This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba5d2792-5be8-3b48-878e-d276c8a625d0.roa File: ba5d2792-5be8-3b48-878e-d276c8a625d0.roa (raw, json) Hash identifier: mGxlp8j2BPEd+V9ippRaFfRFnbRJUi+T/OQidL9fJEs= Subject key identifier: 6A:D4:36:35:D3:46:E1:87:19:BD:8D:D0:B4:EC:FF:51:ED:32:8C:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BFBAB5DAB9817DBA4678BBD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba5d2792-5be8-3b48-878e-d276c8a625d0.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.37.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:5d:ab:98:17:db:a4:67:8b:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=f9aac81b-9e57-48d6-a1fb-f8c71993bad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:76:50:8b:3d:f5:69:1d:ba:60:81:11:26:1a: ff:3b:a9:8d:34:ae:fa:5f:ca:89:90:cc:e1:68:54: b8:78:62:74:02:71:d8:34:3d:5d:f2:26:29:f0:79: 04:1e:5b:cc:5c:cc:0a:cb:51:f5:4f:9c:25:62:a3: 8a:ca:e2:7f:95:94:2b:7e:85:76:a9:ad:91:f4:43: 0b:53:c8:3b:46:9f:0c:c2:ab:b0:97:de:49:3d:32: 0f:a2:22:e7:09:4b:27:7c:62:59:5d:7d:4e:a0:10: 51:e4:cb:14:94:10:88:cc:d0:50:68:19:73:18:9b: 33:7a:a4:e6:56:2c:55:29:d1:6e:dd:33:50:72:5b: 8d:f9:da:b1:dc:af:07:ea:ac:fb:4a:63:47:53:13: e3:1d:88:bc:32:45:cf:ea:c1:5c:88:71:bc:7c:73: ac:40:56:8c:72:1e:29:59:f5:b5:1f:61:90:4d:d8: e3:d6:d4:b9:eb:f1:0d:96:81:8c:8c:30:f0:79:01: 56:4e:d6:a8:c9:6c:f9:94:2b:f2:ee:07:6e:d7:b2: 55:22:04:3b:da:8a:d1:80:f3:2c:60:7e:5f:18:ba: 69:bc:97:0c:c8:9b:a2:c6:5d:29:cb:ae:87:ab:41: 97:58:23:58:04:6f:bb:a1:b8:93:9f:e4:a3:46:44: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D4:36:35:D3:46:E1:87:19:BD:8D:D0:B4:EC:FF:51:ED:32:8C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba5d2792-5be8-3b48-878e-d276c8a625d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8e:b2:4e:d6:a4:8a:37:50:9b:b2:0e:4a:8d:f3:a8:45:81: e1:9a:a4:94:f8:95:57:1f:e0:de:fa:c4:39:83:b1:21:25:1c: 20:05:2d:8b:6f:a9:58:c8:4a:2e:0e:53:33:a4:89:ed:48:21: 9f:1a:cc:e7:94:7d:ba:ed:ff:be:90:e5:e7:7d:38:fd:ad:a5: 41:45:cf:cf:0f:07:77:ff:9f:9f:1b:92:87:e6:32:e6:cd:25: 35:06:74:c2:26:a0:3a:3f:ee:e1:8a:8f:55:62:5b:0f:6a:82: 16:e1:a6:5f:f4:7b:49:05:a2:6e:ed:b6:e0:ea:98:00:19:15: 70:07:6a:bd:e6:32:d5:bd:2e:d9:b3:19:f3:b0:3e:fc:d2:0c: c0:6c:8c:4e:6a:1c:96:ac:97:d4:09:93:f2:f3:a8:f3:bd:97: b0:5e:f4:0b:54:77:cb:3a:b7:a5:ea:75:aa:2c:ed:a0:fc:cb: 16:3d:f3:fc:f8:d6:23:13:1f:5f:9d:3f:21:b6:62:f6:1f:1a: 37:76:cf:77:b4:5e:22:71:8d:90:75:6b:fc:45:8f:9f:23:9c: a1:39:b2:c2:aa:d3:eb:55:bc:8a:d6:71:b9:92:27:b0:45:cf: ab:35:f6:21:26:80:b7:d2:46:a2:0d:8e:25:20:b9:d7:5a:bd: 68:8a:bd:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7q12rmBfbpGeLvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk ZjlhYWM4MWItOWU1Ny00OGQ2LWExZmItZjhjNzE5OTNiYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXZQiz31aR26YIERJhr/O6mNNK76X8qJkMzh aFS4eGJ0AnHYND1d8iYp8HkEHlvMXMwKy1H1T5wlYqOKyuJ/lZQrfoV2qa2R9EML U8g7Rp8Mwquwl95JPTIPoiLnCUsnfGJZXX1OoBBR5MsUlBCIzNBQaBlzGJszeqTm VixVKdFu3TNQcluN+dqx3K8H6qz7SmNHUxPjHYi8MkXP6sFciHG8fHOsQFaMch4p WfW1H2GQTdjj1tS56/ENloGMjDDweQFWTtaoyWz5lCvy7gdu17JVIgQ72orRgPMs YH5fGLppvJcMyJuixl0py66Hq0GXWCNYBG+7obiTn+SjRkRN0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrUNjXTRuGHGb2N0LTs/1HtMowAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmE1ZDI3OTItNWJlOC0z YjQ4LTg3OGUtZDI3NmM4YTYyNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmOsk7WpIo3UJuyDkqN86hFgeGapJT4lVcf4N76xDmDsSElHCAFLYtv qVjISi4OUzOkie1IIZ8azOeUfbrt/76Q5ed9OP2tpUFFz88PB3f/n58bkofmMubN JTUGdMImoDo/7uGKj1ViWw9qghbhpl/0e0kFom7ttuDqmAAZFXAHar3mMtW9Ltmz GfOwPvzSDMBsjE5qHJasl9QJk/LzqPO9l7Be9AtUd8s6t6Xqdaos7aD8yxY98/z4 1iMTH1+dPyG2YvYfGjd2z3e0XiJxjZB1a/xFj58jnKE5ssKq0+tVvIrWcbmSJ7BF z6s19iEmgLfSRqINjiUguddavWiKvTs= -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:29 2025 by rpki-client