This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/ba7d59a3-7fa8-34a6-bdac-f08f1be48f56.roa File: ba7d59a3-7fa8-34a6-bdac-f08f1be48f56.roa (raw, json) Hash identifier: Q9d0QUE9cgrqgknXFeJFScHKrglHIqjwC4AIkCDoZ2M= Subject key identifier: 8E:79:2F:69:F1:EC:16:20:3D:4D:15:B2:4C:61:EF:64:40:CC:53:E9 Certificate issuer: /CN=567c448b-a401-4208-bd87-aee67852522e Certificate serial: 010D0C9F4328584C5EC6D2F947E27845B4BC6980 Authority key identifier: 52:06:E6:0A:BA:F8:AB:DD:36:D0:8B:2A:74:EF:E3:D1:7F:11:16:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/ba7d59a3-7fa8-34a6-bdac-f08f1be48f56.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 19016 IP address blocks: 64.72.199.0/24 maxlen: 24 2606:9e40:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:d2:f9:47:e2:78:45:b4:bc:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=567c448b-a401-4208-bd87-aee67852522e Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=05226d66-edd3-4e88-919d-5449f92797e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:a4:83:92:65:6d:09:67:c9:12:30:07:70: 1e:08:2a:28:e9:b4:98:b1:4f:68:5e:0b:b7:a4:a6: 6e:5b:f9:3b:27:cb:7d:36:67:46:c4:e4:8b:14:ab: 27:fa:3d:88:fb:68:bb:ee:aa:1b:c3:61:a3:4e:af: 4b:36:f1:0d:48:b7:d0:47:f5:67:47:b2:77:10:50: 96:e4:52:4c:4d:56:16:14:bb:99:67:15:77:74:c8: 2e:c1:e1:02:80:99:2c:eb:0c:d7:c4:02:ac:73:69: c3:71:c4:6d:23:05:85:c0:fb:0a:34:c3:43:98:1b: bf:1d:f9:0f:78:f8:2d:17:b2:54:9e:dc:06:4a:bc: a0:79:a9:d8:78:55:5d:af:25:70:0a:19:75:27:a5: e0:01:88:c6:dc:d0:8c:fb:57:07:28:b4:28:22:bd: b3:ee:35:0f:26:64:0e:a3:2e:13:07:76:2d:22:2d: 41:53:5c:81:e6:bb:bd:1e:9d:3f:4d:97:34:73:e1: 7b:1d:70:9a:7e:98:86:67:56:e4:85:e9:3c:1f:d8: 41:88:ab:21:d5:29:d9:6f:97:ef:ad:2a:b8:5f:a5: 9a:5a:22:c9:d8:10:cb:34:8c:53:e1:62:64:10:ba: 41:1c:f1:ff:38:ea:ab:e3:56:45:39:be:74:ad:f4: 5f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:79:2F:69:F1:EC:16:20:3D:4D:15:B2:4C:61:EF:64:40:CC:53:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/ba7d59a3-7fa8-34a6-bdac-f08f1be48f56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e/567c448b-a401-4208-bd87-aee67852522e.crl X509v3 Authority Key Identifier: keyid:52:06:E6:0A:BA:F8:AB:DD:36:D0:8B:2A:74:EF:E3:D1:7F:11:16:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/567c448b-a401-4208-bd87-aee67852522e.cer sbgp-ipAddrBlock: critical IPv4: 64.72.199.0/24 IPv6: 2606:9e40:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:2b:3b:ff:49:fe:96:67:61:5b:7f:10:a9:17:79:58:6a:eb: 96:2a:df:10:01:22:7b:48:bd:08:bd:38:e9:81:a1:a2:71:72: 7d:77:b9:92:53:4a:75:4a:26:55:94:97:04:c9:f6:fb:af:cd: ee:d6:1b:f1:c7:b5:3d:e8:c8:08:30:66:b6:cd:dc:03:91:69: 04:44:86:8e:3a:3c:ec:86:03:13:d6:cb:27:0a:44:1c:c4:bc: 58:a7:b3:b0:6c:a8:a8:59:65:04:18:cb:5b:be:22:95:35:f8: c9:fb:f7:ae:52:07:1b:35:fe:52:d0:f0:6d:1e:c5:2c:fd:fa: 63:4d:ec:44:53:e9:9d:2c:81:62:9a:59:04:5e:fe:a1:f5:1a: 30:b5:f3:ea:db:08:80:63:a4:43:dc:ec:8d:05:ec:53:59:20: 6f:47:e0:4e:20:3e:0c:52:0b:fe:14:6b:52:23:a0:42:89:57: b6:d3:53:19:44:33:1d:0a:44:9f:e3:59:19:97:d0:2e:25:b1: a4:ba:a1:7b:8d:13:20:f9:bb:a6:8c:a1:3b:cf:61:88:e2:19: e2:95:ea:4d:4b:97:30:59:4a:c5:46:34:b2:a5:92:38:80:0b: 05:8d:7c:38:1a:2d:1b:51:da:9f:36:f6:be:0d:2c:58:95:ca: 9c:47:3d:8f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWExextL5R+J4RbS8aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTY3YzQ0OGItYTQwMS00MjA4LWJkODctYWVlNjc4NTI1 MjJlMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk MDUyMjZkNjYtZWRkMy00ZTg4LTkxOWQtNTQ0OWY5Mjc5N2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz+kg5JlbQlnyRIwB3AeCCoo6bSYsU9oXgu3 pKZuW/k7J8t9NmdGxOSLFKsn+j2I+2i77qobw2GjTq9LNvENSLfQR/VnR7J3EFCW 5FJMTVYWFLuZZxV3dMguweECgJks6wzXxAKsc2nDccRtIwWFwPsKNMNDmBu/HfkP ePgtF7JUntwGSrygeanYeFVdryVwChl1J6XgAYjG3NCM+1cHKLQoIr2z7jUPJmQO oy4TB3YtIi1BU1yB5ru9Hp0/TZc0c+F7HXCafpiGZ1bkhek8H9hBiKsh1SnZb5fv rSq4X6WaWiLJ2BDLNIxT4WJkELpBHPH/OOqr41ZFOb50rfRfvwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFI55L2nx7BYgPU0Vskxh72RAzFPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81Njdj NDQ4Yi1hNDAxLTQyMDgtYmQ4Ny1hZWU2Nzg1MjUyMmUvYmE3ZDU5YTMtN2ZhOC0z NGE2LWJkYWMtZjA4ZjFiZTQ4ZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTY3YzQ0OGItYTQwMS00MjA4LWJk ODctYWVlNjc4NTI1MjJlLzU2N2M0NDhiLWE0MDEtNDIwOC1iZDg3LWFlZTY3ODUy NTIyZS5jcmwwHwYDVR0jBBgwFoAUUgbmCrr4q9020IsqdO/j0X8RFi4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81NjdjNDQ4Yi1hNDAxLTQyMDgtYmQ4Ny1hZWU2 Nzg1MjUyMmUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAQEjHMA4E AgACMAgDBgQmBp5AEDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjKzv/Sf6WZ2FbfxCpF3lYauuWKt8QASJ7 SL0IvTjpgaGicXJ9d7mSU0p1SiZVlJcEyfb7r83u1hvxx7U96MgIMGa2zdwDkWkE RIaOOjzshgMT1ssnCkQcxLxYp7OwbKioWWUEGMtbviKVNfjJ+/euUgcbNf5S0PBt HsUs/fpjTexEU+mdLIFimlkEXv6h9RowtfPq2wiAY6RD3OyNBexTWSBvR+BOID4M Ugv+FGtSI6BCiVe201MZRDMdCkSf41kZl9AuJbGkuqF7jRMg+bumjKE7z2GI4hni lepNS5cwWUrFRjSypZI4gAsFjXw4Gi0bUdqfNva+DSxYlcqcRz2P -----END CERTIFICATE-----Generated at Sun Jan 11 08:22:13 2026 by rpki-client