE AgACMBsDBwAmAvgFAAADBwAmAvgFCQADBwAmAvgFDAAwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVBgSqN8u O0SHEAIgGHN0C/YuqvzN4qkvxVwiE9ZlLOP5rC5IBEDpWTFGNG9TJqwp4hRGHQBY 67SMmiaWiczHGEI8HYsE3jpGdOokq4clGqGZxHMNJ7XYh9S/vfNsCfXz8oprhlJR JAfUYeWiRR55uWCXy3qwwYAlpRIGa4da5YLRYqhZp+TBn0ZZWaVtYI7x+N5uIIx8 DN+upO6ZiZ0sHMAjVcDn2XjaxfMMECRmQ+HsVdGx/7mrhSRfzaGCu/l+qY9KEQz4 Vh3uHbEHSFRxBBpNBlR4TbZtLVZCGLo45YTQDnHHdYJ7vej+1lJnuFutWUw6RUtW y+b9NcstTpBaYg== -----END CERTIFICATE-----Generated at Thu Dec 25 09:22:25 2025 by rpki-client