This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa File: db4190ad-5350-383b-b3b5-9d97a927e02f.roa (raw, json) Hash identifier: lc+Do6pp57PVo1kdrSzRSAvaCZxwcly0PllG1btAb4E= Subject key identifier: F2:A8:87:B6:DE:05:BE:CC:B1:FF:4D:B7:4B:AF:88:F9:D3:2B:C6:77 Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F4328584C391656D9E221F0E603E73370 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 21859 IP address blocks: 23.128.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:56:d9:e2:21:f0:e6:03:e7:33:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=092e5071-a823-495e-8392-e2254754cf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:27:cd:37:f5:4a:08:fe:55:a8:24:2d:d5:84: 30:83:8f:23:3e:f4:04:4d:9c:3a:be:9d:5e:df:f6: 28:d8:d2:42:66:de:44:03:f0:c6:c8:c1:59:d1:65: fd:70:ad:75:ea:2b:a2:6f:27:2f:a9:60:a4:9b:73: 30:57:f8:35:55:78:82:7f:53:52:0d:9b:1c:e5:72: 23:c5:bf:63:64:c1:c4:99:16:4c:35:d9:e3:52:92: 92:1e:92:30:ee:e0:7f:ec:73:ea:73:ee:0f:7d:35: 0c:de:db:9b:cf:3e:61:1a:3b:78:73:0f:9f:1d:37: ef:92:54:56:3c:9b:e2:a7:79:14:8b:ef:de:f7:c7: 1d:26:d0:3b:e0:cd:9a:b5:bc:f3:87:b5:54:a1:c5: 14:d2:9d:99:46:fd:45:e1:99:77:29:9a:26:a2:01: 2d:d1:38:5f:84:ef:f0:a2:39:94:d6:e0:f3:6e:ef: 70:c9:74:7c:9e:1f:1e:ef:0e:69:f4:2f:e2:d1:de: 45:99:30:cc:45:ee:31:09:9d:48:f9:23:e1:e4:bc: 41:b7:7e:37:36:f6:bb:65:c5:0a:63:69:14:3b:00: 23:62:71:68:e8:5f:d0:8e:bb:10:a5:02:4d:c4:37: 44:7d:9d:51:da:f5:e3:64:e6:a0:94:34:0b:29:c5: 56:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A8:87:B6:DE:05:BE:CC:B1:FF:4D:B7:4B:AF:88:F9:D3:2B:C6:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 23.128.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:39:0b:0b:18:b5:10:aa:b3:67:cb:38:0e:03:d5:65:f3:79: 9d:e5:6b:80:63:63:65:94:22:6d:7c:c9:35:9c:65:cb:ea:79: 4f:16:51:14:4b:d9:26:29:68:48:87:d0:6b:c9:ab:1f:e2:24: 8a:9f:fb:a4:bf:67:7d:5b:77:15:4d:c5:df:81:46:05:c1:1a: 36:c1:70:b2:65:63:66:25:91:29:c1:f3:88:d8:75:bb:c2:1d: 83:16:cf:3b:d6:f2:40:09:b8:f7:01:60:99:84:7b:a7:04:28: 98:d9:24:5b:93:36:ab:e8:50:37:17:6a:b0:4e:6b:2e:66:11: 6d:fd:97:5f:f0:da:17:b8:05:d2:a1:27:c4:4d:75:b1:e9:b9: 79:d9:75:61:9b:b2:22:ad:d9:e9:76:6f:85:73:c8:17:da:12: 60:5c:82:38:59:58:f2:a9:ff:0b:1d:cf:04:56:57:8e:6c:1e: 76:47:5b:52:14:21:83:6d:1d:02:55:df:71:fc:45:78:80:8e: 9f:65:eb:0b:c7:de:a4:30:55:c8:a2:e2:6d:ad:99:be:69:5e: 71:a4:d9:e8:69:87:f5:4b:53:a7:c8:5b:cd:7e:d4:8f:a5:8a: 8a:be:9e:63:b0:44:70:c2:bf:e3:9c:50:d0:8e:19:1f:b1:1b: c4:90:f8:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FlbZ4iHw5gPnM3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk MDkyZTUwNzEtYTgyMy00OTVlLTgzOTItZTIyNTQ3NTRjZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ifNN/VKCP5VqCQt1YQwg48jPvQETZw6vp1e 3/Yo2NJCZt5EA/DGyMFZ0WX9cK116iuibycvqWCkm3MwV/g1VXiCf1NSDZsc5XIj xb9jZMHEmRZMNdnjUpKSHpIw7uB/7HPqc+4PfTUM3tubzz5hGjt4cw+fHTfvklRW PJvip3kUi+/e98cdJtA74M2atbzzh7VUocUU0p2ZRv1F4Zl3KZomogEt0ThfhO/w ojmU1uDzbu9wyXR8nh8e7w5p9C/i0d5FmTDMRe4xCZ1I+SPh5LxBt343Nva7ZcUK Y2kUOwAjYnFo6F/QjrsQpQJNxDdEfZ1R2vXjZOaglDQLKcVWRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKoh7beBb7Msf9Nt0uviPnTK8Z3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvZGI0MTkwYWQtNTM1MC0z ODNiLWIzYjUtOWQ5N2E5MjdlMDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw5CwsYtRCqs2fLOA4D1WXzeZ3la4BjY2WUIm18yTWcZcvqeU8WURRL 2SYpaEiH0GvJqx/iJIqf+6S/Z31bdxVNxd+BRgXBGjbBcLJlY2YlkSnB84jYdbvC HYMWzzvW8kAJuPcBYJmEe6cEKJjZJFuTNqvoUDcXarBOay5mEW39l1/w2he4BdKh J8RNdbHpuXnZdWGbsiKt2el2b4VzyBfaEmBcgjhZWPKp/wsdzwRWV45sHnZHW1IU IYNtHQJV33H8RXiAjp9l6wvH3qQwVcii4m2tmb5pXnGk2ehph/VLU6fIW81+1I+l ioq+nmOwRHDCv+OcUNCOGR+xG8SQ+A0= -----END CERTIFICATE-----Generated at Sun Dec 21 07:20:47 2025 by rpki-client