This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3884b43a-e1d7-36f2-bf2b-dfc4de4c2420.roa File: 3884b43a-e1d7-36f2-bf2b-dfc4de4c2420.roa (raw, json) Hash identifier: 3i5T8UirzhNhWaUum6OUIcCP8x2P1DtQRyhxTFivv+g= Subject key identifier: 85:ED:DD:54:62:87:63:26:EE:74:58:13:89:78:3B:3B:D9:B4:E5:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3EABC44FDA2824D4740EEB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3884b43a-e1d7-36f2-bf2b-dfc4de4c2420.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.217.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:c4:4f:da:28:24:d4:74:0e:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=97828018-11f7-4d74-8d81-e4d0167187b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:2f:4d:28:cf:3e:5d:21:ef:bf:02:8f:c3: b1:b2:01:16:32:c4:c4:02:bf:01:c3:2a:81:40:40: 2f:1b:6f:9b:f9:21:6b:93:0e:42:84:05:76:ec:85: 11:98:b9:c5:2e:82:0b:09:f6:a0:57:6c:80:30:5d: 76:ac:32:dd:81:08:b3:21:cb:42:c4:9a:f6:f4:ba: a0:86:e4:e1:c7:4b:f7:80:6c:4b:e9:9e:25:ef:00: dc:ad:29:08:36:92:78:76:fa:9a:b3:79:cf:dd:70: 9f:c5:bf:b9:c9:96:96:e4:ad:b3:fe:f7:35:29:f2: fa:43:ca:b6:cc:e8:33:30:cf:81:b3:aa:b6:9c:3f: c5:ec:f7:ed:03:67:de:85:3e:cc:4c:fa:2a:e4:0c: f4:0c:80:20:7c:d2:fa:55:bd:18:0c:35:4f:66:cb: 72:97:9f:f3:6b:ae:b5:0b:2d:94:b0:35:2a:76:c4: 29:c3:39:b3:85:22:ef:f9:b0:8e:cb:70:8c:0e:36: 66:ce:41:f5:3d:51:d3:80:dc:a4:a2:d6:b6:32:37: ac:91:cf:76:7e:45:35:29:dc:5d:a9:a3:56:88:34: 41:6b:c7:be:f5:ac:df:18:d8:96:7e:eb:01:55:e2: f2:a6:a9:8b:41:e2:a1:4d:6f:af:a7:00:cb:69:f9: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:ED:DD:54:62:87:63:26:EE:74:58:13:89:78:3B:3B:D9:B4:E5:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3884b43a-e1d7-36f2-bf2b-dfc4de4c2420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c5:25:46:1e:f7:fa:0a:a8:7b:ea:d2:76:e5:b5:56:26:69: 8e:ef:8b:42:7c:12:30:5c:2f:91:ea:8b:bb:00:a2:11:a1:17: 22:e6:e7:9f:fc:9b:a2:b6:42:51:8a:e0:68:49:e7:82:7c:87: 1c:3e:a0:ee:b1:eb:ef:00:0f:01:61:af:ca:3a:ba:0d:36:5e: 76:af:4d:1f:b6:d7:b1:21:38:53:8b:93:47:cc:0d:f0:6e:49: bd:0f:d0:9d:9c:81:e6:66:b7:3d:c6:78:2f:b8:63:6d:b6:4d: 91:c9:74:54:a5:f9:58:e2:42:65:ea:86:41:2e:69:83:76:c0: 19:c7:f7:6a:c6:ea:c5:69:8a:4f:69:72:70:fd:7a:35:e8:e6: eb:6e:f8:72:7e:0b:ab:83:17:39:44:cb:bc:5f:92:dd:03:d3: 25:0d:c1:f5:8e:bc:00:ea:c9:14:23:32:c4:b8:f4:bc:1b:bd: db:28:8e:ce:91:57:d6:fa:e6:5a:b7:73:70:55:63:aa:52:55: bf:68:43:64:e4:c8:99:94:b7:f7:20:d5:f6:dc:ab:b8:00:99: c0:d1:19:b5:3b:11:58:88:06:2a:41:b4:38:22:87:18:da:ac: 9e:b8:85:9d:30:f6:11:92:1b:cc:3e:52:b4:aa:04:2f:cd:e5: c7:3d:90:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q8RP2igk1HQO6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk OTc4MjgwMTgtMTFmNy00ZDc0LThkODEtZTRkMDE2NzE4N2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVcvTSjPPl0h778Cj8OxsgEWMsTEAr8BwyqB QEAvG2+b+SFrkw5ChAV27IURmLnFLoILCfagV2yAMF12rDLdgQizIctCxJr29Lqg huThx0v3gGxL6Z4l7wDcrSkINpJ4dvqas3nP3XCfxb+5yZaW5K2z/vc1KfL6Q8q2 zOgzMM+Bs6q2nD/F7PftA2fehT7MTPoq5Az0DIAgfNL6Vb0YDDVPZstyl5/za661 Cy2UsDUqdsQpwzmzhSLv+bCOy3CMDjZmzkH1PVHTgNykota2Mjeskc92fkU1Kdxd qaNWiDRBa8e+9azfGNiWfusBVeLypqmLQeKhTW+vpwDLafl8IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXt3VRih2Mm7nRYE4l4OzvZtOU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzg4NGI0M2EtZTFkNy0z NmYyLWJmMmItZGZjNGRlNGMyNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9mYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvFJUYe9/oKqHvq0nbltVYmaY7vi0J8EjBcL5Hqi7sAohGhFyLm55/8 m6K2QlGK4GhJ54J8hxw+oO6x6+8ADwFhr8o6ug02XnavTR+217EhOFOLk0fMDfBu Sb0P0J2cgeZmtz3GeC+4Y222TZHJdFSl+VjiQmXqhkEuaYN2wBnH92rG6sVpik9p cnD9ejXo5utu+HJ+C6uDFzlEy7xfkt0D0yUNwfWOvADqyRQjMsS49Lwbvdsojs6R V9b65lq3c3BVY6pSVb9oQ2TkyJmUt/cg1fbcq7gAmcDRGbU7EViIBipBtDgihxja rJ64hZ0w9hGSG8w+UrSqBC/N5cc9kBs= -----END CERTIFICATE-----Generated at Sat Dec 20 05:29:19 2025 by rpki-client