This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/f218d0fa-4c56-3887-a658-b8c8d1b0acb6.roa File: f218d0fa-4c56-3887-a658-b8c8d1b0acb6.roa (raw, json) Hash identifier: kQXM8TU0+EvtX2aa4mVVChqcrgOGTbVV+LMAaDS1dLs= Subject key identifier: FC:C7:C2:A1:EC:00:07:CB:99:AF:14:6A:D7:1B:B9:30:A2:AB:90:FB Certificate issuer: /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Certificate serial: 010D0C9F4328584C401113E7680E87F30E6A4780 Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/f218d0fa-4c56-3887-a658-b8c8d1b0acb6.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 401297 IP address blocks: 23.142.88.0/24 maxlen: 24 23.142.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:13:e7:68:0e:87:f3:0e:6a:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=65f798e6-edfd-4dab-8351-ad96f96bd229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:98:0e:e0:21:2d:68:27:04:64:29:91:d4:78: 10:a0:62:4c:69:30:8d:20:8d:8f:03:fc:31:fe:ae: e7:56:8c:38:99:45:df:86:1e:b4:66:99:bf:ea:ff: 00:38:1b:e6:8e:00:b7:58:16:5e:c2:6c:9f:42:a0: 5e:d1:55:f2:0b:1a:95:2e:6b:73:b4:fc:2b:0b:31: 32:bf:a6:ad:90:b6:d0:19:4f:60:a0:01:25:7f:b1: e4:6c:1e:d2:51:41:b1:07:6e:ca:6a:90:84:04:1c: f5:a3:da:16:a8:27:8c:47:d6:36:0e:2c:47:31:83: 88:d0:d0:ac:c7:a5:e2:ce:08:73:ba:b9:13:a7:39: 1e:78:5e:66:67:67:d7:55:eb:a5:99:0f:ab:a1:07: db:46:22:dc:67:74:6e:79:42:bf:97:ea:32:bf:ba: 26:a5:d4:f3:af:1b:76:e3:fb:f1:22:b6:e0:bc:86: 42:a3:14:8b:47:cc:5f:42:a9:db:17:0f:f3:43:b9: a4:02:dc:69:92:3f:d7:9d:3d:e5:29:10:72:03:14: 6d:e5:4f:e1:71:59:e0:fe:9d:68:45:cf:63:55:a9: 27:e8:0f:f2:f4:26:49:ba:fc:b2:39:2b:f6:9d:d9: 8d:1c:24:14:75:c9:30:ba:e4:61:b8:c4:5e:ac:7f: e9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C7:C2:A1:EC:00:07:CB:99:AF:14:6A:D7:1B:B9:30:A2:AB:90:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/f218d0fa-4c56-3887-a658-b8c8d1b0acb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl X509v3 Authority Key Identifier: keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer sbgp-ipAddrBlock: critical IPv4: 23.142.88.0/24 23.142.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1b:f9:5c:64:32:ff:dc:f8:76:08:e6:91:26:88:13:e6:94: ea:ff:68:fb:2a:a4:d2:74:a8:02:0d:9c:8d:88:b7:0c:8b:a7: 5a:3e:95:18:c0:16:74:c1:d1:3c:90:03:46:41:48:92:4a:16: 53:98:76:49:ac:e5:05:77:03:f2:bd:94:50:4e:69:ad:28:d2: 9d:37:ec:7b:68:19:be:1b:d2:c4:15:5e:74:52:5f:63:90:0d: 98:06:3d:9d:0a:78:9a:3e:a6:a6:d8:25:e8:99:37:d8:4b:3a: 61:62:44:6b:f5:32:bc:3e:29:25:a4:12:b2:91:64:06:9e:99: 09:fb:86:89:b5:55:7a:8c:c7:54:6a:d7:22:f0:54:a4:84:4f: 36:03:93:eb:c7:2f:4e:7b:ae:a3:79:87:59:c9:c0:f6:c4:0f: e5:6a:8b:93:77:45:83:b9:f1:32:f2:df:e3:39:92:48:8d:55: 7d:03:12:65:8c:75:ea:51:bb:f1:f5:0c:29:ab:64:88:de:2c: 61:26:c7:e8:8e:0e:2a:ae:23:09:27:eb:db:26:bf:db:35:d1: e1:99:53:13:4b:f5:df:04:7b:4f:99:57:a9:e4:fa:27:d8:5b: 20:48:4d:e0:1e:39:23:d6:04:ef:25:27:2f:6c:79:e4:3d:14: 01:53:e4:15 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWExAERPnaA6H8w5qR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIwYzU3MGEtNTQ0Ni00NGE2LWI1MWYtYTc1YzJmM2Fh NjIxMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk NjVmNzk4ZTYtZWRmZC00ZGFiLTgzNTEtYWQ5NmY5NmJkMjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZgO4CEtaCcEZCmR1HgQoGJMaTCNII2PA/wx /q7nVow4mUXfhh60Zpm/6v8AOBvmjgC3WBZewmyfQqBe0VXyCxqVLmtztPwrCzEy v6atkLbQGU9goAElf7HkbB7SUUGxB27KapCEBBz1o9oWqCeMR9Y2DixHMYOI0NCs x6XizghzurkTpzkeeF5mZ2fXVeulmQ+roQfbRiLcZ3RueUK/l+oyv7ompdTzrxt2 4/vxIrbgvIZCoxSLR8xfQqnbFw/zQ7mkAtxpkj/XnT3lKRByAxRt5U/hcVng/p1o Rc9jVakn6A/y9CZJuvyyOSv2ndmNHCQUdckwuuRhuMRerH/pjQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPzHwqHsAAfLma8UatcbuTCiq5D7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBj NTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVjMmYzYWE2MjEvZjIxOGQwZmEtNGM1Ni0z ODg3LWE2NTgtYjhjOGQxYjBhY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGIwYzU3MGEtNTQ0Ni00NGE2LWI1 MWYtYTc1YzJmM2FhNjIxLzhiMGM1NzBhLTU0NDYtNDRhNi1iNTFmLWE3NWMyZjNh YTYyMS5jcmwwHwYDVR0jBBgwFoAUQKvgol6yqPEM4lDzkshTGXtnEoswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBjNTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVj MmYzYWE2MjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF45YAwQA F45aMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH8b+VxkMv/c+HYI5pEmiBPmlOr/aPsqpNJ0qAINnI2ItwyL p1o+lRjAFnTB0TyQA0ZBSJJKFlOYdkms5QV3A/K9lFBOaa0o0p037HtoGb4b0sQV XnRSX2OQDZgGPZ0KeJo+pqbYJeiZN9hLOmFiRGv1Mrw+KSWkErKRZAaemQn7hom1 VXqMx1Rq1yLwVKSETzYDk+vHL057rqN5h1nJwPbED+Vqi5N3RYO58TLy3+M5kkiN VX0DEmWMdepRu/H1DCmrZIjeLGEmx+iODiquIwkn69smv9s10eGZUxNL9d8Ee0+Z V6nk+ifYWyBITeAeOSPWBO8lJy9seeQ9FAFT5BU= -----END CERTIFICATE-----Generated at Sat Dec 20 22:31:20 2025 by rpki-client