This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f6ef1dc-42c5-3330-bd4c-d086a95158b0.roa File: 1f6ef1dc-42c5-3330-bd4c-d086a95158b0.roa (raw, json) Hash identifier: kRifAO8zbhjVBVKv66un+xT0rn+OG1vzVhlPymr+OaU= Subject key identifier: 32:52:19:AA:2F:99:E3:88:47:64:D2:18:73:83:50:FD:B5:67:0A:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C391661DF90E7D652F516CF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f6ef1dc-42c5-3330-bd4c-d086a95158b0.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.207.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:61:df:90:e7:d6:52:f5:16:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=390eaa9f-995d-4cd9-859e-46ae48650824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:45:b1:33:09:16:dd:7a:2a:a6:5e:78:65: f4:46:55:0e:3e:db:a5:59:4d:10:ff:58:d2:3b:f0: db:d4:04:79:30:66:8b:68:85:b3:62:7f:3e:46:cf: 1b:33:62:e4:02:b2:18:03:58:bf:c7:03:06:1f:00: 31:9c:bc:54:bb:6b:c8:90:13:99:31:7e:ec:6e:4f: 70:19:82:9e:85:aa:b0:fd:f7:1f:1c:45:78:d7:60: 70:da:88:72:e9:93:12:73:5d:0a:02:4c:1e:12:ea: 77:bc:c2:9e:b0:9e:a3:dd:c8:a5:5f:cc:c7:5a:5f: ca:4f:31:a1:66:cd:8c:b4:2d:84:c7:1a:9d:81:e8: 23:42:46:98:09:54:ae:38:96:de:59:26:3b:e2:77: c0:b5:f8:a6:06:10:07:8e:df:d3:05:45:ba:57:91: a2:c5:fe:b5:38:bb:74:9f:dd:68:5d:a5:ff:86:0f: 78:83:0e:0e:c6:9a:e3:a9:c0:81:24:76:40:05:7d: 55:e0:71:9a:39:66:23:46:a2:41:6a:63:fb:25:0a: f7:4f:00:c7:4f:25:0f:19:5f:66:8d:e2:34:59:98: 43:aa:3c:15:64:4c:63:ae:ab:3a:be:21:0c:61:e1: 51:ff:ca:ed:71:ec:1b:2c:cc:a8:17:04:30:19:5e: b5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:52:19:AA:2F:99:E3:88:47:64:D2:18:73:83:50:FD:B5:67:0A:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f6ef1dc-42c5-3330-bd4c-d086a95158b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c4:9c:a1:18:1a:d9:9e:c2:df:a3:4b:f6:02:94:8a:d9:d7: b5:23:42:62:c3:e5:51:34:c9:3a:25:20:5e:85:ce:56:be:84: 96:3b:09:72:cb:04:98:35:47:90:d3:26:6d:1d:25:1b:ba:ca: 3d:50:78:22:2e:43:53:b1:98:fc:fb:ca:a7:99:90:34:dc:03: 9d:59:ed:23:78:fd:f3:e3:01:43:bf:4f:8b:1b:34:2e:46:1b: cb:ce:46:55:93:bd:73:44:42:9a:53:6a:92:c2:f5:4a:04:88: c5:32:4a:c6:cd:2d:50:28:33:85:c6:78:7a:5a:3a:4a:92:f4: c5:53:70:bb:d8:15:ea:85:53:a0:34:ca:cd:a7:66:4b:6a:1c: fc:71:11:a7:45:b8:d6:95:75:2a:f2:f4:04:10:1e:63:34:4a: 9a:f0:10:ae:8f:96:8c:81:c5:77:4b:bb:be:c6:81:a9:fa:b5: 92:91:9c:39:86:fe:f5:c6:37:73:07:36:d7:f7:84:67:8e:68: cd:44:98:bc:ee:87:c0:ce:0c:d4:fa:b5:05:fa:35:0f:35:e3: 49:18:8c:0f:d9:ea:db:b4:9a:58:1a:ae:ae:88:24:a5:7a:f8: 20:a1:b4:d2:92:27:54:c7:e5:5a:5f:52:4e:f0:2b:99:af:90: 29:c8:0d:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FmHfkOfWUvUWz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk MzkwZWFhOWYtOTk1ZC00Y2Q5LTg1OWUtNDZhZTQ4NjUwODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfBFsTMJFt16KqZeeGX0RlUOPtulWU0Q/1jS O/Db1AR5MGaLaIWzYn8+Rs8bM2LkArIYA1i/xwMGHwAxnLxUu2vIkBOZMX7sbk9w GYKehaqw/fcfHEV412Bw2ohy6ZMSc10KAkweEup3vMKesJ6j3cilX8zHWl/KTzGh Zs2MtC2ExxqdgegjQkaYCVSuOJbeWSY74nfAtfimBhAHjt/TBUW6V5Gixf61OLt0 n91oXaX/hg94gw4OxprjqcCBJHZABX1V4HGaOWYjRqJBamP7JQr3TwDHTyUPGV9m jeI0WZhDqjwVZExjrqs6viEMYeFR/8rtcewbLMyoFwQwGV615wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJSGaovmeOIR2TSGHODUP21ZwokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWY2ZWYxZGMtNDJjNS0z MzMwLWJkNGMtZDA4NmE5NTE1OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF89IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLEnKEYGtmewt+jS/YClIrZ17UjQmLD5VE0yTolIF6Fzla+hJY7CXLL BJg1R5DTJm0dJRu6yj1QeCIuQ1OxmPz7yqeZkDTcA51Z7SN4/fPjAUO/T4sbNC5G G8vORlWTvXNEQppTapLC9UoEiMUySsbNLVAoM4XGeHpaOkqS9MVTcLvYFeqFU6A0 ys2nZktqHPxxEadFuNaVdSry9AQQHmM0SprwEK6PloyBxXdLu77Ggan6tZKRnDmG /vXGN3MHNtf3hGeOaM1EmLzuh8DODNT6tQX6NQ8140kYjA/Z6tu0mlgarq6IJKV6 +CChtNKSJ1TH5VpfUk7wK5mvkCnIDfg= -----END CERTIFICATE-----Generated at Sat Dec 20 06:02:57 2025 by rpki-client