This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa File: bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa (raw, json) Hash identifier: 48Vi1fRiTE411kJvGbJf3pPgfACxd1/TSw9y8U52Jc4= Subject key identifier: 49:89:A0:E9:15:D1:DC:EE:6D:46:72:BB:6F:EB:02:E5:EB:F9:2B:35 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F4328584C0B061E6DE1C0F36BAF116B80 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 25779 IP address blocks: 206.168.9.0/24 maxlen: 24 207.174.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:1e:6d:e1:c0:f3:6b:af:11:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=984e5508-a40a-4ac2-a834-25224249ec03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:8d:fc:b2:23:ce:f2:39:29:78:d5:89:9e: a9:e1:42:c8:51:72:2f:d5:9e:ad:4d:48:e6:80:44: 97:94:e6:0c:0d:2c:bc:6c:dc:83:a4:d3:ee:cf:09: 07:dc:73:0e:62:e8:ab:be:c9:ba:65:61:10:e8:19: 1f:45:3d:e0:78:3a:e3:0b:11:ed:f8:64:3c:98:0f: 11:5c:4f:d5:b1:58:59:1f:29:ac:7c:98:58:b6:66: a3:e8:a9:28:85:6b:c3:66:54:29:e6:9e:90:9a:85: fe:b0:8f:a7:97:94:8a:7a:32:71:90:d4:1e:12:1f: c0:68:40:f6:da:54:48:de:26:a9:67:97:89:45:21: aa:ae:cc:ee:40:77:08:85:ed:9c:1b:4b:dd:9a:2c: 81:14:5e:e0:65:5b:76:62:e5:b2:66:d1:72:2f:51: e9:a6:ef:78:d6:31:83:76:75:75:02:9c:3d:d6:95: c4:a0:15:89:2c:e8:0d:9b:12:c1:d1:bd:43:df:44: 92:03:4a:0c:51:c3:cd:e5:b5:92:21:18:0f:3f:0e: fa:6a:7f:98:f8:13:53:3a:42:d1:36:f1:3d:d7:1b: 08:7d:be:64:e7:84:b5:e0:3f:8a:46:f3:05:fb:39: 09:21:80:67:bb:d5:0f:c6:1b:94:2f:57:67:db:40: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:89:A0:E9:15:D1:DC:EE:6D:46:72:BB:6F:EB:02:E5:EB:F9:2B:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 206.168.9.0/24 207.174.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:0d:51:ea:4d:45:8b:d7:39:bc:2d:33:5d:7c:9a:4a:8c:e6: 64:6e:8f:03:4d:18:34:da:5e:ab:61:30:2d:3f:68:a1:16:8a: 90:07:7f:3b:5e:47:2d:3a:8c:0c:48:b0:44:a0:6c:0d:ae:3b: 59:8a:5f:3f:fc:e1:36:b2:97:65:c8:1e:91:7e:33:4d:b7:cf: 52:d7:29:6c:57:3e:15:ca:65:b9:4d:62:a6:ea:66:fe:8c:10: 57:95:c3:d2:6b:f4:3b:c0:0e:a6:ad:3c:ff:f3:b0:22:b0:49: ae:21:c7:02:4a:39:cd:53:22:a5:1b:8c:17:b0:75:0e:1b:09: a3:1e:d6:51:a1:f0:66:38:85:c9:ea:07:d0:80:6e:3a:59:8a: ea:0a:4c:e1:6f:55:20:27:74:a5:c2:a1:dd:02:07:90:f2:00: b1:ad:ed:aa:1e:27:52:56:db:5c:3a:19:67:fb:76:d4:10:1b: 5d:75:b2:2c:68:f3:82:0e:81:5e:32:e0:7d:8e:4d:01:51:4f: cd:48:ad:5d:38:3c:d0:9c:09:2a:58:4e:71:1e:06:9a:92:34: 93:93:e9:a6:c3:8e:13:0f:2f:4b:be:5d:99:ce:ce:03:52:0b: b1:4d:20:8e:ad:b4:f3:9d:f5:07:01:c3:1e:d0:52:de:f1:1e: c9:16:67:9c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEwLBh5t4cDza68Ra4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk OTg0ZTU1MDgtYTQwYS00YWMyLWE4MzQtMjUyMjQyNDllYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno6N/LIjzvI5KXjViZ6p4ULIUXIv1Z6tTUjm gESXlOYMDSy8bNyDpNPuzwkH3HMOYuirvsm6ZWEQ6BkfRT3geDrjCxHt+GQ8mA8R XE/VsVhZHymsfJhYtmaj6KkohWvDZlQp5p6QmoX+sI+nl5SKejJxkNQeEh/AaED2 2lRI3iapZ5eJRSGqrszuQHcIhe2cG0vdmiyBFF7gZVt2YuWyZtFyL1Hppu941jGD dnV1Apw91pXEoBWJLOgNmxLB0b1D30SSA0oMUcPN5bWSIRgPPw76an+Y+BNTOkLR NvE91xsIfb5k54S14D+KRvMF+zkJIYBnu9UPxhuUL1dn20C8EwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEmJoOkV0dzubUZyu2/rAuXr+Ss1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvYmY2ZDNmOTMtYzBiOS0z ODNhLWI1MGItOGRmMzNiOGExODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzqgJAwQA z67KMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH4NUepNRYvXObwtM118mkqM5mRujwNNGDTaXqthMC0/aKEW ipAHfzteRy06jAxIsESgbA2uO1mKXz/84Tayl2XIHpF+M023z1LXKWxXPhXKZblN YqbqZv6MEFeVw9Jr9DvADqatPP/zsCKwSa4hxwJKOc1TIqUbjBewdQ4bCaMe1lGh 8GY4hcnqB9CAbjpZiuoKTOFvVSAndKXCod0CB5DyALGt7aoeJ1JW21w6GWf7dtQQ G111sixo84IOgV4y4H2OTQFRT81IrV04PNCcCSpYTnEeBpqSNJOT6abDjhMPL0u+ XZnOzgNSC7FNII6ttPOd9QcBwx7QUt7xHskWZ5w= -----END CERTIFICATE-----Generated at Sun Dec 14 13:52:22 2025 by rpki-client