This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24a2f576-65b4-35d1-979d-9071f575dab4.roa File: 24a2f576-65b4-35d1-979d-9071f575dab4.roa (raw, json) Hash identifier: F9THlB86mdJTipZ0pmd2n+aO7gyq4binZzggIDjl+r0= Subject key identifier: 2C:E0:26:C8:B9:95:0D:EB:10:F3:EF:29:49:D6:F6:8E:4F:1A:E9:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3BE11DC60A30A6129E8D1E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24a2f576-65b4-35d1-979d-9071f575dab4.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.209.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:1d:c6:0a:30:a6:12:9e:8d:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=00b052b0-a91b-4321-9caf-c44d1b7f80ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:ef:b0:6d:64:c3:bf:78:3a:c4:9b:55:e6: f5:1c:76:8a:ca:0f:a1:cd:ea:25:52:ba:80:f7:48: b4:2f:bb:1e:46:a7:ba:24:2d:23:ec:e6:ae:18:cc: 88:ef:56:f5:66:f8:8d:c4:60:1b:87:aa:aa:87:af: a7:23:ac:85:de:42:24:43:89:e4:2d:e4:3c:41:34: 56:5c:bb:3e:5b:67:e4:cc:2c:7b:60:77:2e:4a:c0: d8:18:6f:26:c9:bd:99:ad:f4:80:3e:ce:f9:f4:d0: 41:15:b6:7c:83:b8:6f:47:48:be:ba:0b:ee:b7:7b: 87:a1:ab:73:af:1b:48:45:68:2d:3f:2d:dc:08:0a: 70:86:10:f7:35:56:2d:4e:10:4a:83:1e:c8:bd:14: f7:cb:79:ac:d1:5a:a5:7b:76:e6:fa:44:d2:2c:23: dd:ad:d1:ae:a1:88:a6:01:9f:cc:4a:48:a7:a9:2e: 98:d9:30:7d:29:b9:64:24:76:68:38:c9:65:12:14: 31:34:09:09:30:09:b0:d5:77:2e:34:af:ec:ef:76: 05:9c:4c:9d:41:0e:d7:66:90:ee:e7:74:de:57:3a: 37:41:a0:0a:ee:66:06:35:82:86:e5:e7:79:47:5b: e5:20:b1:7f:df:09:54:f9:cd:e8:b2:77:f2:ff:a4: c1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E0:26:C8:B9:95:0D:EB:10:F3:EF:29:49:D6:F6:8E:4F:1A:E9:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24a2f576-65b4-35d1-979d-9071f575dab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8b:99:83:74:86:ce:ee:4b:48:e7:8c:12:28:64:ce:ba:10: 63:f3:78:dc:0a:4b:c5:3e:d5:53:f4:b3:5e:7c:6b:d6:5c:33: 83:6d:39:12:7e:29:a8:41:44:c3:df:c1:5a:f3:a4:92:a8:2c: fa:35:be:41:a6:7d:39:2c:92:da:03:aa:8a:7c:08:8c:62:ee: 0d:2d:de:0a:88:96:de:1c:41:0e:fe:ed:1f:40:e6:f8:24:0f: 3e:2b:da:39:21:7e:8d:a2:4b:49:d8:36:66:8c:0e:c7:72:e5: 6e:0c:13:a4:ae:4a:e4:38:a4:73:a0:f2:72:52:5f:f2:16:98: 39:c2:ac:94:49:f8:73:e0:f9:18:1b:d3:b1:e9:60:d2:65:68: 83:65:0a:72:e3:29:7b:61:64:ea:a7:4a:44:24:43:a8:77:68: 71:25:89:49:75:d8:7c:c0:3d:84:b0:5d:38:fc:40:74:68:84: 43:b5:22:62:52:4b:ec:af:f6:2d:f7:9d:f6:71:5f:70:3a:a3: 12:6c:d1:69:07:c0:16:f3:f7:3a:a2:57:46:1c:71:54:bd:78: d5:fd:05:30:09:43:b6:f2:2b:2f:67:31:b1:12:55:b4:a3:a1: 3b:6a:1a:49:c4:f2:b3:fa:03:c9:3f:9e:6b:0e:84:f1:69:41: 19:24:3d:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74R3GCjCmEp6NHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk MDBiMDUyYjAtYTkxYi00MzIxLTljYWYtYzQ0ZDFiN2Y4MGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2PvsG1kw794OsSbVeb1HHaKyg+hzeolUrqA 90i0L7seRqe6JC0j7OauGMyI71b1ZviNxGAbh6qqh6+nI6yF3kIkQ4nkLeQ8QTRW XLs+W2fkzCx7YHcuSsDYGG8myb2ZrfSAPs759NBBFbZ8g7hvR0i+ugvut3uHoatz rxtIRWgtPy3cCApwhhD3NVYtThBKgx7IvRT3y3ms0Vqle3bm+kTSLCPdrdGuoYim AZ/MSkinqS6Y2TB9KblkJHZoOMllEhQxNAkJMAmw1XcuNK/s73YFnEydQQ7XZpDu 53TeVzo3QaAK7mYGNYKG5ed5R1vlILF/3wlU+c3osnfy/6TBEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzgJsi5lQ3rEPPvKUnW9o5PGulwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRhMmY1NzYtNjViNC0z NWQxLTk3OWQtOTA3MWY1NzVkYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSLmYN0hs7uS0jnjBIoZM66EGPzeNwKS8U+1VP0s158a9ZcM4NtORJ+ KahBRMPfwVrzpJKoLPo1vkGmfTksktoDqop8CIxi7g0t3gqIlt4cQQ7+7R9A5vgk Dz4r2jkhfo2iS0nYNmaMDsdy5W4ME6SuSuQ4pHOg8nJSX/IWmDnCrJRJ+HPg+Rgb 07HpYNJlaINlCnLjKXthZOqnSkQkQ6h3aHEliUl12HzAPYSwXTj8QHRohEO1ImJS S+yv9i33nfZxX3A6oxJs0WkHwBbz9zqiV0YccVS9eNX9BTAJQ7byKy9nMbESVbSj oTtqGknE8rP6A8k/nmsOhPFpQRkkPX4= -----END CERTIFICATE-----Generated at Sat Dec 20 02:57:53 2025 by rpki-client