This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/de1128f6-2454-37c2-9ef2-9471ef36bf4f.roa File: de1128f6-2454-37c2-9ef2-9471ef36bf4f.roa (raw, json) Hash identifier: qOfkbnqL9zdDDK1V+dkoYoqS9d2LNE1r5jg85QRxeF8= Subject key identifier: 30:A1:DF:1C:68:2E:B8:F7:62:3E:47:25:98:5F:FA:2B:09:70:29:BC Certificate issuer: /CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Certificate serial: 010D0C9F4328584C34E64CF9741635873416FC20 Authority key identifier: 02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/de1128f6-2454-37c2-9ef2-9471ef36bf4f.roa Signing time: Tue 16 Dec 2025 14:00:38 +0000 ROA not before: Tue 16 Dec 2025 14:00:38 +0000 ROA not after: Mon 16 Mar 2026 13:00:38 +0000 asID: 7018 IP address blocks: 23.128.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:34:e6:4c:f9:74:16:35:87:34:16:fc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Validity Not Before: Dec 16 14:00:38 2025 GMT Not After : Mar 16 13:00:38 2026 GMT Subject: CN=bff02a9e-b0af-4f1a-9e84-2fa0faca94d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:37:f8:c7:b5:c0:52:df:11:ed:a4:59:5c: 4a:00:4b:86:bb:ca:d8:fc:21:52:49:f1:2f:6c:c1: b1:69:a0:67:3a:95:03:2b:61:f6:0b:db:8b:0b:ab: 98:1a:59:e8:09:51:61:a3:5a:d0:f6:ac:8e:17:83: 72:86:18:40:bb:15:c9:63:c9:74:0b:03:81:68:8f: 53:47:aa:db:ef:9b:77:23:38:0a:f3:a5:68:e3:03: af:07:7f:d0:75:42:f2:48:33:93:31:24:de:ad:b7: 06:70:00:26:8b:b1:c2:a0:af:f8:f1:71:6a:6b:1c: 9d:1f:75:67:87:89:6e:2d:f6:8e:15:58:de:b3:4c: b5:e6:af:81:46:19:3f:56:9a:ad:e2:bf:7c:93:2d: 0d:f7:2c:76:87:6a:72:39:c9:fc:6f:70:45:87:92: f2:a0:19:ca:d9:af:68:9e:26:06:0a:fe:13:87:a0: 89:e4:ef:7e:46:db:8d:90:6d:b5:87:79:37:d2:fe: d0:b6:8b:41:d1:75:b9:df:1f:f8:14:1e:45:b7:a2: 77:d9:dd:d2:c3:e3:33:e1:4c:0e:c3:78:2b:8f:54: 17:2c:70:2c:e0:b4:7e:20:c4:7e:a4:3b:42:7f:12: c2:5e:be:7c:49:c0:f2:87:f8:5f:46:da:9a:7d:40: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A1:DF:1C:68:2E:B8:F7:62:3E:47:25:98:5F:FA:2B:09:70:29:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/de1128f6-2454-37c2-9ef2-9471ef36bf4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl X509v3 Authority Key Identifier: keyid:02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer sbgp-ipAddrBlock: critical IPv4: 23.128.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:46:b2:6f:fc:e5:79:9e:82:2f:f0:0d:f1:02:4f:92:94:44: d9:b3:71:83:38:26:97:31:22:95:77:66:f8:99:5e:c0:22:dd: 48:ca:ae:81:03:0c:46:3e:2f:5d:43:2c:6f:d4:d6:94:a4:9c: fb:c2:58:f7:28:61:fe:5d:37:49:d7:14:2d:55:46:ec:fc:bb: a6:ef:75:e8:30:97:9b:0f:ab:82:69:48:05:e3:65:77:7f:16: a2:a9:a6:2a:6c:08:12:22:94:ed:25:91:53:25:48:ac:06:7a: be:ed:7a:aa:2c:65:fa:23:46:f4:77:45:31:7e:bd:40:28:b3: 8c:7a:da:d2:45:ec:d8:0c:b9:5c:e2:d2:2e:f9:f7:a0:8d:e6: 6a:f1:b9:1f:c7:f2:5e:59:43:c6:c1:8d:6b:6c:bf:44:4f:11: 19:39:9b:5a:64:64:7c:5c:e7:a0:85:d5:96:74:26:be:95:66: a1:fc:16:ab:62:7c:ea:d3:14:c7:51:65:85:fd:06:2e:8d:a6: f9:d5:28:25:39:ed:1f:6d:e7:6d:e9:79:8c:94:98:98:0f:fc: bd:7f:6a:c6:4d:12:e0:8d:b9:82:e4:51:9d:87:71:de:2f:be: 09:78:eb:fa:5d:1c:3e:e3:11:79:24:da:88:ba:90:3f:74:14: 56:60:a0:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw05kz5dBY1hzQW/CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU1NDk4NWEtZTkyYS00NzVjLWI1NTQtM2I5ZWQxYjIz OWRjMB4XDTI1MTIxNjE0MDAzOFoXDTI2MDMxNjEzMDAzOFowLzEtMCsGA1UEAxMk YmZmMDJhOWUtYjBhZi00ZjFhLTllODQtMmZhMGZhY2E5NGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoic3+Me1wFLfEe2kWVxKAEuGu8rY/CFSSfEv bMGxaaBnOpUDK2H2C9uLC6uYGlnoCVFho1rQ9qyOF4NyhhhAuxXJY8l0CwOBaI9T R6rb75t3IzgK86Vo4wOvB3/QdULySDOTMSTerbcGcAAmi7HCoK/48XFqaxydH3Vn h4luLfaOFVjes0y15q+BRhk/Vpqt4r98ky0N9yx2h2pyOcn8b3BFh5LyoBnK2a9o niYGCv4Th6CJ5O9+RtuNkG21h3k30v7QtotB0XW53x/4FB5Ft6J32d3Sw+Mz4UwO w3grj1QXLHAs4LR+IMR+pDtCfxLCXr58ScDyh/hfRtqafUAMiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCh3xxoLrj3Yj5HJZhf+isJcCm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0 OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjllZDFiMjM5ZGMvZGUxMTI4ZjYtMjQ1NC0z N2MyLTllZjItOTQ3MWVmMzZiZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmU1NDk4NWEtZTkyYS00NzVjLWI1 NTQtM2I5ZWQxYjIzOWRjLzJlNTQ5ODVhLWU5MmEtNDc1Yy1iNTU0LTNiOWVkMWIy MzlkYy5jcmwwHwYDVR0jBBgwFoAUAl15dIvL+EI76EnOKcLxtXx6XyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjll ZDFiMjM5ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4C8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5Gsm/85Xmegi/wDfECT5KURNmzcYM4JpcxIpV3ZviZXsAi3UjKroED DEY+L11DLG/U1pSknPvCWPcoYf5dN0nXFC1VRuz8u6bvdegwl5sPq4JpSAXjZXd/ FqKppipsCBIilO0lkVMlSKwGer7teqosZfojRvR3RTF+vUAos4x62tJF7NgMuVzi 0i7596CN5mrxuR/H8l5ZQ8bBjWtsv0RPERk5m1pkZHxc56CF1ZZ0Jr6VZqH8Fqti fOrTFMdRZYX9Bi6NpvnVKCU57R9t523peYyUmJgP/L1/asZNEuCNuYLkUZ2Hcd4v vgl46/pdHD7jEXkk2oi6kD90FFZgoKg= -----END CERTIFICATE-----Generated at Sun Dec 21 03:30:40 2025 by rpki-client