This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa File: 3f21f936-baed-3e68-a983-e38e4550c9d3.roa (raw, json) Hash identifier: uxz/vXqP0W/wwsO4YrqIADIquq9FZo9wCCy52/8dyBY= Subject key identifier: 82:CB:E6:0B:8C:76:F9:80:E2:61:AE:85:4E:4F:59:63:BE:8F:76:E8 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584BD8C5BA7C895CA2A4050B7EC0 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 36511 IP address blocks: 209.35.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:ba:7c:89:5c:a2:a4:05:0b:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=6430ab4c-5b89-4c70-92b2-86f17bb9d73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:ff:02:1e:92:ba:73:72:a5:f7:57:75:f0: ab:e7:29:0a:bd:6b:98:6e:1e:c3:82:4b:69:b7:37: 58:14:a9:73:db:2c:c3:0a:23:fd:3e:3c:a7:20:b6: 6e:6a:44:db:bd:8d:1b:69:18:7c:7a:b1:51:84:23: 70:9a:60:5f:e7:22:6e:7e:52:06:af:de:8d:4f:36: e5:83:5d:79:6e:a8:0c:f1:81:4b:55:71:b9:a8:5c: 40:d5:02:ed:ea:bc:52:84:1c:39:a9:65:f8:32:fd: 48:6c:da:d7:99:a6:14:6a:62:94:66:5c:4b:da:9f: b5:d0:e4:2b:c3:cd:6a:68:23:bb:07:01:8b:9a:09: aa:df:e6:7b:0f:7d:52:5a:ba:bd:22:05:fd:82:ab: e7:d8:0d:48:99:fd:87:a3:a5:2f:04:76:1a:38:30: b1:da:31:70:da:6a:ef:26:81:d3:c1:75:d0:29:d4: 41:d7:43:b5:a1:57:1d:e4:10:88:cc:d0:b1:00:0c: a9:eb:81:47:b7:a8:2f:ce:e6:7a:c5:bf:d7:6d:9d: 15:4c:b1:d4:de:eb:3f:2d:cd:a7:51:c4:f9:38:24: 83:5c:9b:7d:93:18:9a:85:98:9f:fd:e4:f7:6b:86: c6:56:70:87:6d:b5:88:2a:5d:38:a1:15:39:66:d6: dd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CB:E6:0B:8C:76:F9:80:E2:61:AE:85:4E:4F:59:63:BE:8F:76:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:dd:20:8b:28:f3:a1:39:74:a9:2e:05:a4:c6:c2:48:f3:59: 2a:07:bc:dc:bb:0e:fc:37:5b:ac:80:14:24:0e:ed:52:21:df: d8:dc:1c:5b:f8:24:d5:5e:50:69:86:2e:c1:91:9d:29:03:96: 90:27:cc:0e:5b:a3:81:a1:76:42:5b:93:b2:56:92:bf:06:39: 79:17:53:7f:f5:c9:30:60:d4:0a:b6:c7:3b:c6:55:59:98:65: c8:fe:41:03:b9:12:b6:bb:d4:0c:f4:53:fb:77:33:0c:98:ef: 63:c6:21:86:39:18:91:45:ba:ad:42:a1:b3:ec:17:bb:0f:77: 67:bd:54:9c:53:d5:62:4a:ea:0d:e5:39:41:06:fb:49:5d:c6: df:8a:94:f1:91:0d:3d:98:d6:c1:38:5a:19:de:6d:a7:05:6a: 88:40:b0:ce:35:8e:7d:98:98:cc:77:22:72:68:11:07:ab:72: 93:cd:e6:33:cc:7f:ac:ca:1d:a9:9e:03:91:81:d9:c5:8d:75: 5e:8e:0e:88:67:28:11:4f:2b:79:e9:29:2c:7c:fd:a1:ce:2b: 41:83:4d:74:f2:c7:5d:53:57:a9:5c:06:78:4e:dd:fe:b6:59: e0:16:f1:40:7f:61:ed:82:9b:61:15:7a:c4:aa:a0:89:ee:a6: d4:26:55:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxbp8iVyipAULfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk NjQzMGFiNGMtNWI4OS00YzcwLTkyYjItODZmMTdiYjlkNzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmv/Ah6SunNypfdXdfCr5ykKvWuYbh7Dgktp tzdYFKlz2yzDCiP9PjynILZuakTbvY0baRh8erFRhCNwmmBf5yJuflIGr96NTzbl g115bqgM8YFLVXG5qFxA1QLt6rxShBw5qWX4Mv1IbNrXmaYUamKUZlxL2p+10OQr w81qaCO7BwGLmgmq3+Z7D31SWrq9IgX9gqvn2A1Imf2Ho6UvBHYaODCx2jFw2mrv JoHTwXXQKdRB10O1oVcd5BCIzNCxAAyp64FHt6gvzuZ6xb/XbZ0VTLHU3us/Lc2n UcT5OCSDXJt9kxiahZif/eT3a4bGVnCHbbWIKl04oRU5Ztbd8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILL5guMdvmA4mGuhU5PWWO+j3boMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YyMWY5MzYtYmFlZC0z ZTY4LWE5ODMtZTM4ZTQ1NTBjOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHdIIso86E5dKkuBaTGwkjzWSoHvNy7Dvw3W6yAFCQO7VIh39jcHFv4 JNVeUGmGLsGRnSkDlpAnzA5bo4GhdkJbk7JWkr8GOXkXU3/1yTBg1Aq2xzvGVVmY Zcj+QQO5Era71Az0U/t3MwyY72PGIYY5GJFFuq1CobPsF7sPd2e9VJxT1WJK6g3l OUEG+0ldxt+KlPGRDT2Y1sE4WhnebacFaohAsM41jn2YmMx3InJoEQercpPN5jPM f6zKHameA5GB2cWNdV6ODohnKBFPK3npKSx8/aHOK0GDTXTyx11TV6lcBnhO3f62 WeAW8UB/Ye2Cm2EVesSqoInuptQmVbQ= -----END CERTIFICATE-----Generated at Sat Dec 6 17:53:44 2025 by rpki-client