This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d6ac857-0bd3-3afe-8969-485166cf2922.roa File: 2d6ac857-0bd3-3afe-8969-485166cf2922.roa (raw, json) Hash identifier: +tz5L4wbGuIvKLoOB8c0nkktsiQyenwMvSHPam0pZwY= Subject key identifier: 58:68:AD:55:2E:FB:73:E9:30:D1:DF:0E:ED:F9:C4:FA:0D:B6:2F:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C39166AC463C7920845407280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d6ac857-0bd3-3afe-8969-485166cf2922.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.206.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:6a:c4:63:c7:92:08:45:40:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=7fd15276-11a5-4f93-bd2d-ed40fe770c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:c4:2f:e2:4b:0e:e4:cb:6f:6b:a5:de:62: d1:63:43:8a:10:14:13:ce:4b:72:91:24:e9:00:c4: 1c:33:25:ee:71:e0:88:6f:41:91:11:a8:71:88:54: 7e:bc:41:ba:70:38:c8:87:63:2e:f5:9f:73:25:0e: 1f:48:2f:22:d5:9f:12:79:4e:96:20:fc:90:bd:41: c5:c0:8e:eb:a2:1b:a5:d0:86:f3:9f:99:61:4f:9d: d7:eb:07:b6:b1:c6:53:d0:93:be:cf:32:e0:5f:19: 9e:81:09:13:4a:b9:c9:75:2d:ea:08:f1:25:c4:0c: 9b:93:a1:cd:44:18:82:32:a8:eb:8d:07:70:f6:9e: 56:b6:63:3d:68:cc:60:b6:5e:6e:84:40:23:df:99: 31:f9:b5:a1:bf:25:0c:26:d9:bc:3d:6a:f4:9d:87: 6b:d7:17:b8:1e:96:7c:4c:aa:ac:f8:43:ba:7d:68: 3f:79:d8:b3:1f:59:c0:ce:9d:30:65:c9:d1:3b:8e: cf:c4:30:c5:3a:c1:5e:5b:a9:81:3e:5d:a2:27:66: 79:66:14:2a:40:a0:84:ca:20:85:b5:36:09:3b:be: 2e:14:d1:55:7c:72:bc:cd:4e:49:20:2b:01:0b:c9: fe:6f:66:be:0d:a0:fe:e2:ec:9d:20:7b:31:70:0d: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:68:AD:55:2E:FB:73:E9:30:D1:DF:0E:ED:F9:C4:FA:0D:B6:2F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d6ac857-0bd3-3afe-8969-485166cf2922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:47:fd:25:5d:a3:7a:e3:be:a8:8e:04:8f:1c:a4:5c:3c:fb: b0:33:0a:7d:aa:fd:de:53:00:7c:12:14:e2:0b:97:c3:b3:4b: 72:aa:8e:ec:d5:cd:06:f3:46:8b:eb:70:9f:cc:c7:ad:f4:60: 43:53:97:da:09:ae:f0:47:3c:d1:f0:8d:38:43:83:97:96:e2: e1:84:f6:91:ab:b1:77:08:1a:3a:d2:b9:8c:0f:e4:0e:b9:e8: d2:df:7b:f9:18:2d:a4:87:30:f7:76:64:6c:dc:84:5d:92:a3: 75:4e:26:96:2f:5c:15:6a:c9:96:d9:5c:4a:1a:e4:9a:a1:c6: df:fa:46:a2:24:92:2e:d8:49:33:9f:18:0f:84:c9:c3:a2:f0: 66:80:ae:ad:7b:30:34:79:f1:6b:21:f9:f6:8e:5d:d4:bb:f4: 87:b8:f1:44:90:df:f6:0e:34:ee:69:1d:79:5d:4b:62:24:ea: 3e:24:85:a6:6f:fa:06:ec:41:e9:d2:df:01:2e:eb:db:dc:2b: 8a:70:d9:0e:7f:8a:82:ca:18:ef:84:22:cd:9b:66:d7:84:27: 56:08:08:98:23:8d:61:01:ee:02:5d:b0:b6:72:ee:ac:61:95: a6:9f:6b:4b:e0:aa:9f:2e:0b:4c:0f:e2:72:4b:a7:5c:66:d0: 1b:d0:05:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FmrEY8eSCEVAcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk N2ZkMTUyNzYtMTFhNS00ZjkzLWJkMmQtZWQ0MGZlNzcwYzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX3EL+JLDuTLb2ul3mLRY0OKEBQTzktykSTp AMQcMyXuceCIb0GREahxiFR+vEG6cDjIh2Mu9Z9zJQ4fSC8i1Z8SeU6WIPyQvUHF wI7rohul0Ibzn5lhT53X6we2scZT0JO+zzLgXxmegQkTSrnJdS3qCPElxAybk6HN RBiCMqjrjQdw9p5WtmM9aMxgtl5uhEAj35kx+bWhvyUMJtm8PWr0nYdr1xe4HpZ8 TKqs+EO6fWg/edizH1nAzp0wZcnRO47PxDDFOsFeW6mBPl2iJ2Z5ZhQqQKCEyiCF tTYJO74uFNFVfHK8zU5JICsBC8n+b2a+DaD+4uydIHsxcA2PawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhorVUu+3PpMNHfDu35xPoNti8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmQ2YWM4NTctMGJkMy0z YWZlLTg5NjktNDg1MTY2Y2YyOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF84wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9H/SVdo3rjvqiOBI8cpFw8+7AzCn2q/d5TAHwSFOILl8OzS3KqjuzV zQbzRovrcJ/Mx630YENTl9oJrvBHPNHwjThDg5eW4uGE9pGrsXcIGjrSuYwP5A65 6NLfe/kYLaSHMPd2ZGzchF2So3VOJpYvXBVqyZbZXEoa5Jqhxt/6RqIkki7YSTOf GA+EycOi8GaArq17MDR58Wsh+faOXdS79Ie48USQ3/YONO5pHXldS2Ik6j4khaZv +gbsQenS3wEu69vcK4pw2Q5/ioLKGO+EIs2bZteEJ1YICJgjjWEB7gJdsLZy7qxh laafa0vgqp8uC0wP4nJLp1xm0BvQBV0= -----END CERTIFICATE-----Generated at Tue Dec 23 03:52:21 2025 by rpki-client