This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa File: 32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa (raw, json) Hash identifier: Wut7W8LiA4ZWSGIbh04fSSR0T7wk+2CEc7Phc0K16cg= Subject key identifier: A1:8D:88:2E:87:92:66:F3:67:74:97:A7:49:60:ED:3E:5C:5D:A5:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3916604DD5E014F0C6B36280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 9498 IP address blocks: 23.206.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:60:4d:d5:e0:14:f0:c6:b3:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=82bb6147-8cee-47b9-a656-78139ae78791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3a:56:19:d3:20:63:94:c9:f3:a8:73:b8:bc: 09:19:2f:b8:bd:b2:f1:77:87:c8:7e:99:8f:e1:c8: c0:eb:d7:74:e4:91:4e:81:48:4e:02:2a:be:55:8b: 53:e2:f9:17:09:ca:05:81:7d:a6:bf:7d:30:55:b8: c7:03:68:b8:21:86:68:f6:f7:61:eb:12:9b:c7:dc: 65:c4:9c:46:a9:f5:67:62:54:7f:db:4e:db:dc:3f: 2f:9f:9b:40:08:c1:85:96:e4:f7:b9:3c:0b:cf:b2: f3:db:95:ef:d0:76:4a:df:36:1f:f5:ff:cd:5d:c5: 37:37:ed:96:7f:29:bb:7c:df:09:ce:d6:f3:2e:fe: 6c:15:19:31:58:f4:d2:73:f9:07:f2:8b:ee:d8:71: 25:79:38:3e:53:1c:3f:bb:a9:d7:2c:fc:e8:26:2a: ed:c3:21:69:96:37:b9:be:a5:9a:ad:b9:62:60:ee: 92:fe:8e:4a:09:77:4f:9f:7d:dc:14:37:6b:dd:11: 9e:eb:7e:46:44:51:65:4e:e1:94:07:ab:fa:40:f3: 45:a3:90:72:3e:c5:21:82:30:7d:66:f7:23:99:84: 6f:8d:d6:3b:ba:84:5b:c9:7f:10:32:db:2e:30:60: 7f:68:44:b3:df:4b:83:fd:2f:5d:14:13:82:18:e9: ec:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8D:88:2E:87:92:66:F3:67:74:97:A7:49:60:ED:3E:5C:5D:A5:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:25:51:29:7d:c5:97:0e:e9:ec:f2:df:b5:9f:fb:20:50:6d: dc:80:79:d9:54:32:83:09:98:f7:23:c8:07:d1:01:e4:d5:70: 77:12:cf:6b:a2:13:1e:c7:76:b7:c6:9b:13:7f:34:b4:ad:91: 38:6e:01:c0:c0:cb:e9:32:6a:cf:74:aa:12:0b:ab:57:7b:03: df:55:21:49:84:a4:cf:4b:b4:71:eb:61:b6:16:14:06:1e:46: 44:8d:ba:ba:65:bc:08:eb:08:5c:6c:52:a9:9d:db:72:9c:6b: 0c:e7:ee:ce:53:68:3d:ab:f7:e0:6f:62:93:1c:6a:bb:05:ab: a5:ed:74:b9:68:7e:1f:c1:bf:25:b1:b7:81:9a:10:ab:d0:7c: f3:8d:18:47:ca:da:2d:06:ed:7d:54:52:7d:17:81:e0:ba:d5: 4f:25:87:a1:a1:29:c4:92:f8:24:3c:da:9c:c6:42:fa:6e:7c: 56:08:6f:af:b2:4f:99:59:3d:4d:a7:76:cb:95:77:61:3b:e2: 53:bf:7c:74:32:11:d8:d2:f3:d9:67:30:ce:c3:55:e0:8f:95: ab:3d:0d:1c:ca:fd:68:12:9b:7b:d8:13:14:b8:9c:fa:86:b8: 4e:fd:86:ce:c5:ba:d8:57:0a:1f:00:a1:23:dd:96:d7:35:31: ee:b9:9d:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FmBN1eAU8MazYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk ODJiYjYxNDctOGNlZS00N2I5LWE2NTYtNzgxMzlhZTc4NzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzpWGdMgY5TJ86hzuLwJGS+4vbLxd4fIfpmP 4cjA69d05JFOgUhOAiq+VYtT4vkXCcoFgX2mv30wVbjHA2i4IYZo9vdh6xKbx9xl xJxGqfVnYlR/207b3D8vn5tACMGFluT3uTwLz7Lz25Xv0HZK3zYf9f/NXcU3N+2W fym7fN8JztbzLv5sFRkxWPTSc/kH8ovu2HEleTg+Uxw/u6nXLPzoJirtwyFplje5 vqWarbliYO6S/o5KCXdPn33cFDdr3RGe635GRFFlTuGUB6v6QPNFo5ByPsUhgjB9 ZvcjmYRvjdY7uoRbyX8QMtsuMGB/aESz30uD/S9dFBOCGOnsRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGNiC6HkmbzZ3SXp0lg7T5cXaXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJlMjhjZjQtOGI2OS0z M2M1LTk0OWItNGExYjNhYzcxZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF869MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEElUSl9xZcO6ezy37Wf+yBQbdyAedlUMoMJmPcjyAfRAeTVcHcSz2ui Ex7HdrfGmxN/NLStkThuAcDAy+kyas90qhILq1d7A99VIUmEpM9LtHHrYbYWFAYe RkSNurplvAjrCFxsUqmd23Kcawzn7s5TaD2r9+BvYpMcarsFq6XtdLlofh/BvyWx t4GaEKvQfPONGEfK2i0G7X1UUn0XgeC61U8lh6GhKcSS+CQ82pzGQvpufFYIb6+y T5lZPU2ndsuVd2E74lO/fHQyEdjS89lnMM7DVeCPlas9DRzK/WgSm3vYExS4nPqG uE79hs7FuthXCh8AoSPdltc1Me65nb4= -----END CERTIFICATE-----Generated at Fri Dec 19 14:30:37 2025 by rpki-client