This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3aaaa0b2-15ef-3600-bcb6-4019d62b0553.roa File: 3aaaa0b2-15ef-3600-bcb6-4019d62b0553.roa (raw, json) Hash identifier: ngOZHVeKluMIdez64bXW0Cai1Cq6tyM/JrBFuKWGcCs= Subject key identifier: 5C:52:1F:94:84:82:F9:58:77:C9:82:AB:18:F6:4C:39:DF:3E:A4:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C26F0E618320D1C3E8886623C Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3aaaa0b2-15ef-3600-bcb6-4019d62b0553.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 16625 IP address blocks: 23.199.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:e6:18:32:0d:1c:3e:88:86:62:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=d2295174-2792-4989-9c32-99c81ac922b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c9:d1:56:dd:51:76:26:66:91:93:2a:74:f3: 4c:c6:4a:3f:43:e6:a7:33:04:e6:72:1d:d9:77:b5: ef:64:c9:f9:f2:7d:2e:85:60:6a:db:d8:29:53:35: 53:da:3c:b4:8c:0e:84:60:15:ae:88:07:48:44:4d: d9:09:2a:36:22:1e:b3:12:57:e2:ba:8d:b8:62:9c: 56:66:b3:e6:e1:43:73:10:d0:35:fe:e5:55:0c:9f: 76:0a:12:ad:cc:18:7d:39:0d:30:ca:f2:b1:08:85: 71:ab:40:6c:d2:05:da:b8:44:04:e2:a0:67:b2:8d: 1d:2e:61:c0:18:bd:f1:47:67:07:17:e3:e7:f1:dd: 69:51:55:fa:46:80:f5:81:6c:50:65:78:be:2d:30: b7:bf:03:da:4a:be:a2:30:11:bf:64:17:1b:ab:cc: 00:f8:8b:d8:f1:68:46:1b:d1:d9:b9:7b:7c:c6:96: 2e:b4:fa:2a:2c:08:27:9e:00:49:20:84:a7:e4:41: 4a:d0:86:c8:3e:d7:8b:7d:22:05:00:e0:b5:7d:75: a1:68:bf:cb:ab:de:17:dc:3f:db:b9:a7:2e:82:2a: 1c:61:9f:dc:a4:fa:26:5f:1c:06:59:50:11:0e:5f: f7:73:de:17:0b:19:28:40:da:66:1b:a4:bf:84:f3: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:52:1F:94:84:82:F9:58:77:C9:82:AB:18:F6:4C:39:DF:3E:A4:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3aaaa0b2-15ef-3600-bcb6-4019d62b0553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0f:e8:ad:f9:30:70:29:e8:44:d6:76:20:bc:1c:0b:c4:e1: a4:92:da:a3:3b:3f:42:02:2c:be:59:18:f1:88:88:d2:96:ab: 4b:66:d8:76:00:de:37:e8:f4:0a:59:47:df:2c:a7:78:2a:be: 13:72:1f:df:6d:fd:44:33:81:81:2e:89:fa:22:53:57:c6:57: 5e:11:1b:7a:98:1a:09:6f:73:69:cd:38:60:63:fe:2f:c9:12: 93:34:82:9a:7a:6c:e0:46:93:46:fe:7a:b0:ff:76:28:b1:a3: 3c:6c:7d:43:38:d5:45:88:05:20:ee:cc:ec:9a:6b:1c:8b:29: 19:b7:f0:82:ea:d6:22:f0:69:9c:c5:b3:00:1c:bd:28:69:83: 99:a7:cf:f3:85:42:cb:f9:ef:68:d5:94:3b:75:9f:29:d0:30: 67:45:37:ea:c9:a0:6d:50:0c:34:a6:0e:02:1a:3f:0a:05:b1: 2d:18:38:e6:a2:fe:c6:da:06:76:6e:03:1a:16:8f:6a:71:61: da:c5:3b:d5:cf:c4:cf:b5:7b:0a:b8:6c:fc:9d:05:af:ed:d8: fd:2e:d0:10:8d:ad:bf:0d:c5:10:72:ca:79:ee:81:44:34:d0: d6:14:b7:5d:fe:4d:c5:03:72:45:9f:c0:65:9a:1b:03:fe:11: 30:e4:b1:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwm8OYYMg0cPoiGYjwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk ZDIyOTUxNzQtMjc5Mi00OTg5LTljMzItOTljODFhYzkyMmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMnRVt1RdiZmkZMqdPNMxko/Q+anMwTmch3Z d7XvZMn58n0uhWBq29gpUzVT2jy0jA6EYBWuiAdIRE3ZCSo2Ih6zElfiuo24YpxW ZrPm4UNzENA1/uVVDJ92ChKtzBh9OQ0wyvKxCIVxq0Bs0gXauEQE4qBnso0dLmHA GL3xR2cHF+Pn8d1pUVX6RoD1gWxQZXi+LTC3vwPaSr6iMBG/ZBcbq8wA+IvY8WhG G9HZuXt8xpYutPoqLAgnngBJIISn5EFK0IbIPteLfSIFAOC1fXWhaL/Lq94X3D/b uacugiocYZ/cpPomXxwGWVARDl/3c94XCxkoQNpmG6S/hPMwNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxSH5SEgvlYd8mCqxj2TDnfPqTOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FhYWEwYjItMTVlZi0z NjAwLWJjYjYtNDAxOWQ2MmIwNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8fAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwP6K35MHAp6ETWdiC8HAvE4aSS2qM7P0ICLL5ZGPGIiNKWq0tm2HYA 3jfo9ApZR98sp3gqvhNyH99t/UQzgYEuifoiU1fGV14RG3qYGglvc2nNOGBj/i/J EpM0gpp6bOBGk0b+erD/diixozxsfUM41UWIBSDuzOyaaxyLKRm38ILq1iLwaZzF swAcvShpg5mnz/OFQsv572jVlDt1nynQMGdFN+rJoG1QDDSmDgIaPwoFsS0YOOai /sbaBnZuAxoWj2pxYdrFO9XPxM+1ewq4bPydBa/t2P0u0BCNrb8NxRByynnugUQ0 0NYUt13+TcUDckWfwGWaGwP+ETDksYY= -----END CERTIFICATE-----Generated at Sat Dec 20 02:58:06 2025 by rpki-client