This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa File: 8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa (raw, json) Hash identifier: TeRFDHu9jx3pUfqUsyFbgGi1ictP5E5xliCFGfCQorw= Subject key identifier: 2A:15:D3:13:2D:9A:9A:88:41:5B:B0:24:F5:4D:16:00:4B:BF:0D:78 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584C2F50F236CB15208DE8CF94F0 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa Signing time: Sun 14 Dec 2025 14:00:39 +0000 ROA not before: Sun 14 Dec 2025 14:00:39 +0000 ROA not after: Sat 14 Mar 2026 13:00:39 +0000 asID: 400209 IP address blocks: 209.143.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2f:50:f2:36:cb:15:20:8d:e8:cf:94:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Dec 14 14:00:39 2025 GMT Not After : Mar 14 13:00:39 2026 GMT Subject: CN=9543d20b-19d3-40b1-b40a-ec7d4349ddd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:65:9d:15:09:13:2e:10:2a:57:8d:e7:37:ab: 63:9e:3e:87:3f:65:64:f7:40:ae:18:22:88:25:0c: 46:8a:27:75:b4:63:62:cd:e3:ee:e6:ca:58:e1:60: 30:03:02:e5:fa:24:e4:bb:5f:4f:4d:b3:30:63:d7: d4:7b:80:05:eb:a7:f8:d5:0c:f3:3c:cc:d6:70:ee: 1d:23:42:a9:0b:9a:e0:f2:54:4c:0b:90:f4:95:1e: ef:11:86:42:85:34:16:f9:0f:11:a5:86:b6:19:94: d6:0e:4b:7c:1c:ef:31:48:5c:7c:0c:35:d2:e2:4a: fc:52:b8:a2:05:83:0c:c5:02:02:45:f4:32:97:8e: 72:65:75:cc:92:f0:65:47:03:cd:9c:b3:6b:7b:c7: 1b:e5:81:17:fd:1c:15:d2:cc:b2:26:b3:96:6c:f8: bf:79:d5:4b:4a:1f:d4:b1:4c:d4:c7:8f:51:2e:b7: 14:88:0e:9d:d7:83:26:fc:b0:0a:2c:6b:0c:ad:3c: 70:00:71:bd:76:f7:97:50:aa:1b:8c:a6:61:8b:5f: 01:83:21:c8:f1:74:5b:e8:3e:fd:6e:3c:be:18:05: f0:dc:01:ad:e0:ce:1c:d4:a1:91:ee:1a:d2:41:1d: d5:8c:85:84:b2:44:49:9f:dd:16:cd:88:25:1d:a2: 58:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:15:D3:13:2D:9A:9A:88:41:5B:B0:24:F5:4D:16:00:4B:BF:0D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a2:85:f5:60:aa:32:c0:ad:72:0d:1d:c4:eb:74:d0:fa:fd: d2:63:15:40:35:77:58:83:10:87:08:00:0d:c2:85:2d:a7:dd: 7e:7a:ea:76:81:fb:d6:4c:93:ec:c1:68:bb:d4:0a:e5:0b:79: 8b:7e:fc:02:46:c9:8c:51:4b:35:2c:89:72:a2:9e:0e:ce:a6: 3f:7a:9e:f6:9b:20:9e:54:83:ec:c9:09:71:1b:ae:d6:70:f6: 7d:62:01:3c:e6:9d:64:30:74:02:17:ce:5d:ad:a6:a0:92:2d: 87:de:fa:4c:07:6b:d0:7e:e3:bb:41:2b:2a:36:a0:ca:04:dc: 07:30:34:03:ac:33:38:a5:5c:3a:3d:ea:dc:06:ba:96:cf:b0: e0:26:fc:d8:7b:23:1b:16:ad:ff:df:97:ba:4d:7e:9f:8c:bf: 06:fd:e6:c4:7e:97:12:ca:1d:00:98:7d:9e:c4:65:b0:25:99: a5:7b:47:1f:bb:8c:33:2b:00:28:27:6c:b6:3f:e9:6e:5a:2c: 82:7e:29:74:7a:c1:0d:ae:cf:8a:ff:df:b6:94:c4:86:e7:b0: d0:30:3f:39:6a:ac:f1:49:33:69:b4:be:10:87:0b:aa:1a:db: cd:6c:54:18:22:6a:1a:a4:da:c6:d5:2a:90:85:8b:01:13:57: d0:6d:89:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwvUPI2yxUgjejPlPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MTIxNDE0MDAzOVoXDTI2MDMxNDEzMDAzOVowLzEtMCsGA1UEAxMk OTU0M2QyMGItMTlkMy00MGIxLWI0MGEtZWM3ZDQzNDlkZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWWdFQkTLhAqV43nN6tjnj6HP2Vk90CuGCKI JQxGiid1tGNizePu5spY4WAwAwLl+iTku19PTbMwY9fUe4AF66f41QzzPMzWcO4d I0KpC5rg8lRMC5D0lR7vEYZChTQW+Q8RpYa2GZTWDkt8HO8xSFx8DDXS4kr8Urii BYMMxQICRfQyl45yZXXMkvBlRwPNnLNre8cb5YEX/RwV0syyJrOWbPi/edVLSh/U sUzUx49RLrcUiA6d14Mm/LAKLGsMrTxwAHG9dveXUKobjKZhi18BgyHI8XRb6D79 bjy+GAXw3AGt4M4c1KGR7hrSQR3VjIWEskRJn90WzYglHaJYswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoV0xMtmpqIQVuwJPVNFgBLvw14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvOGEyMzQ0M2QtMWVkOC0z ZDgwLWFjMDItYmQzZGYzZDhmMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Y9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKihfVgqjLArXINHcTrdND6/dJjFUA1d1iDEIcIAA3ChS2n3X566naB +9ZMk+zBaLvUCuULeYt+/AJGyYxRSzUsiXKing7Opj96nvabIJ5Ug+zJCXEbrtZw 9n1iATzmnWQwdAIXzl2tpqCSLYfe+kwHa9B+47tBKyo2oMoE3AcwNAOsMzilXDo9 6twGupbPsOAm/Nh7IxsWrf/fl7pNfp+Mvwb95sR+lxLKHQCYfZ7EZbAlmaV7Rx+7 jDMrACgnbLY/6W5aLIJ+KXR6wQ2uz4r/37aUxIbnsNAwPzlqrPFJM2m0vhCHC6oa 281sVBgiahqk2sbVKpCFiwETV9BtiVI= -----END CERTIFICATE-----Generated at Sat Dec 20 09:07:41 2025 by rpki-client