This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/ce11e36d-72c9-3e40-ada1-6c6dd01bce41.roa File: ce11e36d-72c9-3e40-ada1-6c6dd01bce41.roa (raw, json) Hash identifier: gvQ/h7VpnziNXWfb+uPgi9sp6e2nDuycdxIuSh4gr74= Subject key identifier: EE:09:25:B3:27:80:69:98:CC:CC:D0:AB:7F:66:36:43:0E:9F:E8:41 Certificate issuer: /CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Certificate serial: 010D0C9F4328584C3BE10DB26BE7B15D8E749D80 Authority key identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/ce11e36d-72c9-3e40-ada1-6c6dd01bce41.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 12131 IP address blocks: 23.161.32.0/24 maxlen: 24 23.161.33.0/24 maxlen: 24 2604:d2c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:0d:b2:6b:e7:b1:5d:8e:74:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=78ccea02-3e8c-4d5f-87ec-f8af87f241e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3e:70:81:26:28:cb:ab:c2:b2:93:b9:b0:f3: fe:fa:37:11:74:23:5a:81:39:14:f3:d7:85:3b:9d: a4:97:71:3a:49:90:33:19:77:96:92:a4:a7:2d:ff: c0:cb:26:7b:f2:da:24:92:d8:de:e6:c7:df:e0:0e: 55:d8:df:68:1f:da:97:7e:fe:ed:d8:9a:2f:60:f8: 3f:4b:5e:c5:13:72:d9:84:db:16:8a:fa:79:37:df: f9:35:6e:b4:6a:d6:80:ab:41:70:e3:a5:59:b0:05: c2:37:71:21:a0:41:5f:ff:ef:2c:53:b1:80:aa:f6: e3:05:ed:0f:b6:2f:63:e2:43:02:b6:5e:e3:74:b9: db:f1:79:8d:5b:a3:e9:5e:a6:58:57:bf:2d:4d:64: cc:65:b5:7e:82:64:07:07:92:85:31:d5:27:09:65: 5d:55:5f:2f:44:72:c7:45:5b:db:66:fb:60:b2:4f: 27:44:21:eb:b1:02:a5:d5:5a:95:df:f0:f8:59:c0: f6:1a:e4:4a:16:b6:c1:01:5e:68:27:5e:d3:ca:77: 00:de:de:b4:85:ce:07:e8:f8:bc:96:2a:5c:09:9d: 2d:f1:38:ba:38:f5:13:87:22:0d:4a:a2:f5:1b:09: 30:b7:81:e6:9f:20:34:56:01:f1:37:fc:58:cf:85: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:09:25:B3:27:80:69:98:CC:CC:D0:AB:7F:66:36:43:0E:9F:E8:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/ce11e36d-72c9-3e40-ada1-6c6dd01bce41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl X509v3 Authority Key Identifier: keyid:46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer sbgp-ipAddrBlock: critical IPv4: 23.161.32.0/23 IPv6: 2604:d2c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ed:98:83:cc:96:15:a9:29:86:79:5b:9a:88:d2:04:58:7f: 00:eb:57:64:42:72:7c:24:03:d4:bf:bc:25:f6:99:ec:7d:4f: 96:6b:3c:04:4d:e8:97:b3:ae:c4:31:05:d8:c3:59:19:43:e3: 15:ec:89:22:7e:ba:88:96:61:9e:4d:53:00:ad:83:0c:70:5d: 89:77:4d:ce:e8:25:84:0d:bf:c2:10:b8:f6:4c:55:5a:0b:f6: c1:8d:d1:2c:8a:ed:90:50:c0:d0:b1:71:66:30:7a:b0:66:9f: eb:fb:6c:76:53:b2:d7:71:b7:b8:59:f7:1f:99:9c:ca:c7:2e: 9d:7e:66:db:c5:30:47:1e:64:33:f4:63:e4:14:af:ab:93:44: 5e:44:8b:2c:aa:70:0f:bd:13:de:64:d8:c9:07:2c:d0:29:94: f2:22:b5:a2:99:15:52:49:11:d0:de:31:8f:9a:43:68:67:27: ba:8c:16:8e:66:7f:cb:de:7b:41:31:41:8d:89:88:87:d3:f9: 2a:c3:df:f0:2a:64:b9:2f:9a:fc:be:e5:6e:42:13:05:10:f4: 08:48:f9:19:f7:12:69:af:f0:03:41:85:0b:bb:1b:e4:36:39: 21:1d:be:16:19:2c:e3:a3:85:a4:47:03:6c:95:4f:5e:88:e6: 96:b8:78:39 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEw74Q2ya+exXY50nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRmOTEzNTEtYmEyNy00ZDhhLTlkMDYtNTlhZWFhOTcy YTYyMB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk NzhjY2VhMDItM2U4Yy00ZDVmLTg3ZWMtZjhhZjg3ZjI0MWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD5wgSYoy6vCspO5sPP++jcRdCNagTkU89eF O52kl3E6SZAzGXeWkqSnLf/AyyZ78tokktje5sff4A5V2N9oH9qXfv7t2JovYPg/ S17FE3LZhNsWivp5N9/5NW60ataAq0Fw46VZsAXCN3EhoEFf/+8sU7GAqvbjBe0P ti9j4kMCtl7jdLnb8XmNW6PpXqZYV78tTWTMZbV+gmQHB5KFMdUnCWVdVV8vRHLH RVvbZvtgsk8nRCHrsQKl1VqV3/D4WcD2GuRKFrbBAV5oJ17TyncA3t60hc4H6Pi8 lipcCZ0t8Ti6OPUThyINSqL1Gwkwt4HmnyA0VgHxN/xYz4WARwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFO4JJbMngGmYzMzQq39mNkMOn+hBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5 MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFlYWE5NzJhNjIvY2UxMWUzNmQtNzJjOS0z ZTQwLWFkYTEtNmM2ZGQwMWJjZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjRmOTEzNTEtYmEyNy00ZDhhLTlk MDYtNTlhZWFhOTcyYTYyL2I0ZjkxMzUxLWJhMjctNGQ4YS05ZDA2LTU5YWVhYTk3 MmE2Mi5jcmwwHwYDVR0jBBgwFoAURuImqBfX+N2+K7c2p8i7Vk+K/3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFl YWE5NzJhNjIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBF6EgMA0E AgACMAcDBQAmBNLAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFrtmIPMlhWpKYZ5W5qI0gRYfwDrV2RCcnwk A9S/vCX2mex9T5ZrPARN6JezrsQxBdjDWRlD4xXsiSJ+uoiWYZ5NUwCtgwxwXYl3 Tc7oJYQNv8IQuPZMVVoL9sGN0SyK7ZBQwNCxcWYwerBmn+v7bHZTstdxt7hZ9x+Z nMrHLp1+ZtvFMEceZDP0Y+QUr6uTRF5EiyyqcA+9E95k2MkHLNAplPIitaKZFVJJ EdDeMY+aQ2hnJ7qMFo5mf8vee0ExQY2JiIfT+SrD3/AqZLkvmvy+5W5CEwUQ9AhI +Rn3Emmv8ANBhQu7G+Q2OSEdvhYZLOOjhaRHA2yVT16I5pa4eDk= -----END CERTIFICATE-----Generated at Sat Dec 20 15:04:47 2025 by rpki-client