This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba13e449-a8d4-34d9-86b8-d7c69cb87907.roa File: ba13e449-a8d4-34d9-86b8-d7c69cb87907.roa (raw, json) Hash identifier: ZiKrXZiy5hWquYS6iksgvpai2KVEKnaUI1M+04uRHH4= Subject key identifier: 1A:DF:D0:0B:56:D0:27:22:C6:BC:ED:63:02:74:81:93:80:F6:EC:E5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BD1CB082F465040682E153EE0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba13e449-a8d4-34d9-86b8-d7c69cb87907.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 212238 IP address blocks: 172.94.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:08:2f:46:50:40:68:2e:15:3e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=4df38dbe-041e-495d-9ddd-1c1b3da054e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5a:2c:3a:4c:45:d1:03:e5:93:08:22:12:d4: f5:56:d9:4a:b1:d8:7a:99:ab:14:d4:63:90:cd:ca: 97:f9:43:81:28:80:ac:6f:79:71:98:2c:90:53:7c: b3:33:9c:90:70:55:3e:90:d6:d6:75:cd:32:e2:75: e3:66:45:3a:0d:6b:5b:13:44:2f:0d:74:90:ab:b8: 90:f9:f7:a7:d2:1c:c1:ba:c5:d7:fb:f0:26:6d:c1: 26:f5:92:06:64:d1:68:77:34:88:63:3b:cc:ab:6e: 91:49:c5:bb:6f:6f:84:11:de:71:a9:f9:0c:f2:11: cc:ad:47:75:5f:ea:3e:d8:af:e0:30:db:f8:8b:9d: 47:99:0a:72:0b:ee:5f:89:f5:6e:a6:d5:40:88:f9: 03:6c:35:31:cb:8a:36:35:7b:6e:94:71:8d:40:6a: 16:ba:37:e3:2f:1f:56:2f:b7:09:9a:ca:d3:ac:5f: 41:b7:1e:57:8e:b6:01:af:e7:2a:99:ca:08:91:29: d4:ea:94:d4:eb:98:31:c2:72:81:1b:ed:52:5b:8c: d7:51:11:aa:2d:b5:9e:b1:af:02:cb:3c:67:39:10: 5c:11:55:20:ba:f8:38:cc:45:75:51:9e:a7:4d:12: bb:f4:7e:56:c5:7c:9f:4c:07:80:a5:8b:3f:0a:04: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DF:D0:0B:56:D0:27:22:C6:BC:ED:63:02:74:81:93:80:F6:EC:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba13e449-a8d4-34d9-86b8-d7c69cb87907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e0:ca:81:60:07:81:db:a8:ec:c7:74:86:eb:a0:7c:81:01: 52:10:3a:ad:dd:d2:cc:7b:6d:9e:72:40:93:7f:a1:c4:f4:a9: e3:ce:38:0a:8a:de:c7:98:1b:a7:bc:27:1b:73:13:93:62:aa: 0f:bd:2c:c6:04:ae:00:c4:11:e3:bf:d4:be:7c:3a:c6:ab:3b: 21:32:02:96:dd:19:b2:f1:45:0d:6f:9b:86:d2:fe:0a:c4:e2: fc:a3:c6:c1:0d:26:cd:c6:2a:35:f5:ee:5b:33:6f:01:6d:2d: 0f:ab:65:d4:93:64:7a:4b:4c:b4:a5:a1:15:85:5d:69:03:d0: 44:2a:70:9c:ad:75:52:94:df:5d:3e:74:a7:34:09:fb:50:59: 98:4b:f3:f9:41:30:32:52:48:f4:b9:96:88:f9:d0:dc:69:b9: c9:c6:42:2d:a4:db:68:9b:1e:a1:51:0c:4f:79:0e:90:58:d6: f4:fe:22:6c:b7:47:01:1b:70:03:9c:b4:90:c7:b7:7a:07:d9: 42:8e:3b:c5:e0:d4:86:42:89:1e:b3:9c:9a:43:9a:69:dd:63: 6d:6a:b1:73:30:e2:2f:9e:b3:52:45:da:51:ee:6f:dd:70:91: 59:07:18:72:24:a4:31:ba:61:1a:21:3d:3a:50:18:18:e1:4a: db:b8:18:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvRywgvRlBAaC4VPuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk NGRmMzhkYmUtMDQxZS00OTVkLTlkZGQtMWMxYjNkYTA1NGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFosOkxF0QPlkwgiEtT1VtlKsdh6masU1GOQ zcqX+UOBKICsb3lxmCyQU3yzM5yQcFU+kNbWdc0y4nXjZkU6DWtbE0QvDXSQq7iQ +fen0hzBusXX+/AmbcEm9ZIGZNFodzSIYzvMq26RScW7b2+EEd5xqfkM8hHMrUd1 X+o+2K/gMNv4i51HmQpyC+5fifVuptVAiPkDbDUxy4o2NXtulHGNQGoWujfjLx9W L7cJmsrTrF9Btx5XjrYBr+cqmcoIkSnU6pTU65gxwnKBG+1SW4zXURGqLbWesa8C yzxnORBcEVUguvg4zEV1UZ6nTRK79H5WxXyfTAeApYs/CgRf5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrf0AtW0CcixrztYwJ0gZOA9uzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmExM2U0NDktYThkNC0z NGQ5LTg2YjgtZDdjNjljYjg3OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF56MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3gyoFgB4HbqOzHdIbroHyBAVIQOq3d0sx7bZ5yQJN/ocT0qePOOAqK 3seYG6e8JxtzE5Niqg+9LMYErgDEEeO/1L58OsarOyEyApbdGbLxRQ1vm4bS/grE 4vyjxsENJs3GKjX17lszbwFtLQ+rZdSTZHpLTLSloRWFXWkD0EQqcJytdVKU310+ dKc0CftQWZhL8/lBMDJSSPS5loj50NxpucnGQi2k22ibHqFRDE95DpBY1vT+Imy3 RwEbcAOctJDHt3oH2UKOO8Xg1IZCiR6znJpDmmndY21qsXMw4i+es1JF2lHub91w kVkHGHIkpDG6YRohPTpQGBjhStu4GBE= -----END CERTIFICATE-----Generated at Wed Dec 3 12:04:11 2025 by rpki-client