This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa File: 38c40b45-912b-3d93-bf1f-297a8a0a2463.roa (raw, json) Hash identifier: vd6a9aM0NwV45hCSh6h9DfEMPP0KC3U+d0L6dm57EEc= Subject key identifier: 05:97:13:89:25:D0:1E:79:9E:27:7C:07:5E:B0:CB:6B:67:0C:92:66 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584BD5FB252A8AB7B7E8C54AABC0 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 36511 IP address blocks: 209.35.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:25:2a:8a:b7:b7:e8:c5:4a:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=72f64a4b-e792-4ef0-bc9d-63d470452314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:cd:f3:96:19:0f:a4:88:83:49:f2:45:f7: 5a:1c:a4:d8:6b:99:93:af:d7:e1:7c:ae:47:28:e9: bf:41:99:81:cf:b0:3f:a7:65:b1:6e:c1:25:c1:df: a9:08:a6:55:60:e2:e1:3e:7c:b0:80:e3:11:cf:4f: 4d:8e:7a:04:a7:94:29:b5:0d:f0:06:c4:c4:93:74: 29:bf:7a:3d:a0:1f:d7:23:6c:90:ef:f0:4a:8e:7f: 8c:45:9f:92:49:84:c1:16:c2:83:59:08:72:37:df: 7c:2e:ef:6d:f0:85:b1:5a:31:e0:af:4a:c4:89:5a: 50:3f:19:2f:c6:21:54:0e:29:eb:65:22:a7:ae:5e: 09:22:cb:5b:55:04:46:4d:99:83:bf:89:7f:99:7f: 24:06:f9:59:d8:02:43:ae:4c:17:75:1a:a1:d4:1e: c4:27:e2:30:6c:2e:ce:e2:08:cf:f4:7d:f8:1e:96: 6c:22:d8:14:4c:d0:f5:47:f8:fb:0e:63:92:67:eb: f3:94:24:9f:c4:17:b4:c9:40:79:e7:79:b2:d6:37: 6c:64:42:46:1f:32:4c:ed:c8:f5:c0:b9:a3:d0:16: 3d:97:d1:46:b8:3d:7d:62:ad:3b:97:1a:10:1c:a6: d5:55:12:a2:d4:8e:18:4e:5b:53:d7:ee:c4:fd:4b: 6c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:97:13:89:25:D0:1E:79:9E:27:7C:07:5E:B0:CB:6B:67:0C:92:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f1:35:40:c5:53:0a:77:00:4b:20:aa:f4:94:c1:8f:f2:41: 78:c0:6f:6c:95:bf:92:75:c0:16:7e:69:29:d8:8a:84:d8:09: 2f:7e:10:26:59:5c:63:2c:9c:59:2f:c3:73:36:4c:79:ce:a0: 92:6c:85:9f:27:69:49:54:e0:01:e3:0e:b1:fb:c5:25:7a:26: 98:4d:9b:e9:32:67:18:1f:20:11:57:20:41:49:b6:bc:af:7a: 30:38:06:4d:fe:8f:6c:25:a9:38:69:1b:7d:37:6b:40:2f:a7: 22:aa:76:10:13:ff:be:e1:f6:68:94:ad:e7:11:3c:e8:c8:7e: c7:99:45:6a:a7:27:d0:80:eb:e7:b5:67:75:40:c7:fa:2a:4e: 6f:06:ec:13:be:de:f5:5e:ae:ac:9a:22:43:13:05:b3:89:e5: 40:ad:37:dc:1d:fd:4e:dc:69:14:56:f5:f5:6b:45:bb:85:b2: 63:3a:65:1e:94:6f:0f:f2:f2:71:72:d2:13:ef:86:03:6d:68: c2:72:13:51:33:ad:9c:fc:01:eb:14:0b:64:74:d5:55:87:d7: 7f:8b:6c:01:9b:81:e1:cd:74:69:84:3c:02:97:e6:8b:5e:b4: b2:2b:f9:6e:73:a4:4f:11:db:23:18:04:a4:04:17:c2:a9:82: b9:43:73:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+yUqire36MVKq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk NzJmNjRhNGItZTc5Mi00ZWYwLWJjOWQtNjNkNDcwNDUyMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFLN85YZD6SIg0nyRfdaHKTYa5mTr9fhfK5H KOm/QZmBz7A/p2WxbsElwd+pCKZVYOLhPnywgOMRz09NjnoEp5QptQ3wBsTEk3Qp v3o9oB/XI2yQ7/BKjn+MRZ+SSYTBFsKDWQhyN998Lu9t8IWxWjHgr0rEiVpQPxkv xiFUDinrZSKnrl4JIstbVQRGTZmDv4l/mX8kBvlZ2AJDrkwXdRqh1B7EJ+IwbC7O 4gjP9H34HpZsItgUTND1R/j7DmOSZ+vzlCSfxBe0yUB553my1jdsZEJGHzJM7cj1 wLmj0BY9l9FGuD19Yq07lxoQHKbVVRKi1I4YTltT1+7E/UtscQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWXE4kl0B55nid8B16wy2tnDJJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMzhjNDBiNDUtOTEyYi0z ZDkzLWJmMWYtMjk3YThhMGEyNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnxNUDFUwp3AEsgqvSUwY/yQXjAb2yVv5J1wBZ+aSnYioTYCS9+ECZZ XGMsnFkvw3M2THnOoJJshZ8naUlU4AHjDrH7xSV6JphNm+kyZxgfIBFXIEFJtryv ejA4Bk3+j2wlqThpG303a0AvpyKqdhAT/77h9miUrecRPOjIfseZRWqnJ9CA6+e1 Z3VAx/oqTm8G7BO+3vVerqyaIkMTBbOJ5UCtN9wd/U7caRRW9fVrRbuFsmM6ZR6U bw/y8nFy0hPvhgNtaMJyE1EzrZz8AesUC2R01VWH13+LbAGbgeHNdGmEPAKX5ote tLIr+W5zpE8R2yMYBKQEF8KpgrlDc2U= -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:17 2025 by rpki-client