This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba671c78-4106-37ca-a8e1-17c081241a83.roa File: ba671c78-4106-37ca-a8e1-17c081241a83.roa (raw, json) Hash identifier: PyfpP4uIbf9km3On9WX9dVKeEgnuMs9gapJJEETqeOY= Subject key identifier: 4C:85:71:F1:89:F3:07:CD:49:8C:2C:12:A7:A5:D0:C5:A3:5F:8C:BE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C575B336D5101C284C7D88180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba671c78-4106-37ca-a8e1-17c081241a83.roa Signing time: Sun 28 Dec 2025 22:13:43 +0000 ROA not before: Sun 28 Dec 2025 22:13:43 +0000 ROA not after: Sat 28 Mar 2026 21:13:43 +0000 asID: 7029 IP address blocks: 65.86.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:57:5b:33:6d:51:01:c2:84:c7:d8:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Dec 28 22:13:43 2025 GMT Not After : Mar 28 21:13:43 2026 GMT Subject: CN=c98639b0-5de9-4ac2-b3fc-4899a3662a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:43:e0:60:bf:a6:f0:06:6d:0f:bd:e7:f2: 2c:11:c2:ae:49:16:da:81:1a:d3:c2:ef:6b:90:0b: c9:fc:e9:f4:91:bb:e5:9e:47:64:b2:38:a0:55:1c: 58:08:16:09:f5:df:fd:d9:d7:5e:29:15:38:4d:36: b3:d2:9d:9e:78:08:d1:25:7b:7a:da:59:6e:d0:d6: d3:ba:b9:18:73:0f:4a:21:31:a7:2c:9a:7f:46:ad: 71:20:20:b1:fc:29:83:6c:bb:ca:72:45:d9:f2:85: 61:b4:eb:4f:3f:b6:e7:a2:ff:b7:04:3c:a9:a3:f0: b3:45:4d:41:7f:52:e7:8f:1e:78:41:05:83:b5:fd: 65:d9:99:ea:9d:67:c5:7e:27:21:ce:05:ae:45:47: b1:bb:dd:1a:73:ec:5d:9c:05:9d:0f:b1:95:e7:a8: 50:92:b7:ab:fd:db:fd:39:33:41:ed:da:6e:b2:4f: a3:60:05:d4:54:62:2f:ff:6e:d0:ec:77:aa:6c:1b: ca:1b:03:53:35:7b:f9:00:2e:05:55:50:75:de:a3: 42:1f:59:66:c7:f7:c5:39:4d:3c:18:bc:2a:07:b1: 7f:d0:d4:46:d7:fe:ee:50:15:52:eb:65:d1:80:a3: 61:d6:a0:01:49:d4:39:b9:35:eb:96:8c:89:24:c3: 33:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:85:71:F1:89:F3:07:CD:49:8C:2C:12:A7:A5:D0:C5:A3:5F:8C:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ba671c78-4106-37ca-a8e1-17c081241a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 65.86.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:1a:5d:92:15:d5:76:f5:73:ee:18:eb:6d:75:a8:a2:17:ea: d5:3f:42:54:33:e9:74:4a:33:84:39:e6:62:f4:20:4d:94:6a: c1:a1:16:8e:21:55:8a:d2:f9:06:62:eb:a6:03:8f:23:91:96: a8:ed:a0:f8:91:47:10:4b:36:18:d7:50:f3:f5:35:a2:1b:30: e0:be:3b:2e:44:59:67:36:f6:f8:f6:b7:60:b2:eb:b9:ed:e4: 03:8e:f8:17:71:9f:ae:ab:65:7d:9c:cb:99:cd:92:65:fe:c0: ca:ae:54:2a:4a:55:b8:a9:0c:5f:0f:6b:5c:50:84:0b:5a:a3: 8a:96:c7:3c:fb:b0:c3:ce:0e:48:e2:32:15:a7:fb:1d:38:ed: 8a:9c:0f:a2:dd:c5:a9:77:ae:7c:ed:f9:c5:c2:f6:41:b2:eb: b7:3b:a0:4e:3c:03:6c:ab:89:8e:9c:90:6a:6e:e1:c8:dd:5d: e5:86:8b:58:e9:25:16:50:23:0e:3e:39:0e:38:19:e9:64:2e: e2:9e:5f:3b:ef:f9:74:f3:5c:05:77:76:37:5d:fb:ce:eb:7c: 6d:2d:97:88:c1:52:7d:f7:ab:22:06:64:04:e4:5e:5f:b7:4d: ac:02:0a:b5:0c:5d:89:05:fb:ad:da:27:90:98:36:65:01:e6: a1:08:bf:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExXWzNtUQHChMfYgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTIyODIyMTM0M1oXDTI2MDMyODIxMTM0M1owLzEtMCsGA1UEAxMk Yzk4NjM5YjAtNWRlOS00YWMyLWIzZmMtNDg5OWEzNjYyYTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpdD4GC/pvAGbQ+95/IsEcKuSRbagRrTwu9r kAvJ/On0kbvlnkdksjigVRxYCBYJ9d/92ddeKRU4TTaz0p2eeAjRJXt62llu0NbT urkYcw9KITGnLJp/Rq1xICCx/CmDbLvKckXZ8oVhtOtPP7bnov+3BDypo/CzRU1B f1Lnjx54QQWDtf1l2ZnqnWfFfichzgWuRUexu90ac+xdnAWdD7GV56hQkrer/dv9 OTNB7dpusk+jYAXUVGIv/27Q7HeqbBvKGwNTNXv5AC4FVVB13qNCH1lmx/fFOU08 GLwqB7F/0NRG1/7uUBVS62XRgKNh1qABSdQ5uTXrloyJJMMzZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyFcfGJ8wfNSYwsEqel0MWjX4y+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmE2NzFjNzgtNDEwNi0z N2NhLWE4ZTEtMTdjMDgxMjQxYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQVYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAaXZIV1Xb1c+4Y6211qKIX6tU/QlQz6XRKM4Q55mL0IE2UasGhFo4h VYrS+QZi66YDjyORlqjtoPiRRxBLNhjXUPP1NaIbMOC+Oy5EWWc29vj2t2Cy67nt 5AOO+Bdxn66rZX2cy5nNkmX+wMquVCpKVbipDF8Pa1xQhAtao4qWxzz7sMPODkji MhWn+x047YqcD6Ldxal3rnzt+cXC9kGy67c7oE48A2yriY6ckGpu4cjdXeWGi1jp JRZQIw4+OQ44GelkLuKeXzvv+XTzXAV3djdd+87rfG0tl4jBUn33qyIGZATkXl+3 TawCCrUMXYkF+63aJ5CYNmUB5qEIv/s= -----END CERTIFICATE-----Generated at Sat Jan 10 04:20:38 2026 by rpki-client