This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa File: 0bae7820-559d-38ce-bc60-e8ef8a792915.roa (raw, json) Hash identifier: qnH3G86Kxjkz76xky77QcVhyNEcak0vqLrGQBMrLRbc= Subject key identifier: 1C:CF:CB:BA:56:70:C0:79:22:FA:79:6C:D0:4D:00:A5:26:89:60:E7 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584BD5FB0F6D5F532F82D2FC4500 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 14618 IP address blocks: 216.9.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:0f:6d:5f:53:2f:82:d2:fc:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=be6a0ebb-eb81-44f5-893a-33a75f787a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:8f:4e:52:79:44:34:f1:09:f2:25:a3:b9: e9:51:bc:b1:59:57:4f:6f:f8:09:17:8b:2a:d3:a6: 5b:02:c4:8d:20:48:08:af:09:0c:8a:8d:f6:5c:5d: 28:e1:84:8d:84:b1:22:96:9a:5d:1c:89:4a:8f:c9: b8:32:89:5f:80:22:8d:a3:4d:56:16:bd:70:29:2a: 73:c1:c1:eb:96:83:01:41:f3:9f:c3:6a:d7:98:57: c9:9b:62:73:38:64:14:c4:ab:5f:e5:2f:0d:7b:5a: ea:22:76:77:4f:4b:bb:56:94:a0:2a:12:62:69:38: c4:55:5d:d3:27:52:13:b7:07:eb:8b:6c:6c:a1:43: bf:33:e3:e0:2c:65:7e:e4:48:1f:f0:11:0c:f9:49: b0:4f:7d:c7:7c:30:de:f9:54:b2:85:49:12:15:4f: ac:2f:8a:c8:79:0d:8f:0b:5a:47:a6:25:71:92:91: 2d:5f:3d:0f:21:53:ca:71:f5:63:ab:2c:5d:fe:6e: ef:dd:60:ec:32:ef:f7:6a:87:c8:e1:51:58:f4:eb: c8:6e:40:a2:95:3f:a3:9c:69:5e:4f:c9:a0:94:6d: 47:b7:6b:7e:14:0e:46:ab:9b:0e:13:99:40:40:48: 21:5f:a7:70:48:d3:79:c1:08:c0:10:6f:6a:ec:40: 23:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CF:CB:BA:56:70:C0:79:22:FA:79:6C:D0:4D:00:A5:26:89:60:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 216.9.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:7c:aa:61:fc:be:a5:32:c4:f2:d6:70:d6:ac:48:76:b1:b7: 9e:7d:d7:8c:97:6a:8b:a9:3f:26:eb:8b:9c:dc:1f:d6:f6:8e: 90:0c:49:ce:1d:cd:9e:c7:b1:91:b8:6b:a9:92:d5:6f:44:54: 43:7c:53:33:bf:9c:95:12:94:3e:ce:70:00:b7:73:34:a6:19: ad:cc:ef:14:4f:24:1f:12:a1:46:64:76:d8:e5:5d:81:02:a2: 9b:01:e0:fd:5d:00:bc:f8:9b:36:4f:f7:fc:c6:da:fd:f7:13: ec:a7:77:30:49:9e:a4:42:41:f1:e2:2d:6e:89:1b:54:97:67: 70:0b:aa:48:a9:c0:18:e6:1f:19:2c:a6:b1:f2:25:48:4d:42: 39:3d:96:46:5a:b1:ea:94:c8:e6:3f:54:a3:fa:f6:9d:89:46: de:73:60:14:1e:16:fa:26:41:c7:13:0f:a9:b4:09:a6:b9:ad: 46:f3:f8:81:69:14:fd:15:3d:dc:a5:89:bd:11:5c:57:e8:a7: 63:16:87:9a:06:08:84:47:a3:57:54:dd:88:aa:f1:5b:88:3b: d4:e0:62:be:6d:a8:8b:0a:84:c6:a0:57:23:53:89:f4:e5:aa: d9:06:a0:44:f4:34:e6:a8:1c:e6:4b:30:0c:34:25:f2:9b:c7: 17:9e:9d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+w9tX1MvgtL8RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk YmU2YTBlYmItZWI4MS00NGY1LTg5M2EtMzNhNzVmNzg3YTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ+PTlJ5RDTxCfIlo7npUbyxWVdPb/gJF4sq 06ZbAsSNIEgIrwkMio32XF0o4YSNhLEilppdHIlKj8m4MolfgCKNo01WFr1wKSpz wcHrloMBQfOfw2rXmFfJm2JzOGQUxKtf5S8Ne1rqInZ3T0u7VpSgKhJiaTjEVV3T J1ITtwfri2xsoUO/M+PgLGV+5Egf8BEM+UmwT33HfDDe+VSyhUkSFU+sL4rIeQ2P C1pHpiVxkpEtXz0PIVPKcfVjqyxd/m7v3WDsMu/3aofI4VFY9OvIbkCilT+jnGle T8mglG1Ht2t+FA5Gq5sOE5lAQEghX6dwSNN5wQjAEG9q7EAjhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzPy7pWcMB5Ivp5bNBNAKUmiWDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvMGJhZTc4MjAtNTU5ZC0z OGNlLWJjNjAtZThlZjhhNzkyOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ8qmH8vqUyxPLWcNasSHaxt55914yXaoupPybri5zcH9b2jpAMSc4d zZ7HsZG4a6mS1W9EVEN8UzO/nJUSlD7OcAC3czSmGa3M7xRPJB8SoUZkdtjlXYEC opsB4P1dALz4mzZP9/zG2v33E+yndzBJnqRCQfHiLW6JG1SXZ3ALqkipwBjmHxks prHyJUhNQjk9lkZaseqUyOY/VKP69p2JRt5zYBQeFvomQccTD6m0Caa5rUbz+IFp FP0VPdylib0RXFfop2MWh5oGCIRHo1dU3Yiq8VuIO9TgYr5tqIsKhMagVyNTifTl qtkGoET0NOaoHOZLMAw0JfKbxxeenQo= -----END CERTIFICATE-----Generated at Sat Nov 22 21:39:55 2025 by rpki-client