This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa File: e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa (raw, json) Hash identifier: dpnjZ0TZ1RH6PtKG7d4ed0rx/JUR1/u6OgALn9/6qJM= Subject key identifier: F4:59:48:CD:64:55:BD:57:18:53:F0:00:B3:67:94:49:7A:E0:F6:B7 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F4328584C0B061E5AE8B60BD57CD998C0 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 21777 IP address blocks: 206.168.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:1e:5a:e8:b6:0b:d5:7c:d9:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=68e05a22-9c6a-4579-a44f-ac7a7a2604f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:20:f9:74:a7:7d:a2:5f:76:c3:36:29:50:96: 2d:74:a6:ff:9e:3d:b7:d9:cb:3b:9f:45:91:0d:65: ac:ae:37:eb:1e:ba:99:a6:3b:1a:e1:ff:bf:d7:5e: d2:dc:89:71:30:86:a2:77:8c:ea:43:0e:99:e2:c7: c8:bf:c3:a7:22:8a:47:2b:b2:28:94:b6:81:9e:ef: 24:65:df:20:db:95:51:e1:21:1b:55:5f:58:78:68: 0b:9f:12:ee:38:f9:7a:16:c2:96:ae:6a:64:95:be: ef:f8:48:a9:b3:23:cb:30:fa:c6:05:23:7b:a6:0e: 50:bd:6c:7c:04:67:1b:ec:60:f3:3f:79:83:00:df: c3:37:a2:91:5f:04:08:40:8c:1a:38:5b:1c:32:25: a0:7d:1a:09:68:d2:ac:de:11:95:82:f8:c3:60:51: a0:b3:39:e8:62:cf:7c:fa:2a:fc:af:7c:9e:a0:f2: ab:13:60:18:4a:6e:31:1d:ba:e8:e7:ef:fe:c3:6b: 46:e5:60:64:6c:90:5b:90:ea:36:6a:ce:88:ad:81: 73:fb:5c:78:fb:08:9f:58:b8:41:d1:5d:35:3b:b9: f0:2e:22:26:87:19:70:54:75:f8:0e:7d:f7:24:87: b9:0f:7a:83:34:2b:ee:f0:f2:99:20:94:ee:77:27: 42:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:59:48:CD:64:55:BD:57:18:53:F0:00:B3:67:94:49:7A:E0:F6:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 206.168.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fa:7e:2f:d7:9e:85:46:4f:f1:1b:38:f0:b5:5b:4f:71:5e: 67:21:2d:f2:5f:c7:99:51:5e:a1:d9:1b:56:ad:af:aa:b7:dd: 6f:db:1e:5b:73:08:d7:0d:3e:5b:35:f3:b9:6c:48:42:6e:3c: d4:42:43:a1:99:d2:e4:cf:e6:0a:83:38:37:76:ea:6f:58:f1: 4d:39:70:db:ab:2e:cf:ca:91:67:fb:fc:90:46:ac:54:84:5a: f9:a9:41:23:79:c4:05:45:29:38:06:43:4d:42:68:b0:b4:cc: 9e:e3:0d:24:d9:1e:ed:4b:7c:bb:d4:20:78:f9:b9:1e:3d:c5: cf:35:fa:ea:c4:80:8a:c2:f1:f1:6a:44:0c:96:5d:82:d5:b1: 67:f8:d1:75:0b:1e:1b:98:a1:c6:bb:92:87:21:0c:94:43:67: 3b:51:a6:7c:a7:8a:26:fa:b4:06:55:53:a1:9d:58:24:ac:f2: b9:56:2a:fb:19:ba:bc:24:35:c7:66:25:74:be:95:d9:2f:68: 22:df:62:6d:fd:9b:9e:93:07:6e:b2:0c:3a:9d:f5:e0:34:b6: 9e:5c:66:05:d6:9c:00:2c:ba:a6:ef:da:df:e5:a7:a3:cf:dd: 15:ca:c2:f4:91:45:58:50:10:be:27:b0:8c:a2:a0:b6:f4:8f: 6c:be:32:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBh5a6LYL1XzZmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk NjhlMDVhMjItOWM2YS00NTc5LWE0NGYtYWM3YTdhMjYwNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyD5dKd9ol92wzYpUJYtdKb/nj232cs7n0WR DWWsrjfrHrqZpjsa4f+/117S3IlxMIaid4zqQw6Z4sfIv8OnIopHK7IolLaBnu8k Zd8g25VR4SEbVV9YeGgLnxLuOPl6FsKWrmpklb7v+EipsyPLMPrGBSN7pg5QvWx8 BGcb7GDzP3mDAN/DN6KRXwQIQIwaOFscMiWgfRoJaNKs3hGVgvjDYFGgsznoYs98 +ir8r3yeoPKrE2AYSm4xHbro5+/+w2tG5WBkbJBbkOo2as6IrYFz+1x4+wifWLhB 0V01O7nwLiImhxlwVHX4Dn33JIe5D3qDNCvu8PKZIJTudydCSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRZSM1kVb1XGFPwALNnlEl64Pa3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvZTY4ZDdiZDUtOWQzMC0z MGIxLWE3NmItOThlZjlhZWFmOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqhhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID6fi/XnoVGT/EbOPC1W09xXmchLfJfx5lRXqHZG1atr6q33W/bHltz CNcNPls187lsSEJuPNRCQ6GZ0uTP5gqDODd26m9Y8U05cNurLs/KkWf7/JBGrFSE WvmpQSN5xAVFKTgGQ01CaLC0zJ7jDSTZHu1LfLvUIHj5uR49xc81+urEgIrC8fFq RAyWXYLVsWf40XULHhuYoca7kochDJRDZztRpnyniib6tAZVU6GdWCSs8rlWKvsZ urwkNcdmJXS+ldkvaCLfYm39m56TB26yDDqd9eA0tp5cZgXWnAAsuqbv2t/lp6PP 3RXKwvSRRVhQEL4nsIyioLb0j2y+MtI= -----END CERTIFICATE-----Generated at Sun Dec 14 23:14:26 2025 by rpki-client