This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa File: ba09dfad-31a3-31a1-8d98-b0cec5949829.roa (raw, json) Hash identifier: dzxkvSlhP7hMqSVqPKq9/RVO3BswP5fPUH7nY0/j1Bw= Subject key identifier: 5F:0C:16:B0:C2:18:67:4A:EA:33:E9:3D:60:9B:A8:82:70:2C:78:C2 Certificate issuer: /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Certificate serial: 010D0C9F4328584BDA2AFE854BA90F2750237F80 Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa Signing time: Fri 14 Nov 2025 02:00:30 +0000 ROA not before: Fri 14 Nov 2025 02:00:30 +0000 ROA not after: Thu 12 Feb 2026 02:00:30 +0000 asID: 30041 IP address blocks: 66.218.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:2a:fe:85:4b:a9:0f:27:50:23:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Validity Not Before: Nov 14 02:00:30 2025 GMT Not After : Feb 12 02:00:30 2026 GMT Subject: CN=0f13ea40-4c54-4a4a-8c58-7fc5fb6bc5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:68:b8:af:fb:47:00:1c:da:a9:06:71:80: ae:42:ed:bd:91:33:bd:66:c5:59:45:69:b8:9b:66: 20:5f:2e:f8:b8:45:af:24:c4:9b:b4:35:92:27:5e: d1:7b:f9:e1:a2:1d:d4:be:2c:a5:a9:3a:79:ab:ad: dd:76:5b:a1:a9:4a:92:5e:cc:42:e3:b2:03:9b:2c: 9b:af:69:5a:91:55:41:95:bc:a7:b3:4e:cc:cc:86: 20:ff:8e:1e:ae:56:5b:35:20:46:a8:6d:09:72:a0: fd:85:0e:9d:0b:22:11:c7:59:c7:38:ec:2d:b6:ff: 7f:f0:de:d4:9b:de:ad:0c:ea:94:54:fc:b9:39:5e: d3:be:2a:3c:67:a9:3d:cb:75:c3:23:48:bf:b0:32: 49:f2:65:56:14:2a:b5:cd:8a:56:60:1d:1a:93:6e: d4:a0:39:7d:7b:20:5f:68:fe:70:30:17:e6:a7:3a: 14:2e:fb:7c:20:73:bf:28:84:aa:ca:03:72:b7:80: ad:fd:34:ef:36:08:32:64:5e:ec:7a:46:28:ea:c3: 0c:c4:0c:d6:5d:8e:d8:52:3c:64:3f:95:68:be:4e: ef:bd:4a:cc:0e:b9:be:9f:bf:a9:22:c3:31:e8:2a: 55:d2:54:b0:81:2c:aa:5d:14:5d:f0:18:bc:fc:4a: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0C:16:B0:C2:18:67:4A:EA:33:E9:3D:60:9B:A8:82:70:2C:78:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl X509v3 Authority Key Identifier: keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer sbgp-ipAddrBlock: critical IPv4: 66.218.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:48:a5:fc:91:dd:c9:8e:63:8f:7e:74:d5:0c:fc:cd:eb:a4: a6:0f:cc:7f:f0:7c:b3:10:0b:8f:16:a1:91:4a:d4:b8:89:8a: 56:a1:43:c5:c8:ce:43:fd:4d:fb:98:81:1a:00:2c:b3:6f:76: f4:9e:ec:92:83:39:52:f9:32:55:5c:72:3f:82:e2:42:cf:8d: 54:cc:e0:fc:0b:e6:aa:49:b3:97:5d:06:3a:8a:30:f6:1c:bc: 18:13:97:c4:47:d0:07:7a:b9:ec:fa:08:2f:d3:41:6a:9e:46: 77:be:07:f6:f2:2a:0c:44:5d:27:62:c2:c1:52:3e:ad:c9:50: d1:3e:82:72:90:3e:45:0a:32:4a:39:aa:26:74:57:ab:fb:a4: b2:b5:bb:bd:92:c6:af:47:2d:ae:ca:ce:e2:ed:e3:ee:c4:80: 37:b9:24:04:af:6a:3b:ba:8a:32:6b:12:aa:70:fd:72:53:8a: 14:e0:fd:ea:ad:ce:22:17:7b:98:25:47:67:83:da:b3:ce:79: 78:9c:9a:55:1c:ae:e2:a5:77:fa:d1:70:49:b3:8c:8a:85:69: c2:62:0f:34:f6:51:0c:c7:70:1a:6a:4f:06:e7:4c:fb:43:20: c3:c3:36:30:07:60:4a:19:8b:64:5a:f3:37:84:ec:d0:ba:36: 31:f0:11:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvaKv6FS6kPJ1Ajf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJhOGJkZDAtNmM3Zi00N2I3LWI0MjctNmUyYjQ1NGZh MzQzMB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk MGYxM2VhNDAtNGM1NC00YTRhLThjNTgtN2ZjNWZiNmJjNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx69ouK/7RwAc2qkGcYCuQu29kTO9ZsVZRWm4 m2YgXy74uEWvJMSbtDWSJ17Re/nhoh3UviylqTp5q63ddluhqUqSXsxC47IDmyyb r2lakVVBlbyns07MzIYg/44erlZbNSBGqG0JcqD9hQ6dCyIRx1nHOOwttv9/8N7U m96tDOqUVPy5OV7Tvio8Z6k9y3XDI0i/sDJJ8mVWFCq1zYpWYB0ak27UoDl9eyBf aP5wMBfmpzoULvt8IHO/KISqygNyt4Ct/TTvNggyZF7sekYo6sMMxAzWXY7YUjxk P5Vovk7vvUrMDrm+n7+pIsMx6CpV0lSwgSyqXRRd8Bi8/ErXKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8MFrDCGGdK6jPpPWCbqIJwLHjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4 YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJiNDU0ZmEzNDMvYmEwOWRmYWQtMzFhMy0z MWExLThkOTgtYjBjZWM1OTQ5ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWJhOGJkZDAtNmM3Zi00N2I3LWI0 MjctNmUyYjQ1NGZhMzQzLzliYThiZGQwLTZjN2YtNDdiNy1iNDI3LTZlMmI0NTRm YTM0My5jcmwwHwYDVR0jBBgwFoAUsWj3t9BOo5ekclbjM5CgXUrxK0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJi NDU0ZmEzNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQtogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBIpfyR3cmOY49+dNUM/M3rpKYPzH/wfLMQC48WoZFK1LiJilahQ8XI zkP9TfuYgRoALLNvdvSe7JKDOVL5MlVccj+C4kLPjVTM4PwL5qpJs5ddBjqKMPYc vBgTl8RH0Ad6uez6CC/TQWqeRne+B/byKgxEXSdiwsFSPq3JUNE+gnKQPkUKMko5 qiZ0V6v7pLK1u72Sxq9HLa7KzuLt4+7EgDe5JASvaju6ijJrEqpw/XJTihTg/eqt ziIXe5glR2eD2rPOeXicmlUcruKld/rRcEmzjIqFacJiDzT2UQzHcBpqTwbnTPtD IMPDNjAHYEoZi2Ra8zeE7NC6NjHwEWA= -----END CERTIFICATE-----Generated at Sat Dec 6 22:22:20 2025 by rpki-client