This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3719b500-9dd3-3b95-a5c8-ba671be33033.roa File: 3719b500-9dd3-3b95-a5c8-ba671be33033.roa (raw, json) Hash identifier: VzS1qB0Wa9zs8IBV6pgLMNAca5+aA3Bzu+4H1I4Pp5c= Subject key identifier: 6E:C6:22:DA:8E:07:81:30:90:76:81:87:15:C9:DF:03:57:39:48:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3BE121BE799BF1F0D0BC5740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3719b500-9dd3-3b95-a5c8-ba671be33033.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.211.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:21:be:79:9b:f1:f0:d0:bc:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=45f1caaa-b8f2-4657-9053-4aa475f41712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:45:ac:8f:67:7d:d1:41:9e:68:58:04:75:c4: 3e:11:f4:09:f5:93:c4:2c:35:dd:36:44:de:18:39: e9:f4:d1:fd:c4:48:4d:89:06:bb:76:24:3f:47:13: 28:85:e4:24:02:9b:25:04:d1:24:d7:1e:ac:80:82: 37:92:19:04:1b:eb:48:d6:14:06:de:93:fb:53:a8: 89:0e:b8:ab:8f:71:85:a1:62:a2:57:1a:49:0d:14: 4b:be:15:36:9e:4c:15:a0:4e:90:29:52:3f:f0:96: ed:56:8c:17:31:18:e5:cb:47:cb:5c:2a:f5:5c:48: 46:c2:3d:c7:4e:c9:16:4d:c2:7f:ad:c6:92:b3:02: 64:09:4d:4b:41:2f:73:fd:ef:a8:be:4e:b4:b5:a8: 5f:2c:92:f0:2c:2d:39:14:45:45:8e:9f:6b:cf:92: 70:09:0e:4b:98:69:18:35:e1:bb:d3:1f:90:05:7f: 1a:31:aa:73:bb:bf:06:29:72:5d:75:d2:75:eb:d5: e6:6a:b4:4c:bd:ce:e5:ff:df:e6:19:d4:b0:a4:fc: 2a:14:4f:35:65:d9:b6:8f:9d:ad:d8:48:ed:2b:d4: b7:05:93:6a:c9:78:9e:5d:49:ee:81:8c:3e:79:6d: 8d:68:33:49:8b:4a:c5:67:1c:4a:35:20:5e:52:88: 9d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C6:22:DA:8E:07:81:30:90:76:81:87:15:C9:DF:03:57:39:48:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3719b500-9dd3-3b95-a5c8-ba671be33033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:52:6d:98:ec:c3:70:8f:f2:dd:4d:83:63:14:ef:37:c6:31: 1c:74:90:f9:4b:5c:7f:22:00:2d:48:45:ad:8c:16:54:e4:8d: ee:14:1f:1d:91:7f:37:cd:cf:b3:98:52:88:fa:18:3d:dc:1f: a3:13:33:76:bd:fc:50:05:94:0a:e2:9e:f5:1b:ed:50:23:e3: f7:2b:bf:0f:7d:89:3b:e6:02:3c:76:f9:05:f9:9d:cd:6f:16: c3:e5:03:d9:31:5a:bb:9e:23:fe:24:6f:50:9d:56:b0:c2:29: 87:76:a0:f0:a5:2d:1f:c8:cb:13:68:47:0b:1a:33:18:50:22: 0f:2d:c0:32:8c:1a:f6:1a:85:a2:0c:06:b4:2f:17:59:d7:5a: 99:9a:c8:97:f7:94:38:86:89:e8:80:b7:93:10:85:f2:56:a8: 80:ca:1a:02:b5:93:38:ac:b0:64:3e:6e:2f:eb:ef:91:f2:ad: d1:b4:5b:09:01:1c:61:8f:7b:35:a7:76:31:52:49:ba:0f:f2: ee:fe:b7:e7:c9:31:98:81:0f:e2:5a:0c:e3:96:f0:3b:23:a1: 51:e7:0e:17:5c:93:26:16:45:ad:d9:33:88:44:58:e5:a0:e8: 33:8a:7d:e3:8c:7e:f1:79:fb:10:a2:2b:43:68:20:60:40:64: 04:8a:59:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74SG+eZvx8NC8V0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk NDVmMWNhYWEtYjhmMi00NjU3LTkwNTMtNGFhNDc1ZjQxNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkWsj2d90UGeaFgEdcQ+EfQJ9ZPELDXdNkTe GDnp9NH9xEhNiQa7diQ/RxMoheQkApslBNEk1x6sgII3khkEG+tI1hQG3pP7U6iJ Drirj3GFoWKiVxpJDRRLvhU2nkwVoE6QKVI/8JbtVowXMRjly0fLXCr1XEhGwj3H TskWTcJ/rcaSswJkCU1LQS9z/e+ovk60tahfLJLwLC05FEVFjp9rz5JwCQ5LmGkY NeG70x+QBX8aMapzu78GKXJdddJ169XmarRMvc7l/9/mGdSwpPwqFE81Zdm2j52t 2EjtK9S3BZNqyXieXUnugYw+eW2NaDNJi0rFZxxKNSBeUoiddwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7GItqOB4EwkHaBhxXJ3wNXOUjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzcxOWI1MDAtOWRkMy0z Yjk1LWE1YzgtYmE2NzFiZTMzMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNSbZjsw3CP8t1Ng2MU7zfGMRx0kPlLXH8iAC1IRa2MFlTkje4UHx2R fzfNz7OYUoj6GD3cH6MTM3a9/FAFlArinvUb7VAj4/crvw99iTvmAjx2+QX5nc1v FsPlA9kxWrueI/4kb1CdVrDCKYd2oPClLR/IyxNoRwsaMxhQIg8twDKMGvYahaIM BrQvF1nXWpmayJf3lDiGieiAt5MQhfJWqIDKGgK1kzissGQ+bi/r75HyrdG0WwkB HGGPezWndjFSSboP8u7+t+fJMZiBD+JaDOOW8DsjoVHnDhdckyYWRa3ZM4hEWOWg 6DOKfeOMfvF5+xCiK0NoIGBAZASKWTc= -----END CERTIFICATE-----Generated at Sat Dec 20 01:19:12 2025 by rpki-client