This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa File: 0baf61e0-eead-323c-b72c-efaab2756610.roa (raw, json) Hash identifier: gv6p+hyLmqMixkb3wfx5hsebJQzFZqT84yDEbKFPukk= Subject key identifier: F6:D7:61:2A:8F:50:17:62:C3:B5:33:A3:CB:AE:B7:35:AB:CA:51:27 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584C470BBD96D6E4410AEA8640C0 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 16433 IP address blocks: 216.20.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:bd:96:d6:e4:41:0a:ea:86:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=7a435d1b-a117-438b-9311-03137204e539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:64:46:3f:66:0f:07:47:8a:2d:54:cd:86:d4: 77:e0:f0:ae:66:df:14:02:48:9f:8d:8f:05:09:30: 3d:d5:b5:4e:37:ca:9f:a2:9c:66:d0:f5:35:45:d7: 1b:9f:95:ff:70:69:cb:4f:85:b3:84:6a:29:e3:7a: 70:da:13:b9:2e:db:f0:5f:fa:e4:85:31:89:6e:a4: 83:ba:a6:e2:84:16:3e:27:f2:ab:21:1d:76:fe:36: 97:b6:89:1e:5b:0a:75:bc:5b:a3:49:19:73:f1:bb: 2d:93:7b:43:24:a9:9a:4f:cd:60:c8:c5:38:02:d3: 38:85:2f:f6:60:03:2c:3c:ac:16:24:af:54:03:8c: 52:c2:f9:b9:c2:39:d8:ca:df:51:c4:5c:9b:0b:e5: a8:86:6b:14:a9:bc:36:03:a4:52:50:03:68:50:58: e7:32:fc:5c:15:a4:91:00:a1:2d:d6:bf:79:06:26: dd:6b:0c:21:4d:00:a9:2c:d1:a4:4b:60:cc:bf:d6: 72:c6:7c:e1:81:d6:64:95:a5:65:c9:87:4c:5b:01: 39:af:a2:eb:32:08:67:19:4f:54:27:31:4a:5f:bb: 50:d6:40:80:5b:fd:9b:c6:f4:0a:69:c2:04:47:18: be:d2:7c:8e:2f:79:a2:a3:3f:52:52:f9:67:54:32: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D7:61:2A:8F:50:17:62:C3:B5:33:A3:CB:AE:B7:35:AB:CA:51:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 216.20.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c2:1c:90:ae:de:83:e0:66:31:f3:2a:64:8e:71:ac:09:5d: 52:a8:0f:2f:b8:28:11:db:d8:27:a3:6d:c3:41:99:d0:60:60: 9f:d0:44:e9:b6:00:2f:96:24:e4:0e:80:a7:ad:63:38:56:86: 11:3f:6e:af:c2:6a:a6:6b:0d:cf:53:0f:a3:ef:04:63:22:69: 3e:0f:2d:70:5c:ae:19:c8:0c:0b:1b:c8:04:8f:91:cf:85:ed: 6f:0f:52:03:4c:20:84:1a:39:11:1b:22:90:90:bb:a8:6b:fe: a2:a0:83:59:f2:6f:dc:c7:59:fd:bf:bf:0c:fc:3a:38:bf:86: 6c:ab:81:3d:23:4b:9d:67:9e:c8:40:0c:96:b1:55:1c:17:bb: d7:db:97:b1:d1:7e:04:ce:a8:e0:6a:32:67:1b:07:5b:eb:42: 2a:87:1d:e3:09:a4:d3:b7:19:9c:78:58:c0:ec:32:20:14:ea: 73:d3:f2:2d:d3:32:52:70:76:c8:8f:c8:5a:38:69:da:d0:53: 47:c2:83:f1:55:83:26:6c:55:ac:15:f8:f4:6d:11:71:41:ef: 87:12:a0:d9:41:f6:19:66:59:ee:10:de:3e:79:95:d7:df:d3: 3a:7e:5e:d5:df:14:3f:05:1f:ca:20:42:60:5d:54:02:67:50: 05:d7:cd:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC72W1uRBCuqGQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk N2E0MzVkMWItYTExNy00MzhiLTkzMTEtMDMxMzcyMDRlNTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2RGP2YPB0eKLVTNhtR34PCuZt8UAkifjY8F CTA91bVON8qfopxm0PU1Rdcbn5X/cGnLT4WzhGop43pw2hO5LtvwX/rkhTGJbqSD uqbihBY+J/KrIR12/jaXtokeWwp1vFujSRlz8bstk3tDJKmaT81gyMU4AtM4hS/2 YAMsPKwWJK9UA4xSwvm5wjnYyt9RxFybC+WohmsUqbw2A6RSUANoUFjnMvxcFaSR AKEt1r95BibdawwhTQCpLNGkS2DMv9ZyxnzhgdZklaVlyYdMWwE5r6LrMghnGU9U JzFKX7tQ1kCAW/2bxvQKacIERxi+0nyOL3mioz9SUvlnVDI+LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbXYSqPUBdiw7Uzo8uutzWrylEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMGJhZjYxZTAtZWVhZC0z MjNjLWI3MmMtZWZhYWIyNzU2NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7CHJCu3oPgZjHzKmSOcawJXVKoDy+4KBHb2CejbcNBmdBgYJ/QROm2 AC+WJOQOgKetYzhWhhE/bq/CaqZrDc9TD6PvBGMiaT4PLXBcrhnIDAsbyASPkc+F 7W8PUgNMIIQaOREbIpCQu6hr/qKgg1nyb9zHWf2/vwz8Oji/hmyrgT0jS51nnshA DJaxVRwXu9fbl7HRfgTOqOBqMmcbB1vrQiqHHeMJpNO3GZx4WMDsMiAU6nPT8i3T MlJwdsiPyFo4adrQU0fCg/FVgyZsVawV+PRtEXFB74cSoNlB9hlmWe4Q3j55ldff 0zp+XtXfFD8FH8ogQmBdVAJnUAXXzZY= -----END CERTIFICATE-----Generated at Tue Dec 30 04:53:40 2025 by rpki-client