This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3643e9a3-5dd6-3ccd-9574-d69efc862c58.roa File: 3643e9a3-5dd6-3ccd-9574-d69efc862c58.roa (raw, json) Hash identifier: 612V1Cf2FGBKYraY2VXI2Q7FZ1AQ66DOpnkwKHbzbr0= Subject key identifier: C8:73:AC:6C:D2:2A:A9:F2:C7:0B:DD:BB:F9:87:C2:AC:C4:84:78:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C242659815A2E5D88D51B1480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3643e9a3-5dd6-3ccd-9574-d69efc862c58.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 20940 IP address blocks: 23.195.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:59:81:5a:2e:5d:88:d5:1b:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=2a231393-4636-4c54-908d-d506bc726496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:ac:50:0d:c7:22:c1:ce:21:42:f8:26:51: 89:35:db:9f:75:cb:53:f7:c9:f9:28:70:66:4b:bc: c8:1f:e3:f7:cf:49:ce:1b:f7:be:13:52:86:90:40: 55:fc:c1:49:18:79:7b:f6:a8:52:9b:ed:54:ee:a3: e3:d4:fd:94:f7:34:7f:71:f5:c8:0a:b1:84:ae:e3: be:db:a1:64:f7:c1:9d:2f:a6:f5:1a:62:39:42:a4: 60:67:27:2c:a4:da:7f:e3:7d:2f:c5:5c:1b:50:70: 33:92:c9:ba:23:7a:6a:84:18:bd:3a:38:d1:b8:22: 33:55:75:f8:4b:d7:4f:f4:cf:87:48:73:74:76:cc: f3:1d:f0:94:22:3a:bd:0c:e5:b6:b3:18:f9:75:a1: 63:8e:61:a2:14:30:43:06:f9:d8:e4:db:f7:b4:5e: 57:7a:fc:1e:e9:29:36:23:e3:48:e0:7d:90:a7:89: 4b:e0:21:2c:2b:d3:1a:df:7e:31:f1:de:e3:8e:2e: 1e:61:39:20:d7:15:a7:51:4f:53:e1:f1:69:1e:cd: 01:39:a0:db:4c:68:85:ed:5d:8c:a9:28:1d:52:31: b1:2d:e0:e5:c5:52:9c:14:db:7d:84:97:13:3f:5d: bf:44:55:96:c6:90:42:5c:55:d9:5e:97:8a:1d:b1: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:73:AC:6C:D2:2A:A9:F2:C7:0B:DD:BB:F9:87:C2:AC:C4:84:78:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3643e9a3-5dd6-3ccd-9574-d69efc862c58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f6:2e:2c:14:f9:1d:13:89:6b:52:41:87:b9:58:49:9c:e3: 40:5f:ad:df:ba:97:fa:01:6c:a8:3f:38:49:7d:65:b9:8b:ad: 45:85:8d:ba:ad:30:a8:07:43:e2:44:9f:a7:49:0e:22:3b:bc: 8f:72:65:0d:b6:a4:42:66:d9:47:3d:29:ed:e9:9e:bb:3b:f7: d0:b7:00:06:7e:b0:1b:05:31:b6:0f:d0:96:29:a6:a7:6a:9c: c6:43:14:e8:f8:21:80:6e:b5:11:9f:c1:9b:03:55:ed:d8:34: e2:08:c3:60:a0:5d:bf:b2:ae:7d:f2:f6:71:31:e6:73:bb:7a: 18:80:86:d3:51:48:94:2f:81:04:1a:76:2d:54:11:d0:cc:05: 4c:13:91:54:7d:b4:24:84:01:05:3d:03:ed:f6:ef:8e:f9:70: 2d:0a:27:ad:b7:f8:80:4d:2b:b8:4f:59:73:0a:5b:86:35:ed: df:66:c9:7f:45:ac:e2:52:39:d8:69:eb:46:3f:22:2a:f1:7b: 68:bb:f4:34:bb:bb:69:30:eb:d8:79:a7:36:93:f5:7f:0c:ea: 4f:0a:2f:8b:2a:0e:a9:51:55:f4:f0:25:6a:bf:29:31:58:f6: f2:b1:13:43:5b:da:62:72:e9:87:ea:7b:1d:a1:0a:91:57:6b: cc:30:b1:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJlmBWi5diNUbFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk MmEyMzEzOTMtNDYzNi00YzU0LTkwOGQtZDUwNmJjNzI2NDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdmsUA3HIsHOIUL4JlGJNdufdctT98n5KHBm S7zIH+P3z0nOG/e+E1KGkEBV/MFJGHl79qhSm+1U7qPj1P2U9zR/cfXICrGEruO+ 26Fk98GdL6b1GmI5QqRgZycspNp/430vxVwbUHAzksm6I3pqhBi9OjjRuCIzVXX4 S9dP9M+HSHN0dszzHfCUIjq9DOW2sxj5daFjjmGiFDBDBvnY5Nv3tF5Xevwe6Sk2 I+NI4H2Qp4lL4CEsK9Ma334x8d7jji4eYTkg1xWnUU9T4fFpHs0BOaDbTGiF7V2M qSgdUjGxLeDlxVKcFNt9hJcTP12/RFWWxpBCXFXZXpeKHbFlBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhzrGzSKqnyxwvdu/mHwqzEhHjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzY0M2U5YTMtNWRkNi0z Y2NkLTk1NzQtZDY5ZWZjODYyYzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8P8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL2LiwU+R0TiWtSQYe5WEmc40Bfrd+6l/oBbKg/OEl9ZbmLrUWFjbqt MKgHQ+JEn6dJDiI7vI9yZQ22pEJm2Uc9Ke3pnrs799C3AAZ+sBsFMbYP0JYppqdq nMZDFOj4IYButRGfwZsDVe3YNOIIw2CgXb+yrn3y9nEx5nO7ehiAhtNRSJQvgQQa di1UEdDMBUwTkVR9tCSEAQU9A+327475cC0KJ623+IBNK7hPWXMKW4Y17d9myX9F rOJSOdhp60Y/Iirxe2i79DS7u2kw69h5pzaT9X8M6k8KL4sqDqlRVfTwJWq/KTFY 9vKxE0Nb2mJy6Yfqex2hCpFXa8wwsbI= -----END CERTIFICATE-----Generated at Sun Dec 21 02:59:31 2025 by rpki-client