This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa File: 04a72bfb-6956-393f-affe-ff7db4804d88.roa (raw, json) Hash identifier: bW+p2K0EHGWFh9prmKdNQ2Qd/fWhn946+7opL6I4pkE= Subject key identifier: C3:43:CF:48:8F:F6:56:FE:77:D6:74:EF:49:4D:49:F1:90:F2:F3:00 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584BE125D74463CF474D966AA000 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa Signing time: Sun 16 Nov 2025 14:00:39 +0000 ROA not before: Sun 16 Nov 2025 14:00:39 +0000 ROA not after: Sat 14 Feb 2026 14:00:39 +0000 asID: 33392 IP address blocks: 209.35.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e1:25:d7:44:63:cf:47:4d:96:6a:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Nov 16 14:00:39 2025 GMT Not After : Feb 14 14:00:39 2026 GMT Subject: CN=1bc77575-b0ef-4f48-b0d5-df390bc107ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:49:8b:7f:d7:a8:0e:fb:f3:cc:68:a0:44:04: 5f:c1:c6:60:9f:64:d0:e0:d9:4b:80:29:71:62:06: 74:08:df:b9:14:8c:3f:f1:a3:e3:a5:0b:3d:a1:2d: f4:73:b2:ac:09:6f:cc:4c:9d:3a:12:1d:ba:96:3c: 36:0a:f8:9b:d3:e4:f9:ed:ad:62:61:50:89:ba:b8: 23:56:98:04:1e:bb:0c:0e:25:d2:70:91:49:ed:e3: 9e:78:68:22:95:b5:21:3e:65:f9:57:d1:38:f9:1c: 68:6f:63:ad:40:4d:6b:cc:dd:fe:cb:8b:19:b7:04: 4e:f3:94:a6:6a:d8:7f:6c:d4:fb:fd:f8:f2:31:d1: bc:fb:70:22:c8:5f:18:a2:a9:60:17:54:1c:40:20: 67:88:fa:62:4d:2d:de:1e:28:15:ad:40:b8:48:92: 85:18:f4:85:8e:d4:3e:78:d1:61:e3:a7:65:34:8d: 3e:72:a3:6e:d9:8a:ed:f6:4c:7b:e7:56:2e:4d:bc: 81:65:26:3b:55:3c:f8:e0:24:ae:59:a4:d3:97:b1: 46:c4:97:0c:65:51:76:56:c2:02:ec:21:bf:8b:2e: ba:1c:96:0e:22:47:3a:c7:ab:74:be:b6:d7:95:6b: 0e:ca:7b:19:2a:e2:26:d1:f4:9e:94:03:26:3a:fd: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:43:CF:48:8F:F6:56:FE:77:D6:74:EF:49:4D:49:F1:90:F2:F3:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:cd:a5:59:ba:ca:07:6d:85:71:95:d5:6b:43:02:5b:ab:ee: db:f8:3f:32:ea:df:f1:43:03:47:2f:31:d8:b1:69:8d:3b:89: 7a:e0:e7:ee:7b:eb:3d:cb:b1:12:11:dd:0f:09:24:a1:88:d8: f9:83:fb:a3:8e:8b:58:88:6a:02:6b:ad:6b:0d:fe:6e:0a:92: 52:06:e0:4f:2a:04:fd:c4:af:64:1e:6e:ea:75:3f:6e:a8:18: 38:0a:0d:85:e5:18:f4:a6:a6:39:4d:dd:14:f5:83:ab:1d:7a: 6e:e3:cb:a8:89:37:c8:5d:69:2a:4e:48:33:df:ba:c1:6c:48: 0b:47:58:12:ca:2e:4d:56:4a:d7:4b:b5:57:84:f0:25:5c:5a: 39:0b:c3:32:29:61:38:ca:51:6b:40:3f:e1:8e:ed:2a:5b:cd: 54:4d:d4:22:ab:ca:21:52:b3:7e:6f:26:75:ab:41:a9:0e:f7: 03:7f:d9:14:ba:7a:14:8d:55:68:17:33:62:08:16:4c:60:91: b0:0f:d8:40:b3:93:fb:55:14:b0:6c:7a:ac:b9:6c:27:5a:a8: 59:95:c9:6c:dd:17:af:46:e1:5f:c2:fd:33:09:9c:79:62:2e: cd:0c:f5:4e:2b:69:7f:04:26:a1:8e:da:67:f8:7e:d8:b4:77: a9:b6:41:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvhJddEY89HTZZqoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MTExNjE0MDAzOVoXDTI2MDIxNDE0MDAzOVowLzEtMCsGA1UEAxMk MWJjNzc1NzUtYjBlZi00ZjQ4LWIwZDUtZGYzOTBiYzEwN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEmLf9eoDvvzzGigRARfwcZgn2TQ4NlLgClx YgZ0CN+5FIw/8aPjpQs9oS30c7KsCW/MTJ06Eh26ljw2Cvib0+T57a1iYVCJurgj VpgEHrsMDiXScJFJ7eOeeGgilbUhPmX5V9E4+Rxob2OtQE1rzN3+y4sZtwRO85Sm ath/bNT7/fjyMdG8+3AiyF8YoqlgF1QcQCBniPpiTS3eHigVrUC4SJKFGPSFjtQ+ eNFh46dlNI0+cqNu2Yrt9kx751YuTbyBZSY7VTz44CSuWaTTl7FGxJcMZVF2VsIC 7CG/iy66HJYOIkc6x6t0vrbXlWsOynsZKuIm0fSelAMmOv0htQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNDz0iP9lb+d9Z070lNSfGQ8vMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDRhNzJiZmItNjk1Ni0z OTNmLWFmZmUtZmY3ZGI0ODA0ZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDNpVm6ygdthXGV1WtDAlur7tv4PzLq3/FDA0cvMdixaY07iXrg5+57 6z3LsRIR3Q8JJKGI2PmD+6OOi1iIagJrrWsN/m4KklIG4E8qBP3Er2Qebup1P26o GDgKDYXlGPSmpjlN3RT1g6sdem7jy6iJN8hdaSpOSDPfusFsSAtHWBLKLk1WStdL tVeE8CVcWjkLwzIpYTjKUWtAP+GO7SpbzVRN1CKryiFSs35vJnWrQakO9wN/2RS6 ehSNVWgXM2IIFkxgkbAP2ECzk/tVFLBseqy5bCdaqFmVyWzdF69G4V/C/TMJnHli Ls0M9U4raX8EJqGO2mf4fti0d6m2QUc= -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:23 2025 by rpki-client