This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bafe5d2a-895c-3309-bd79-3298a23ac7d1.roa File: bafe5d2a-895c-3309-bd79-3298a23ac7d1.roa (raw, json) Hash identifier: deqMSEocz0e/0ulUSJ1YyvBJgoDQC+WpIWsVPYGjlrg= Subject key identifier: 11:CE:33:73:91:20:69:A2:BE:DD:6A:C7:BD:80:FF:D3:9F:E5:4A:B5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BDA2B337AAE558239D4FF2DC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bafe5d2a-895c-3309-bd79-3298a23ac7d1.roa Signing time: Fri 14 Nov 2025 02:00:30 +0000 ROA not before: Fri 14 Nov 2025 02:00:30 +0000 ROA not after: Thu 12 Feb 2026 02:00:30 +0000 asID: 30036 IP address blocks: 173.29.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:2b:33:7a:ae:55:82:39:d4:ff:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 14 02:00:30 2025 GMT Not After : Feb 12 02:00:30 2026 GMT Subject: CN=d586637e-3648-447d-b866-30a36d7d4475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:ac:b7:b2:38:35:1f:10:bd:61:f2:90:f0: 30:73:97:70:e3:8e:b8:f0:02:7e:6f:76:d8:df:55: 80:15:1c:80:33:2d:b2:1e:bf:f7:db:0c:a7:1e:de: 00:a4:df:00:42:d8:8d:5f:8e:44:da:80:aa:90:5c: a1:b4:ba:b9:be:60:ea:c6:41:e3:23:36:50:de:4f: 17:cf:e2:f9:11:67:d4:45:4d:5d:d8:05:48:22:87: ee:24:aa:6a:cd:e2:14:fc:b4:ee:a4:c5:f0:ba:2f: d1:6b:6f:60:e2:a7:73:1c:fe:2a:df:eb:6e:cd:7e: db:1a:9b:5d:f4:92:62:0a:0f:25:45:22:36:60:42: 12:96:7d:09:d8:e4:c7:21:91:c4:7e:dc:5d:4c:45: 48:7f:2e:f2:8a:36:c4:59:60:cc:b3:b1:2a:0c:0b: 93:23:0d:3e:a2:6a:b2:1f:e9:43:1e:bc:a5:f5:a5: b3:76:62:f5:41:f4:3b:7e:0a:9b:82:40:27:58:ce: b8:ed:41:d4:78:c9:1b:ff:9b:a1:fe:68:b1:c2:06: ec:01:40:1b:4c:3a:53:12:8d:f7:f1:30:57:b1:b1: 5d:e7:78:c1:b3:dc:49:b2:07:bd:97:40:2c:b1:67: 76:40:2d:8a:5c:98:f8:63:78:b7:8d:f5:fb:1e:55: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CE:33:73:91:20:69:A2:BE:DD:6A:C7:BD:80:FF:D3:9F:E5:4A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bafe5d2a-895c-3309-bd79-3298a23ac7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:fd:ce:9a:07:09:93:89:05:b8:7d:5d:37:30:d5:b7:c9:b5: 27:2d:49:11:6c:33:98:d6:e3:7c:e9:0a:84:b0:b9:53:d3:b2: 4f:64:6e:9a:39:8c:40:a9:ce:53:2b:c4:a2:8d:10:61:2e:f4: b5:23:07:d7:f7:0c:bf:e7:a3:fc:90:26:3c:4d:32:ce:0e:6c: ce:3e:b2:9e:66:39:d6:ee:b9:f4:69:50:f3:54:82:a6:a6:af: df:2c:55:e4:ee:df:22:cd:5f:f1:63:f8:38:b1:1f:eb:00:72: ee:94:69:1e:89:79:0b:bb:9b:d1:98:35:9c:31:37:42:40:36: cc:66:46:b2:4a:e7:6f:03:c7:ec:e8:05:2b:33:e8:71:0b:f6: 2f:52:64:3b:29:ac:d2:f7:83:92:01:3e:4a:ae:08:59:15:1f: 8e:15:4b:27:17:6f:46:d8:56:d6:21:41:1f:fb:63:e2:5d:2c: 62:6e:e7:39:09:e2:28:f0:c1:41:ba:45:9d:a9:43:77:b1:9c: a1:bd:02:67:34:19:89:8b:e8:55:55:b7:ec:5a:aa:90:3a:02: 6f:41:ad:6a:3f:17:d3:d8:d4:bb:fe:34:b2:fe:93:bf:47:21: 8b:59:5c:bb:de:6c:b6:7d:20:0f:1a:c1:b1:1f:b9:e6:64:18: 78:f3:8d:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvaKzN6rlWCOdT/LcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk ZDU4NjYzN2UtMzY0OC00NDdkLWI4NjYtMzBhMzZkN2Q0NDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pCst7I4NR8QvWHykPAwc5dw44648AJ+b3bY 31WAFRyAMy2yHr/32wynHt4ApN8AQtiNX45E2oCqkFyhtLq5vmDqxkHjIzZQ3k8X z+L5EWfURU1d2AVIIofuJKpqzeIU/LTupMXwui/Ra29g4qdzHP4q3+tuzX7bGptd 9JJiCg8lRSI2YEISln0J2OTHIZHEftxdTEVIfy7yijbEWWDMs7EqDAuTIw0+omqy H+lDHryl9aWzdmL1QfQ7fgqbgkAnWM647UHUeMkb/5uh/mixwgbsAUAbTDpTEo33 8TBXsbFd53jBs9xJsge9l0AssWd2QC2KXJj4Y3i3jfX7HlUYpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHOM3ORIGmivt1qx72A/9Of5Uq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmFmZTVkMmEtODk1Yy0z MzA5LWJkNzktMzI5OGEyM2FjN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADf9zpoHCZOJBbh9XTcw1bfJtSctSRFsM5jW43zpCoSwuVPTsk9kbpo5 jECpzlMrxKKNEGEu9LUjB9f3DL/no/yQJjxNMs4ObM4+sp5mOdbuufRpUPNUgqam r98sVeTu3yLNX/Fj+DixH+sAcu6UaR6JeQu7m9GYNZwxN0JANsxmRrJK528Dx+zo BSsz6HEL9i9SZDsprNL3g5IBPkquCFkVH44VSycXb0bYVtYhQR/7Y+JdLGJu5zkJ 4ijwwUG6RZ2pQ3exnKG9Amc0GYmL6FVVt+xaqpA6Am9BrWo/F9PY1Lv+NLL+k79H IYtZXLvebLZ9IA8awbEfueZkGHjzjbA= -----END CERTIFICATE-----Generated at Tue Nov 25 10:34:57 2025 by rpki-client