This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa File: ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa (raw, json) Hash identifier: 0uLJ1Wwuwj/nkdJEFce8aBuuG3x4Vpo2r81mPTSvg1k= Subject key identifier: 9A:8C:57:01:95:5C:E8:FD:DA:22:D8:22:35:E5:29:3D:9B:A6:E6:3F Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec Certificate serial: 010D0C9F4328584C2DEB9F6FF2C27F396A26F200 Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa Signing time: Sun 14 Dec 2025 02:00:31 +0000 ROA not before: Sun 14 Dec 2025 02:00:31 +0000 ROA not after: Sat 14 Mar 2026 01:00:31 +0000 asID: 36168 IP address blocks: 23.175.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2d:eb:9f:6f:f2:c2:7f:39:6a:26:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec Validity Not Before: Dec 14 02:00:31 2025 GMT Not After : Mar 14 01:00:31 2026 GMT Subject: CN=bebf441e-46e7-45e5-9299-a9654756b760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:74:7c:26:78:55:14:d8:b9:6b:0c:4c:bc:06: 16:48:7c:b4:ed:91:3d:6c:fa:0c:2d:55:a4:83:b3: e6:1a:f9:c1:34:58:67:26:0d:cd:2d:2e:40:b5:0d: 5d:0a:6a:72:bd:2f:5e:be:02:3a:13:f7:93:d6:67: cc:96:32:27:c7:34:a0:f5:c7:6c:fa:f0:10:68:e3: 1f:0f:99:8c:1e:ca:c3:1f:1c:23:5b:63:4b:f6:e3: ea:fb:ef:a8:6b:3e:f9:91:dc:6c:aa:3a:35:7f:5c: 3a:6c:cd:f9:47:77:89:bf:3e:2f:30:a2:cd:68:96: 09:97:18:78:1e:9d:c9:9b:8d:0c:3d:63:a6:f7:b6: 77:1d:d4:dd:20:8d:3f:45:4f:86:fd:2c:95:1b:d1: eb:25:cc:97:8c:02:28:37:e9:ca:90:c1:97:33:3f: 03:b8:9e:e0:57:0e:fa:a6:6f:f9:5a:23:3e:78:37: cd:b9:84:1b:e5:c4:0a:ae:7e:cf:c3:88:ea:d2:d5: 46:bf:cf:57:ae:7f:54:3c:f1:8e:ea:4a:fd:ed:c6: 3e:22:9f:b3:b4:bc:8e:0d:2b:28:39:ae:01:b8:7c: 08:4d:22:79:1f:cb:2d:43:0d:35:b3:e9:80:d5:40: 37:ee:47:4e:6f:02:54:37:cc:03:fa:28:90:51:6f: 51:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8C:57:01:95:5C:E8:FD:DA:22:D8:22:35:E5:29:3D:9B:A6:E6:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl X509v3 Authority Key Identifier: keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer sbgp-ipAddrBlock: critical IPv4: 23.175.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:62:d6:ef:4a:b8:63:6a:37:1c:32:9f:1b:ec:70:e1:e2:39: 5c:c2:28:bb:f7:00:52:d1:80:8e:c1:13:d6:1a:c1:4b:26:51: c4:4a:90:51:ca:8f:0f:14:16:ab:87:ce:fd:de:44:05:63:61: f2:ff:28:87:fb:30:5c:f9:43:3d:57:96:a3:93:21:33:87:0d: bb:9b:8e:8b:2b:1e:12:20:fc:b0:81:dd:a5:7a:25:e7:fb:d2: 0f:38:9f:e2:82:04:84:66:ac:35:f8:90:7f:50:58:20:ea:d7: 40:69:ea:20:93:0e:f4:56:6a:ba:dd:b3:5d:4a:77:e5:cd:ef: 61:b1:a1:83:0d:2b:4f:a9:f3:3c:36:d8:aa:f0:18:fa:1e:c1: 93:0d:9e:97:77:cd:92:ce:13:8a:c4:49:6e:e0:40:ae:22:af: f4:e2:b8:3c:0b:97:77:40:61:69:d3:91:38:75:6b:09:5a:95: c1:de:d4:2b:37:7f:c0:ad:fd:42:18:14:f6:70:4c:95:16:1e: 5c:0a:bf:c0:66:9e:e2:44:ae:ff:f1:2d:4b:5b:57:94:67:83: ec:45:08:59:68:48:dd:2e:df:aa:81:dd:ba:74:fc:d9:44:ce: 94:47:38:e7:fd:cb:db:ce:cf:6b:c5:70:66:04:5e:fe:1d:2c: f9:1b:4b:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwt659v8sJ/OWom8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3 N2VjMB4XDTI1MTIxNDAyMDAzMVoXDTI2MDMxNDAxMDAzMVowLzEtMCsGA1UEAxMk YmViZjQ0MWUtNDZlNy00NWU1LTkyOTktYTk2NTQ3NTZiNzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXR8JnhVFNi5awxMvAYWSHy07ZE9bPoMLVWk g7PmGvnBNFhnJg3NLS5AtQ1dCmpyvS9evgI6E/eT1mfMljInxzSg9cds+vAQaOMf D5mMHsrDHxwjW2NL9uPq+++oaz75kdxsqjo1f1w6bM35R3eJvz4vMKLNaJYJlxh4 Hp3Jm40MPWOm97Z3HdTdII0/RU+G/SyVG9HrJcyXjAIoN+nKkMGXMz8DuJ7gVw76 pm/5WiM+eDfNuYQb5cQKrn7Pw4jq0tVGv89Xrn9UPPGO6kr97cY+Ip+ztLyODSso Oa4BuHwITSJ5H8stQw01s+mA1UA37kdObwJUN8wD+iiQUW9RtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqMVwGVXOj92iLYIjXlKT2bpuY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3 MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvZWJmNGExNjctNmM3My0z ZWRkLWFmNDUtMjNkNTNjMWZmMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3 NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx YTdmNzc3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF694MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVi1u9KuGNqNxwynxvscOHiOVzCKLv3AFLRgI7BE9YawUsmUcRKkFHK jw8UFquHzv3eRAVjYfL/KIf7MFz5Qz1XlqOTITOHDbubjosrHhIg/LCB3aV6Jef7 0g84n+KCBIRmrDX4kH9QWCDq10Bp6iCTDvRWarrds11Kd+XN72GxoYMNK0+p8zw2 2KrwGPoewZMNnpd3zZLOE4rESW7gQK4ir/TiuDwLl3dAYWnTkTh1awlalcHe1Cs3 f8Ct/UIYFPZwTJUWHlwKv8BmnuJErv/xLUtbV5Rng+xFCFloSN0u36qB3bp0/NlE zpRHOOf9y9vOz2vFcGYEXv4dLPkbS1U= -----END CERTIFICATE-----Generated at Wed Dec 24 04:03:51 2025 by rpki-client