This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa File: acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa (raw, json) Hash identifier: baxc8vwLKI4xadjj1TD+cqzJRnmmD7Qg1hr5lSt2gDQ= Subject key identifier: 8C:FB:61:4E:A6:83:5F:A1:A4:B4:D2:4A:ED:78:39:BA:8A:E4:DA:D7 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584BD5FB2519BA1E42FF4DC61594 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 36511 IP address blocks: 209.35.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:25:19:ba:1e:42:ff:4d:c6:15:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=2bdcc68c-2cdb-4883-91e0-00d8065e0a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:76:fe:86:40:58:35:c4:14:55:74:54:31: ce:f6:9e:8d:0f:9b:8d:2e:83:ef:56:48:f8:cd:f3: e3:45:aa:97:ce:0f:b6:7e:21:40:39:3b:d3:60:8f: aa:97:28:29:c8:f5:dc:92:3a:c5:04:40:72:a0:0e: 2e:a4:00:24:85:0f:5a:a5:70:f9:06:aa:72:a8:be: cf:2e:61:5d:5f:9d:06:11:43:6d:b9:38:4e:0e:35: f4:ae:bb:e4:71:6a:74:fa:0b:b2:f2:af:a4:4d:6a: ae:7e:1c:2c:f9:ec:ee:ae:da:68:9c:15:58:6b:70: 37:ce:68:9a:b4:5f:0c:84:5b:3a:62:ec:94:47:5f: ed:95:c5:cc:64:2c:19:86:be:d6:17:e4:a4:0d:9d: ba:66:c9:23:4a:51:42:cd:7a:5c:97:39:05:98:d8: 35:1f:d1:ec:7d:52:44:8a:e6:1e:7a:61:25:11:2e: 62:ec:e8:b1:19:ec:d6:48:c1:be:66:29:f0:77:31: 4a:26:8e:0c:dc:7c:fa:26:d8:65:97:64:94:b3:70: 05:ec:39:ba:0e:48:9a:f4:c7:8a:4b:ca:f8:6d:e4: 56:f2:8e:0d:ef:80:e0:21:ca:20:05:6d:8d:f2:f2: a2:c6:5e:bc:e9:36:0f:1b:e7:ba:ec:15:73:86:cb: 80:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FB:61:4E:A6:83:5F:A1:A4:B4:D2:4A:ED:78:39:BA:8A:E4:DA:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:78:44:ba:51:58:2a:23:47:e0:bd:1b:bd:f6:3d:39:ce:b7: a4:02:f1:3d:3f:de:c7:27:a5:a1:39:81:d1:cf:0f:d7:ba:a4: 9e:fa:83:ed:7b:40:f5:96:7b:2c:35:da:b6:0d:b6:59:30:44: 27:71:cc:94:3d:6f:7c:b4:f5:7a:d2:69:f6:24:e9:05:51:c0: 2c:b5:11:90:3d:77:6a:ae:2a:35:2a:80:7f:0e:b3:17:2f:e3: 5f:ac:72:70:27:50:91:02:9d:a3:f3:3e:d3:41:09:df:39:dd: 05:14:d0:27:85:8a:9b:8b:de:b5:d6:3b:e8:41:90:5e:53:e0: d2:28:4d:2e:8e:b3:62:ae:da:1a:ab:c4:d5:46:5d:64:fa:b6: 47:70:92:9e:a4:53:f9:1e:7d:a0:a0:48:d5:cc:58:85:fb:a4: 0e:af:06:dc:a1:9e:03:87:ba:ae:f6:10:5a:ed:70:26:7d:a2: b8:81:8f:8a:a9:9e:a6:43:82:ba:1f:e1:7d:4c:9d:cd:ed:15: 0b:f5:fd:6e:48:79:76:75:96:b2:be:51:5e:ec:a3:a6:cb:11: 82:74:75:f8:83:5f:6c:9d:33:e7:b4:3f:d8:4a:a8:26:39:0b: b1:15:ed:ac:f1:55:f4:48:03:b8:da:a5:b5:39:99:bf:43:4e: f2:1d:5a:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+yUZuh5C/03GFZQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk MmJkY2M2OGMtMmNkYi00ODgzLTkxZTAtMDBkODA2NWUwYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Z2/oZAWDXEFFV0VDHO9p6ND5uNLoPvVkj4 zfPjRaqXzg+2fiFAOTvTYI+qlygpyPXckjrFBEByoA4upAAkhQ9apXD5BqpyqL7P LmFdX50GEUNtuThODjX0rrvkcWp0+guy8q+kTWqufhws+ezurtponBVYa3A3zmia tF8MhFs6YuyUR1/tlcXMZCwZhr7WF+SkDZ26ZskjSlFCzXpclzkFmNg1H9HsfVJE iuYeemElES5i7OixGezWSMG+ZinwdzFKJo4M3Hz6Jthll2SUs3AF7Dm6Dkia9MeK S8r4beRW8o4N74DgIcogBW2N8vKixl686TYPG+e67BVzhsuArQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIz7YU6mg1+hpLTSSu14ObqK5NrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYWNkYjM5NDMtMWZlMC0z NDNmLWI1ZmYtYzc5OGU5ZmQ0MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB54RLpRWCojR+C9G732PTnOt6QC8T0/3scnpaE5gdHPD9e6pJ76g+17 QPWWeyw12rYNtlkwRCdxzJQ9b3y09XrSafYk6QVRwCy1EZA9d2quKjUqgH8Osxcv 41+scnAnUJECnaPzPtNBCd853QUU0CeFipuL3rXWO+hBkF5T4NIoTS6Os2Ku2hqr xNVGXWT6tkdwkp6kU/kefaCgSNXMWIX7pA6vBtyhngOHuq72EFrtcCZ9oriBj4qp nqZDgrof4X1Mnc3tFQv1/W5IeXZ1lrK+UV7so6bLEYJ0dfiDX2ydM+e0P9hKqCY5 C7EV7azxVfRIA7japbU5mb9DTvIdWps= -----END CERTIFICATE-----Generated at Sat Dec 6 16:54:27 2025 by rpki-client