This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dbba2b8-f522-3410-8a9a-314139750962.roa File: 3dbba2b8-f522-3410-8a9a-314139750962.roa (raw, json) Hash identifier: aLlD+t3SiemgHT8sez/oGs80/9pijeZJAPe+1YOkDSI= Subject key identifier: 6A:B6:A3:F0:93:55:7A:5D:61:E9:AA:A5:25:BC:B8:2D:80:07:76:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3EABC24885F624833F3F9980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dbba2b8-f522-3410-8a9a-314139750962.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.216.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:c2:48:85:f6:24:83:3f:3f:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=aa72584f-bf1b-4903-b5aa-dfdde4a25cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:29:39:20:a2:ac:0c:e9:48:d0:bc:f7:e2:5f: 61:32:d0:16:b6:9f:3b:ad:38:29:1e:4f:6e:b0:d6: 6c:e9:31:b9:86:23:b2:9b:3f:0d:44:04:37:a9:55: 5b:78:46:9f:77:38:e3:f1:d8:26:3b:99:03:12:9b: 05:8d:1f:d0:82:b1:af:03:32:56:78:2a:3c:66:bc: 33:f7:aa:9d:5b:66:e6:cd:cb:ac:aa:18:d9:fc:c4: 52:92:ed:7b:69:7c:91:28:17:b8:20:46:68:ee:9c: a4:bf:90:19:e5:5f:c4:b5:59:6b:4e:ac:d2:41:0d: 2d:0c:80:0c:ca:97:21:89:d7:52:ed:91:ca:5c:fd: db:ba:82:3e:60:eb:69:17:59:70:75:d7:7f:ec:df: a3:4d:4a:25:f7:ec:c8:03:3c:33:fb:f5:80:a4:7c: ec:dc:bb:77:13:c9:27:6c:35:b1:b2:f6:f0:0c:89: 98:61:36:3b:66:ec:1f:be:06:3e:67:a5:23:f7:a1: 3b:16:47:35:27:7d:13:c4:bb:13:43:83:fc:a8:e8: 9a:5f:e3:45:6b:63:9e:e0:a2:4a:c6:a5:bf:12:98: 4c:c6:d8:82:f1:5c:dc:43:50:c3:c8:ea:59:3a:64: 88:fe:46:3d:17:7e:b0:af:c1:44:69:cc:5d:9c:44: 1b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B6:A3:F0:93:55:7A:5D:61:E9:AA:A5:25:BC:B8:2D:80:07:76:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dbba2b8-f522-3410-8a9a-314139750962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f4:42:91:85:2b:24:47:16:71:5f:59:70:a3:80:b5:88:06: 80:2c:f5:23:eb:b1:1d:22:3b:39:51:0f:84:54:7d:bf:73:65: d9:73:02:18:17:ce:52:4c:29:5c:ec:71:8f:48:0c:34:d8:76: 3d:66:57:46:cd:c1:fc:dd:0b:60:12:26:d8:e7:0a:ca:15:ed: e0:a8:8e:e9:bd:03:49:88:60:9a:61:42:3e:ba:33:16:db:0a: af:b6:b0:23:6c:5d:66:33:2c:69:7a:cd:cf:ab:5c:e7:ab:02: 0a:7e:69:53:7e:a9:b4:a5:9e:43:06:1f:4d:3b:9d:b0:fa:a8: e8:f9:5c:64:ec:11:8a:27:a6:3a:a3:eb:bb:19:76:a2:a2:9d: 7c:c7:ce:a5:81:78:e3:9e:63:70:d4:34:08:4b:3a:10:42:67: cd:2b:73:19:46:13:75:b8:cb:44:5d:52:b8:7f:c9:72:b7:8d: 20:a4:ac:06:19:9e:3b:62:9d:ee:7d:42:24:33:49:de:78:d3: d0:d5:04:68:c3:eb:0c:87:f1:d6:b7:fb:48:48:1f:ca:70:ad: 48:6b:89:f5:5c:63:c3:d9:5e:b5:ca:c2:25:54:d2:de:63:e6: 2d:52:04:16:0f:c1:fe:1d:3b:38:72:f8:41:f6:3f:df:b5:00: 06:db:75:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q8JIhfYkgz8/mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk YWE3MjU4NGYtYmYxYi00OTAzLWI1YWEtZGZkZGU0YTI1Y2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyk5IKKsDOlI0Lz34l9hMtAWtp87rTgpHk9u sNZs6TG5hiOymz8NRAQ3qVVbeEafdzjj8dgmO5kDEpsFjR/QgrGvAzJWeCo8Zrwz 96qdW2bmzcusqhjZ/MRSku17aXyRKBe4IEZo7pykv5AZ5V/EtVlrTqzSQQ0tDIAM ypchiddS7ZHKXP3buoI+YOtpF1lwddd/7N+jTUol9+zIAzwz+/WApHzs3Lt3E8kn bDWxsvbwDImYYTY7ZuwfvgY+Z6Uj96E7Fkc1J30TxLsTQ4P8qOiaX+NFa2Oe4KJK xqW/EphMxtiC8VzcQ1DDyOpZOmSI/kY9F36wr8FEacxdnEQbawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGq2o/CTVXpdYemqpSW8uC2AB3bhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2RiYmEyYjgtZjUyMi0z NDEwLThhOWEtMzE0MTM5NzUwOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9icMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn0QpGFKyRHFnFfWXCjgLWIBoAs9SPrsR0iOzlRD4RUfb9zZdlzAhgX zlJMKVzscY9IDDTYdj1mV0bNwfzdC2ASJtjnCsoV7eCojum9A0mIYJphQj66Mxbb Cq+2sCNsXWYzLGl6zc+rXOerAgp+aVN+qbSlnkMGH007nbD6qOj5XGTsEYonpjqj 67sZdqKinXzHzqWBeOOeY3DUNAhLOhBCZ80rcxlGE3W4y0RdUrh/yXK3jSCkrAYZ njtine59QiQzSd5409DVBGjD6wyH8da3+0hIH8pwrUhrifVcY8PZXrXKwiVU0t5j 5i1SBBYPwf4dOzhy+EH2P9+1AAbbde4= -----END CERTIFICATE-----Generated at Sat Dec 20 03:53:34 2025 by rpki-client