This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa File: aff7f59a-de88-3f24-af6f-6932047f3217.roa (raw, json) Hash identifier: OnzpDt79azWJ10LjaxsM9x3sGrNIvhR48D+z4rm8P9o= Subject key identifier: A2:FA:A8:49:7A:08:47:AF:F1:63:18:39:0B:1A:97:59:08:C9:D9:04 Certificate issuer: /CN=18f4eabf-2388-491f-922c-4973961dfd2e Certificate serial: 010D0C9F4328584C391653F198C3876771EC6200 Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 33099 IP address blocks: 23.157.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:53:f1:98:c3:87:67:71:ec:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=1f990e96-334d-4a95-84d2-5f53ceea0023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:62:61:58:87:76:e6:b3:67:48:07:fe:63:90: 5c:35:81:09:15:22:74:42:d8:0d:e7:1c:44:2d:af: d1:39:db:f2:48:36:a0:bf:d2:2c:a5:79:9f:6e:04: f3:cd:55:5c:bf:af:33:0d:00:46:3a:6c:ee:04:ae: a4:5c:b8:11:9d:34:76:17:ea:6e:98:c0:5d:3a:2b: 78:23:2b:15:25:73:9b:44:6d:91:4a:1c:93:aa:70: b6:4b:ef:8c:9c:83:b5:fd:ba:6a:5d:ab:f2:93:18: d1:4f:5c:08:04:91:29:f2:bf:8b:4a:45:47:1c:d4: b5:6e:02:c9:fd:5f:80:73:8f:f1:57:d7:fd:38:7c: fe:3f:26:f6:ff:5f:56:c2:46:0b:f4:91:89:85:ab: e5:17:47:f2:2a:4d:48:8b:e0:0a:19:df:34:68:77: bf:ab:9f:e3:9f:38:06:eb:99:d7:25:09:8d:e3:df: cd:02:a7:fc:1a:36:0c:d7:02:1b:66:63:91:00:48: 74:53:fa:ad:f5:36:53:96:68:55:03:36:9c:d0:9e: d1:e9:e1:40:5d:a3:3f:d6:b8:a0:ef:d2:ea:78:bc: d3:89:7c:d2:71:db:00:c4:9c:c8:be:0a:e9:8f:1c: 8d:d2:28:b9:4b:6c:b4:0a:60:e1:81:ee:a1:a7:30: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FA:A8:49:7A:08:47:AF:F1:63:18:39:0B:1A:97:59:08:C9:D9:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl X509v3 Authority Key Identifier: keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer sbgp-ipAddrBlock: critical IPv4: 23.157.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:96:41:1e:33:fe:28:2d:85:ef:4b:d3:57:3c:65:a8:63:9f: 74:99:9e:c1:ec:7e:95:4e:b4:8d:25:23:67:e7:58:87:eb:e2: 1a:0a:22:8d:83:7c:46:83:7d:40:c5:d5:2b:09:ba:09:59:48: 13:e0:b7:d8:d2:6f:3f:a7:fe:bf:bf:57:b7:30:11:9e:d0:22: 79:be:e5:63:16:aa:38:d3:53:ae:1f:36:98:29:a2:34:e5:8b: 25:c9:ae:f0:43:78:c6:eb:8a:8c:b4:d0:14:25:69:29:7b:85: 3d:01:a4:de:b9:98:ab:16:40:63:39:05:d0:65:81:eb:17:aa: ad:42:50:98:77:61:a9:d5:e0:7a:40:fd:35:dc:95:1d:67:f2: 2a:1c:af:6c:f0:7d:f1:4b:8a:62:56:5d:9e:c2:44:b3:23:a4: b8:25:cf:78:c3:be:33:ef:68:47:19:2a:e5:67:b7:56:14:c4: 50:f4:01:b0:4f:ed:35:6b:7f:f1:7e:ea:77:44:79:e3:7e:40: 48:16:f7:8d:ff:29:49:7c:87:20:c4:d2:f4:fd:74:ce:a4:00: ae:51:62:aa:49:a7:8f:d4:5f:28:25:dc:71:03:b3:94:1b:9c: 30:c4:58:e0:c0:53:e6:cd:a2:33:78:73:f2:04:3c:77:c3:63: 72:5f:de:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FlPxmMOHZ3HsYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThmNGVhYmYtMjM4OC00OTFmLTkyMmMtNDk3Mzk2MWRm ZDJlMB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk MWY5OTBlOTYtMzM0ZC00YTk1LTg0ZDItNWY1M2NlZWEwMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGJhWId25rNnSAf+Y5BcNYEJFSJ0QtgN5xxE La/ROdvySDagv9IspXmfbgTzzVVcv68zDQBGOmzuBK6kXLgRnTR2F+pumMBdOit4 IysVJXObRG2RShyTqnC2S++MnIO1/bpqXavykxjRT1wIBJEp8r+LSkVHHNS1bgLJ /V+Ac4/xV9f9OHz+Pyb2/19WwkYL9JGJhavlF0fyKk1Ii+AKGd80aHe/q5/jnzgG 65nXJQmN49/NAqf8GjYM1wIbZmORAEh0U/qt9TZTlmhVAzac0J7R6eFAXaM/1rig 79LqeLzTiXzScdsAxJzIvgrpjxyN0ii5S2y0CmDhge6hpzADZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKL6qEl6CEev8WMYOQsal1kIydkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0 ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTczOTYxZGZkMmUvYWZmN2Y1OWEtZGU4OC0z ZjI0LWFmNmYtNjkzMjA0N2YzMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMThmNGVhYmYtMjM4OC00OTFmLTky MmMtNDk3Mzk2MWRmZDJlLzE4ZjRlYWJmLTIzODgtNDkxZi05MjJjLTQ5NzM5NjFk ZmQyZS5jcmwwHwYDVR0jBBgwFoAUi40Z0YX62elbBk5pCgw0e2toc/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTcz OTYxZGZkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGWQR4z/igthe9L01c8Zahjn3SZnsHsfpVOtI0lI2fnWIfr4hoKIo2D fEaDfUDF1SsJuglZSBPgt9jSbz+n/r+/V7cwEZ7QInm+5WMWqjjTU64fNpgpojTl iyXJrvBDeMbrioy00BQlaSl7hT0BpN65mKsWQGM5BdBlgesXqq1CUJh3YanV4HpA /TXclR1n8iocr2zwffFLimJWXZ7CRLMjpLglz3jDvjPvaEcZKuVnt1YUxFD0AbBP 7TVrf/F+6ndEeeN+QEgW943/KUl8hyDE0vT9dM6kAK5RYqpJp4/UXygl3HEDs5Qb nDDEWODAU+bNojN4c/IEPHfDY3Jf3sI= -----END CERTIFICATE-----Generated at Sun Dec 21 05:42:04 2025 by rpki-client