This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba2f366d-8112-317b-babc-593dfcf2b05b.roa File: ba2f366d-8112-317b-babc-593dfcf2b05b.roa (raw, json) Hash identifier: TpVrDTgaetqKvpMWIMg2VKZOqRGqSecFthEFd4ZwP/k= Subject key identifier: B1:89:A4:46:25:BE:9E:5F:D9:21:B9:B7:9C:AD:0C:85:7A:76:CC:6C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C751F88DFDDAD43C162639E00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba2f366d-8112-317b-babc-593dfcf2b05b.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 97.64.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1f:88:df:dd:ad:43:c1:62:63:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=641e3e25-e86c-4fb3-8d7f-6d288dbfaa11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d0:b9:f0:84:d7:13:26:25:86:b0:45:ca:6c: e2:b0:6f:ba:0a:57:c0:27:44:37:ab:da:56:c1:4e: 04:06:75:c9:de:9f:e9:73:a1:f3:b2:f2:b3:95:73: 9f:91:06:f5:a7:20:13:7e:53:cb:78:6f:bd:41:ec: 09:cd:a2:84:7e:a0:3f:38:0e:d6:e5:8c:3c:61:a5: 1a:1a:4a:de:68:37:46:e0:2e:3d:09:e3:98:cd:d8: 97:39:3c:8d:0e:c2:60:2a:63:1d:2a:f2:7e:ef:2c: 85:58:85:31:80:2f:cd:9c:97:ca:55:8b:fb:e9:63: 78:3d:bd:36:08:56:4c:3a:f2:88:95:4b:89:19:99: 93:82:52:1e:16:e3:51:5e:31:c1:27:a2:f3:7a:6c: a9:0a:c2:af:d9:3a:e3:59:83:0a:ac:c6:d0:de:ed: 2f:78:48:e2:44:51:c8:b6:bd:d0:a8:74:28:41:05: 48:bd:1e:2c:91:c1:97:fa:e1:5e:d8:57:9d:60:55: d4:46:e8:87:74:44:e5:43:b8:40:72:2c:56:43:3e: e4:3a:4e:87:5b:51:90:f4:81:ef:c4:c3:de:2f:d9: f6:58:20:81:2e:ef:e9:e2:da:dd:d5:dd:63:42:61: 8d:02:1c:59:24:bb:98:a3:33:c0:8c:8d:cf:f5:8a: a5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:89:A4:46:25:BE:9E:5F:D9:21:B9:B7:9C:AD:0C:85:7A:76:CC:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba2f366d-8112-317b-babc-593dfcf2b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:98:1e:8e:b2:44:d0:f6:36:58:dc:34:65:f2:2f:34:1d:23: ec:1c:5d:f6:07:77:9b:67:b1:16:41:5d:b4:01:8f:58:9b:ca: 95:10:c5:a3:53:e2:b9:fa:49:c1:1b:b8:01:d5:12:8e:96:ae: e7:8f:76:1e:79:0c:c9:92:d3:55:cf:eb:96:5a:e2:71:73:d7: 6e:d2:23:43:07:82:5b:e7:97:fe:ac:af:d4:27:10:2e:aa:29: 3d:8e:35:5b:f6:e0:0d:f8:ac:56:68:e4:57:b9:4e:97:48:89: 4b:c2:c7:67:d0:ec:21:95:83:80:d9:10:45:23:98:28:e0:78: 64:fb:28:b1:8c:22:a7:ab:e7:b5:60:3d:37:82:ff:7d:33:b7: b6:aa:28:d6:c4:3e:c9:bb:f0:58:d1:67:43:85:59:90:a5:64: 4c:e1:a5:ab:8d:18:b7:03:28:65:95:5e:08:14:d0:a8:b2:dc: 30:e3:3c:e5:1b:ea:88:76:01:ab:05:2f:eb:7e:b8:bd:f8:03: df:2c:63:ec:f3:d0:b2:48:10:ff:9b:58:80:eb:43:05:ec:71: fe:f3:8c:89:b5:fc:60:29:08:3b:4e:46:de:78:90:c6:35:f0: e4:16:80:e4:c7:3a:0d:49:d9:06:75:f6:c9:0d:dd:ba:31:06: ed:8a:7a:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1H4jf3a1DwWJjngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk NjQxZTNlMjUtZTg2Yy00ZmIzLThkN2YtNmQyODhkYmZhYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9C58ITXEyYlhrBFymzisG+6ClfAJ0Q3q9pW wU4EBnXJ3p/pc6HzsvKzlXOfkQb1pyATflPLeG+9QewJzaKEfqA/OA7W5Yw8YaUa GkreaDdG4C49CeOYzdiXOTyNDsJgKmMdKvJ+7yyFWIUxgC/NnJfKVYv76WN4Pb02 CFZMOvKIlUuJGZmTglIeFuNRXjHBJ6LzemypCsKv2TrjWYMKrMbQ3u0veEjiRFHI tr3QqHQoQQVIvR4skcGX+uFe2FedYFXURuiHdETlQ7hAcixWQz7kOk6HW1GQ9IHv xMPeL9n2WCCBLu/p4trd1d1jQmGNAhxZJLuYozPAjI3P9YqlYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGJpEYlvp5f2SG5t5ytDIV6dsxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmEyZjM2NmQtODExMi0z MTdiLWJhYmMtNTkzZGZjZjJiMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSYHo6yRND2NljcNGXyLzQdI+wcXfYHd5tnsRZBXbQBj1ibypUQxaNT 4rn6ScEbuAHVEo6WruePdh55DMmS01XP65Za4nFz127SI0MHglvnl/6sr9QnEC6q KT2ONVv24A34rFZo5Fe5TpdIiUvCx2fQ7CGVg4DZEEUjmCjgeGT7KLGMIqer57Vg PTeC/30zt7aqKNbEPsm78FjRZ0OFWZClZEzhpauNGLcDKGWVXggU0Kiy3DDjPOUb 6oh2AasFL+t+uL34A98sY+zz0LJIEP+bWIDrQwXscf7zjIm1/GApCDtORt54kMY1 8OQWgOTHOg1J2QZ19skN3boxBu2Keso= -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:07 2026 by rpki-client