This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa File: 2dfe31c7-54ee-3017-8637-ce67fd53b424.roa (raw, json) Hash identifier: 1XVI3LRIHOex+rim0WJe9BCIrjhpu8K+MnfMWbHgmXA= Subject key identifier: D8:C7:C1:8B:C4:46:C7:52:79:06:50:FE:3B:6B:3E:56:E4:42:60:FE Certificate issuer: /CN=70379220-49c0-45f2-94d3-098a72b1db54 Certificate serial: 010D0C9F4328584C41767DF25370AA6F51164740 Authority key identifier: DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 400656 IP address blocks: 23.135.152.0/23 maxlen: 23 2606:cb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:7d:f2:53:70:aa:6f:51:16:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70379220-49c0-45f2-94d3-098a72b1db54 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=215df7e6-1d85-405f-b53a-953f9f9a212c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d8:60:1c:32:39:12:72:c4:33:8e:06:1b:36: 6c:d9:82:16:40:7e:f5:b9:7c:65:a2:6e:0a:43:9d: 14:f7:55:f1:e2:fe:bf:ca:04:e6:2f:89:28:81:f4: a4:d8:32:fc:ac:d9:ad:bf:57:a8:e1:b5:e2:77:49: d2:ea:b6:cd:b0:4c:48:ce:d0:af:bd:fc:ee:b8:92: 5d:2b:86:93:d6:d8:ef:2e:3a:52:ce:95:67:8c:55: 90:e2:43:76:25:25:d0:bc:46:d8:5a:e3:9d:05:22: 43:a3:74:97:17:30:bc:cd:c4:91:48:75:3d:cf:7e: 77:86:b2:7c:92:56:b1:97:77:90:40:61:4b:40:e5: 97:86:79:bf:a4:2a:ef:b5:de:c9:6d:86:c3:f1:7d: a3:27:9a:7d:2f:68:68:85:a4:4f:7e:67:30:b3:a0: 95:13:6e:d4:e5:fb:fa:52:61:81:b4:5b:56:2e:9e: fc:cf:eb:3b:9b:9a:86:3a:57:e5:58:7d:b2:ac:8a: d4:bf:2b:59:ef:f8:55:3a:f8:93:f2:69:21:f0:fa: 46:57:d6:d4:42:30:d1:99:c2:29:f0:9d:4c:0b:23: 89:4f:29:78:61:56:70:bb:f0:0b:9e:93:65:f3:73: f5:9f:70:09:1c:95:28:11:94:1c:fc:2a:a4:ce:7e: fe:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C7:C1:8B:C4:46:C7:52:79:06:50:FE:3B:6B:3E:56:E4:42:60:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl X509v3 Authority Key Identifier: keyid:DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer sbgp-ipAddrBlock: critical IPv4: 23.135.152.0/23 IPv6: 2606:cb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6f:3b:26:ea:a8:8b:bb:96:4b:4a:12:72:4f:c0:97:61:f0: 6f:7b:f9:88:37:d7:44:a5:69:2d:b1:e5:62:28:c9:a8:59:96: 8b:bd:15:c8:60:bc:54:1c:a2:ed:50:66:6d:ab:89:f1:33:08: ae:c9:1d:93:df:50:8f:00:71:38:8b:b6:81:2b:7d:64:5e:2a: 5b:9e:56:be:89:bb:c0:80:bc:c9:68:95:e8:0e:ef:b0:1a:42: 06:03:d6:d5:a1:7f:fa:e4:39:02:66:07:47:07:77:eb:da:a5: f2:95:c6:90:ec:42:13:6f:bc:2e:4e:d0:d0:00:de:08:bf:35: 7d:6b:2f:11:f8:f1:e3:d5:e5:5d:14:f4:98:0b:83:69:db:44: 57:bc:2e:a6:d7:27:71:38:99:1e:8b:c2:fc:ea:8d:92:18:c7: 0a:76:c1:20:34:ab:e3:c9:b7:bb:54:81:10:4b:cd:de:26:9c: 06:ed:42:8d:55:eb:cc:48:b7:1a:38:d3:e0:21:42:9e:d9:d6: 1e:63:c3:ca:16:ef:b4:8a:80:fd:1a:8d:6b:fc:e1:0f:c5:4b: 7e:16:91:60:e1:58:60:b3:58:47:a7:f0:de:e0:46:35:35:4b: 4d:75:4b:a5:1e:a5:03:2b:ed:1c:30:ed:61:37:c2:09:c9:9b: 08:a1:c0:56 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWExBdn3yU3Cqb1EWR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAzNzkyMjAtNDljMC00NWYyLTk0ZDMtMDk4YTcyYjFk YjU0MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk MjE1ZGY3ZTYtMWQ4NS00MDVmLWI1M2EtOTUzZjlmOWEyMTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldhgHDI5EnLEM44GGzZs2YIWQH71uXxlom4K Q50U91Xx4v6/ygTmL4kogfSk2DL8rNmtv1eo4bXid0nS6rbNsExIztCvvfzuuJJd K4aT1tjvLjpSzpVnjFWQ4kN2JSXQvEbYWuOdBSJDo3SXFzC8zcSRSHU9z353hrJ8 klaxl3eQQGFLQOWXhnm/pCrvtd7JbYbD8X2jJ5p9L2hohaRPfmcws6CVE27U5fv6 UmGBtFtWLp78z+s7m5qGOlflWH2yrIrUvytZ7/hVOviT8mkh8PpGV9bUQjDRmcIp 8J1MCyOJTyl4YVZwu/ALnpNl83P1n3AJHJUoEZQc/Cqkzn7+/wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFNjHwYvERsdSeQZQ/jtrPlbkQmD+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3 OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThhNzJiMWRiNTQvMmRmZTMxYzctNTRlZS0z MDE3LTg2MzctY2U2N2ZkNTNiNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAzNzkyMjAtNDljMC00NWYyLTk0 ZDMtMDk4YTcyYjFkYjU0LzcwMzc5MjIwLTQ5YzAtNDVmMi05NGQzLTA5OGE3MmIx ZGI1NC5jcmwwHwYDVR0jBBgwFoAU3q5bWRaliGQ0JyA74aCcXmn7V70wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThh NzJiMWRiNTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBF4eYMA0E AgACMAcDBQAmBstAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADhvOybqqIu7lktKEnJPwJdh8G97+Yg310Sl aS2x5WIoyahZlou9FchgvFQcou1QZm2rifEzCK7JHZPfUI8AcTiLtoErfWReKlue Vr6Ju8CAvMlolegO77AaQgYD1tWhf/rkOQJmB0cHd+vapfKVxpDsQhNvvC5O0NAA 3gi/NX1rLxH48ePV5V0U9JgLg2nbRFe8LqbXJ3E4mR6LwvzqjZIYxwp2wSA0q+PJ t7tUgRBLzd4mnAbtQo1V68xItxo40+AhQp7Z1h5jw8oW77SKgP0ajWv84Q/FS34W kWDhWGCzWEen8N7gRjU1S011S6UepQMr7Rww7WE3wgnJmwihwFY= -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:41 2025 by rpki-client