This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32b951b3-7d5c-3c6d-a937-61e9b953860f.roa File: 32b951b3-7d5c-3c6d-a937-61e9b953860f.roa (raw, json) Hash identifier: gijCS1w8loOZCqYx6veqjSa87YxFDeZAH+TjU6RgVU4= Subject key identifier: BA:42:A6:79:AF:03:7F:AB:AD:C2:1C:79:09:50:F1:C0:F5:B5:DE:51 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C364BA579184E4774D4BD0200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32b951b3-7d5c-3c6d-a937-61e9b953860f.roa Signing time: Wed 17 Dec 2025 02:00:31 +0000 ROA not before: Wed 17 Dec 2025 02:00:31 +0000 ROA not after: Tue 17 Mar 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.35.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:36:4b:a5:79:18:4e:47:74:d4:bd:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 17 02:00:31 2025 GMT Not After : Mar 17 01:00:31 2026 GMT Subject: CN=5fdfae0a-2ba9-475e-9d2b-697f16b4031f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:2b:3e:34:eb:6c:a1:8c:36:50:c4:e0:99: 0d:47:af:51:20:f2:cb:ff:4e:87:16:a5:8a:a5:d5: 82:f1:57:90:89:4a:94:2c:c9:fd:f2:ac:91:33:51: 3f:27:39:e5:71:c4:e9:2f:1f:08:d5:57:ab:c7:bc: 16:fd:74:b5:08:d8:d7:94:f3:c4:f7:00:41:b2:e6: 76:7d:cb:03:ac:90:fe:c5:23:10:e1:ad:3b:7b:45: 5f:14:62:00:bc:90:c5:07:dd:93:72:2d:98:5f:d6: 6b:8a:a8:69:30:a5:18:0d:f2:4b:f0:78:23:95:ef: cc:a3:ca:04:30:c8:a3:ac:ed:45:89:c9:f0:3f:4b: 21:dd:ca:c5:99:3f:17:e3:c5:14:50:a3:94:32:a6: d2:2b:ad:df:4f:f9:1c:81:6d:fe:1b:55:4a:5e:a9: 6c:4a:39:d8:fb:37:10:87:0b:18:fb:5f:dd:5d:2c: ba:3c:98:ed:cf:9e:bd:01:06:47:45:46:ab:15:19: 53:d3:e5:30:70:9f:fd:f2:9b:07:36:a3:e9:2f:f7: ad:7a:c4:90:43:36:5f:a8:b8:2e:1e:53:0d:93:dc: bc:b1:2b:6b:9b:d0:f1:ea:1c:e3:b6:5a:ea:12:b6: c5:dd:94:2e:b4:b8:fa:71:85:bd:fa:b0:6a:7d:fc: a9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:42:A6:79:AF:03:7F:AB:AD:C2:1C:79:09:50:F1:C0:F5:B5:DE:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32b951b3-7d5c-3c6d-a937-61e9b953860f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f3:17:55:5a:cd:4d:54:f8:03:fe:8b:5b:d3:ad:ba:cb:22: 95:2c:3e:44:77:77:36:17:ff:cc:48:ee:4d:c1:2d:6b:41:cc: d3:a6:65:6c:cd:93:b3:1a:46:c3:ad:22:a7:35:26:30:a9:e9: a9:2e:24:3b:ed:01:84:83:30:ea:dd:74:c5:02:c4:92:01:e1: 78:d2:94:f0:25:a0:5f:d8:39:5e:40:c4:79:2e:5d:c5:ac:a2: 9d:56:cc:0b:82:bd:63:ec:a9:b1:8a:06:e6:1d:11:5a:37:21: 76:30:6e:df:e2:e7:ca:81:d8:c8:3a:c0:df:f0:fd:52:da:f3: 8d:42:a9:79:f2:97:53:9b:7a:7f:a5:bc:d3:f0:c6:16:f0:70: e7:07:5a:ea:da:1a:5c:1e:56:80:94:08:c1:26:1f:26:89:1c: 7a:87:6b:8e:2c:b7:19:0b:98:20:c3:84:34:b4:ee:f0:ef:e5: ff:bd:40:8a:43:a3:6d:cf:98:22:0d:b6:2b:33:3e:1f:16:9e: 0d:df:ea:32:51:2e:52:c2:7c:a6:34:b1:c2:80:a9:51:ef:dd: 06:b3:00:cb:47:b4:18:ae:92:51:ec:cd:f4:56:e1:01:f5:de: 0f:5c:2f:df:b3:48:71:c8:7d:29:11:3b:d4:29:9d:93:7f:b6: 20:6c:73:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw2S6V5GE5HdNS9AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxNzAyMDAzMVoXDTI2MDMxNzAxMDAzMVowLzEtMCsGA1UEAxMk NWZkZmFlMGEtMmJhOS00NzVlLTlkMmItNjk3ZjE2YjQwMzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVErPjTrbKGMNlDE4JkNR69RIPLL/06HFqWK pdWC8VeQiUqULMn98qyRM1E/JznlccTpLx8I1Verx7wW/XS1CNjXlPPE9wBBsuZ2 fcsDrJD+xSMQ4a07e0VfFGIAvJDFB92Tci2YX9ZriqhpMKUYDfJL8Hgjle/Mo8oE MMijrO1FicnwP0sh3crFmT8X48UUUKOUMqbSK63fT/kcgW3+G1VKXqlsSjnY+zcQ hwsY+1/dXSy6PJjtz569AQZHRUarFRlT0+UwcJ/98psHNqPpL/etesSQQzZfqLgu HlMNk9y8sStrm9Dx6hzjtlrqErbF3ZQutLj6cYW9+rBqffypUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpCpnmvA3+rrcIceQlQ8cD1td5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJiOTUxYjMtN2Q1Yy0z YzZkLWE5MzctNjFlOWI5NTM4NjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3zF1VazU1U+AP+i1vTrbrLIpUsPkR3dzYX/8xI7k3BLWtBzNOmZWzN k7MaRsOtIqc1JjCp6akuJDvtAYSDMOrddMUCxJIB4XjSlPAloF/YOV5AxHkuXcWs op1WzAuCvWPsqbGKBuYdEVo3IXYwbt/i58qB2Mg6wN/w/VLa841CqXnyl1Oben+l vNPwxhbwcOcHWuraGlweVoCUCMEmHyaJHHqHa44stxkLmCDDhDS07vDv5f+9QIpD o23PmCINtiszPh8Wng3f6jJRLlLCfKY0scKAqVHv3QazAMtHtBiuklHszfRW4QH1 3g9cL9+zSHHIfSkRO9QpnZN/tiBsc+A= -----END CERTIFICATE-----Generated at Sat Dec 20 06:02:58 2025 by rpki-client