This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c621c77-9539-33db-8fef-a54d1803dc68.roa File: 1c621c77-9539-33db-8fef-a54d1803dc68.roa (raw, json) Hash identifier: iwW7Lx9+EncpzDDr6BxVBGh2uXVTGXH4Y4PsvV2JU4A= Subject key identifier: 8C:D5:C7:7A:BF:FC:03:9D:9A:1D:AE:6B:03:D4:8D:44:A3:80:53:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3BE1243D9FFFD68BBA8A0180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c621c77-9539-33db-8fef-a54d1803dc68.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.212.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:24:3d:9f:ff:d6:8b:ba:8a:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=f3def1de-5629-4906-9661-75e6a69004c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:fe:fb:ff:d3:61:e4:c3:d8:06:aa:18:4f: 00:8f:8b:00:87:46:88:74:da:84:bd:16:95:33:7c: 02:90:fa:eb:a8:74:3c:03:24:80:e8:02:bb:38:00: d8:dd:1c:9d:38:01:ec:ee:f0:de:ad:70:dc:d9:6d: ad:72:da:e9:89:13:b2:a3:d1:aa:8d:4e:8b:c0:5f: 0c:9e:b8:9a:ea:ed:8c:6d:c3:b0:27:15:6f:86:63: 7b:44:c0:11:9e:c5:f3:c5:73:4f:4a:e1:83:de:e1: 49:ad:04:01:9b:1f:ec:36:d0:c6:48:90:d5:d2:da: ff:a7:42:a0:26:f9:32:32:b9:5c:45:42:96:eb:98: f4:69:cb:84:f2:64:b4:9c:d8:2e:dd:33:91:20:15: cb:42:ca:0e:8c:1a:97:82:af:4f:18:bf:78:67:b8: fc:99:cd:36:54:5b:5d:bd:1e:a5:af:47:29:2c:33: ba:40:f0:5b:f6:2b:32:dc:ad:05:08:af:c8:29:a7: 58:8c:2d:a0:ea:ad:19:c3:7b:fd:21:fe:31:03:42: f6:c3:67:0d:83:af:79:37:5f:a8:59:c5:c4:55:8f: c3:1a:59:38:84:2d:db:40:e0:d8:a2:2e:1a:86:46: 73:82:10:ec:14:30:4a:be:0a:09:bf:c0:d8:1a:5b: ab:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D5:C7:7A:BF:FC:03:9D:9A:1D:AE:6B:03:D4:8D:44:A3:80:53:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c621c77-9539-33db-8fef-a54d1803dc68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a7:82:b3:03:a4:2c:cd:de:33:29:ad:51:0d:89:93:21:20: d8:50:15:53:60:f5:5b:02:92:f6:2b:4d:1d:f2:95:7f:12:8b: d1:0d:e4:69:bc:a3:f8:4d:d5:f5:e5:c3:a4:e1:53:36:d6:0f: a1:ca:47:ef:db:be:41:14:69:41:db:4d:b4:59:b7:04:cf:f1: 36:ab:82:47:91:65:de:b8:03:6f:2d:24:8e:b7:06:4d:6a:4e: dd:dd:0b:3c:89:a8:96:42:6b:15:12:b4:08:b7:b5:65:c7:60: 7e:0b:fe:c2:bd:2d:ab:f4:bc:2f:b3:8f:16:f3:ad:32:37:69: a0:c0:ac:7b:78:a0:74:ca:f6:3e:8b:56:d8:f5:fa:4d:7e:24: 7e:1a:f2:d8:52:02:35:7a:da:0c:49:4d:ba:0b:e1:ce:f5:e9: 18:47:16:d4:63:f5:9f:af:54:82:ba:aa:e0:5c:b6:3e:70:80: 47:09:a2:b6:8c:fc:44:de:04:89:3e:23:16:9d:7c:2e:1e:36: bf:ba:43:3f:df:45:4f:64:d3:6b:7a:6e:40:97:fb:48:be:b4: 2b:a1:6b:24:cf:17:6b:ae:0b:1f:28:eb:19:e0:9e:38:0e:16: 6f:af:05:64:ff:82:d5:79:c8:55:51:1b:66:30:46:51:e6:26: 22:23:ec:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74SQ9n//Wi7qKAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZjNkZWYxZGUtNTYyOS00OTA2LTk2NjEtNzVlNmE2OTAwNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljn++//TYeTD2AaqGE8Aj4sAh0aIdNqEvRaV M3wCkPrrqHQ8AySA6AK7OADY3RydOAHs7vDerXDc2W2tctrpiROyo9GqjU6LwF8M nria6u2MbcOwJxVvhmN7RMARnsXzxXNPSuGD3uFJrQQBmx/sNtDGSJDV0tr/p0Kg JvkyMrlcRUKW65j0acuE8mS0nNgu3TORIBXLQsoOjBqXgq9PGL94Z7j8mc02VFtd vR6lr0cpLDO6QPBb9isy3K0FCK/IKadYjC2g6q0Zw3v9If4xA0L2w2cNg695N1+o WcXEVY/DGlk4hC3bQODYoi4ahkZzghDsFDBKvgoJv8DYGlurswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzVx3q//AOdmh2uawPUjUSjgFM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWM2MjFjNzctOTUzOS0z M2RiLThmZWYtYTU0ZDE4MDNkYzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9S9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyngrMDpCzN3jMprVENiZMhINhQFVNg9VsCkvYrTR3ylX8Si9EN5Gm8 o/hN1fXlw6ThUzbWD6HKR+/bvkEUaUHbTbRZtwTP8TargkeRZd64A28tJI63Bk1q Tt3dCzyJqJZCaxUStAi3tWXHYH4L/sK9Lav0vC+zjxbzrTI3aaDArHt4oHTK9j6L Vtj1+k1+JH4a8thSAjV62gxJTboL4c716RhHFtRj9Z+vVIK6quBctj5wgEcJoraM /ETeBIk+IxadfC4eNr+6Qz/fRU9k02t6bkCX+0i+tCuhayTPF2uuCx8o6xngnjgO Fm+vBWT/gtV5yFVRG2YwRlHmJiIj7PA= -----END CERTIFICATE-----Generated at Fri Dec 19 14:32:19 2025 by rpki-client