This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa File: 199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa (raw, json) Hash identifier: n8hg4g3B4wyXy6eIpXtgIW+zSKvNmwO44oQH2ANzOCM= Subject key identifier: 75:1A:32:F7:25:4A:64:3D:DE:D4:2D:0B:77:D2:80:5C:BB:9D:77:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3EABCB3AE3D88A9FBDC92B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.217.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:cb:3a:e3:d8:8a:9f:bd:c9:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=622c98ea-cfeb-42e0-ae7f-2bb3b0236002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:f7:f7:1b:6e:d2:29:fd:88:06:02:ae:1b: 94:bd:82:00:5f:c0:73:b8:9e:04:93:8a:c1:92:89: 26:f9:71:8e:03:8f:6a:49:ba:87:03:5e:96:8b:aa: 8c:39:19:26:d8:4d:bd:56:1f:81:50:10:11:03:46: 3c:ff:08:55:f6:73:c9:ef:0e:3d:60:c6:7f:ca:3b: 03:f4:df:6a:19:e4:84:72:a1:ed:5e:e8:db:43:9b: d5:32:8e:c3:fd:7e:b3:c4:99:0f:75:e1:a0:34:b1: 48:16:29:78:bb:93:53:fa:07:42:b2:d8:03:37:e4: 36:cb:db:d2:37:30:e0:31:86:3e:12:df:74:ff:5a: 0d:19:16:31:f1:ce:3a:f8:75:f8:e0:49:75:3f:75: 03:46:76:ed:74:bf:dd:c5:1f:e1:ed:de:f6:86:b0: 6e:80:67:7f:04:69:fe:d7:1a:f8:c5:37:63:6e:ce: e1:f0:5a:d1:27:45:c8:c0:91:a9:d2:8e:74:dc:77: ae:2b:fb:83:f5:a5:55:01:96:f9:8c:cb:fc:9b:1d: e4:b1:8e:7a:0a:83:67:39:1b:d4:bc:ea:f0:b8:54: 8a:d9:40:02:af:e9:40:f6:75:41:8a:82:07:40:46: bd:4c:be:e6:80:d1:6f:47:b9:15:f9:42:20:4a:8c: 16:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1A:32:F7:25:4A:64:3D:DE:D4:2D:0B:77:D2:80:5C:BB:9D:77:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/199388d5-89f8-39dd-b210-3f6c4f38c9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f1:79:a8:04:39:94:ef:cf:6b:f3:e5:4b:b5:a7:14:ab:8c: fe:fe:7a:e6:59:06:92:57:d6:84:e0:4e:1a:2c:d4:2b:6b:52: 2f:38:b9:55:3f:a9:3d:75:79:de:57:fb:72:d8:27:82:2c:7d: e8:0a:44:5a:35:4f:9c:7e:69:d4:da:f6:0a:38:0a:db:e1:34: 05:77:18:2e:b4:a3:22:e4:e0:29:27:01:88:5f:01:9b:bc:52: aa:a4:de:80:68:f3:09:32:54:17:22:60:ff:9f:1a:3b:da:04: 06:dd:10:b5:93:c5:97:13:bd:ab:91:75:a2:07:81:31:42:7f: 53:ae:4c:5d:49:b2:d8:d0:94:cc:1f:0c:ba:0f:fa:4d:88:68: 51:ed:70:06:cb:59:64:59:e4:47:e4:a8:56:4e:55:12:be:d2: 4a:73:b0:dc:47:b5:ee:2e:f0:a4:76:8b:9c:14:7c:c6:db:90: 2c:a6:05:0a:71:c1:77:9e:e9:49:94:66:63:17:11:42:15:60: 5f:f1:60:90:f9:91:9f:1d:c5:1a:2d:55:93:08:7a:cc:c0:15: 2f:bc:b6:b3:9f:27:d9:a4:dd:63:42:45:48:4c:cc:d6:ba:d2: d2:ef:c3:41:72:8c:fe:d6:94:29:dd:ed:d8:cd:6a:44:d9:e9: df:5a:b2:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q8s649iKn73JK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk NjIyYzk4ZWEtY2ZlYi00MmUwLWFlN2YtMmJiM2IwMjM2MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh739xtu0in9iAYCrhuUvYIAX8BzuJ4Ek4rB kokm+XGOA49qSbqHA16Wi6qMORkm2E29Vh+BUBARA0Y8/whV9nPJ7w49YMZ/yjsD 9N9qGeSEcqHtXujbQ5vVMo7D/X6zxJkPdeGgNLFIFil4u5NT+gdCstgDN+Q2y9vS NzDgMYY+Et90/1oNGRYx8c46+HX44El1P3UDRnbtdL/dxR/h7d72hrBugGd/BGn+ 1xr4xTdjbs7h8FrRJ0XIwJGp0o503HeuK/uD9aVVAZb5jMv8mx3ksY56CoNnORvU vOrwuFSK2UACr+lA9nVBioIHQEa9TL7mgNFvR7kV+UIgSowW9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUaMvclSmQ93tQtC3fSgFy7nXcxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTk5Mzg4ZDUtODlmOC0z OWRkLWIyMTAtM2Y2YzRmMzhjOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ltMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPxeagEOZTvz2vz5Uu1pxSrjP7+euZZBpJX1oTgThos1CtrUi84uVU/ qT11ed5X+3LYJ4IsfegKRFo1T5x+adTa9go4CtvhNAV3GC60oyLk4CknAYhfAZu8 Uqqk3oBo8wkyVBciYP+fGjvaBAbdELWTxZcTvauRdaIHgTFCf1OuTF1JstjQlMwf DLoP+k2IaFHtcAbLWWRZ5EfkqFZOVRK+0kpzsNxHte4u8KR2i5wUfMbbkCymBQpx wXee6UmUZmMXEUIVYF/xYJD5kZ8dxRotVZMIeszAFS+8trOfJ9mk3WNCRUhMzNa6 0tLvw0FyjP7WlCnd7djNakTZ6d9asvc= -----END CERTIFICATE-----Generated at Sat Dec 20 11:21:26 2025 by rpki-client