This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bbc86b0-fd82-3504-abac-b7575e1605ff.roa File: 4bbc86b0-fd82-3504-abac-b7575e1605ff.roa (raw, json) Hash identifier: f0JtdfBB8yltjoXsGTyA0WsOC8vWV1R5ryczl0eFTYo= Subject key identifier: 2D:47:67:D0:4F:EB:10:B9:B7:AD:F6:FB:21:82:3E:B5:99:68:F1:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C29BBE2A143CCB6F3B73921E8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bbc86b0-fd82-3504-abac-b7575e1605ff.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 16625 IP address blocks: 23.203.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:e2:a1:43:cc:b6:f3:b7:39:21:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=24e59fd9-00d7-4fab-aac6-b4a6a52af537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:59:f3:83:32:76:00:11:78:c0:be:d9:d0:b5: f8:93:89:c1:6a:f6:5c:ce:be:cb:76:b6:07:48:9b: ac:ce:03:d6:14:1d:55:36:7e:34:29:84:2e:f7:b5: 32:f6:6c:85:10:ca:bb:26:db:57:6d:0e:74:5d:cf: e1:b5:64:41:a7:65:29:37:31:dd:45:89:41:ba:fe: dc:ad:73:4c:08:f9:2a:53:64:12:c7:a3:c0:a7:26: f3:b0:20:f7:7a:11:bd:41:44:6b:e5:01:93:97:e2: 33:dc:dd:56:ce:44:1f:5e:d2:76:1e:5f:d0:a9:f1: f0:fa:cf:3a:33:19:09:ac:39:59:c9:eb:9f:e0:93: 84:ce:81:80:ba:6e:78:c8:3e:6a:40:1a:e4:90:25: ab:a9:92:9a:d9:fa:61:27:bd:53:c8:5a:c7:53:f8: bd:09:27:06:7a:26:8e:6e:0a:87:ce:d2:37:bb:7a: f5:e5:ab:8e:21:50:41:3a:49:f4:35:a0:70:c9:ec: 21:c5:a0:12:7e:c9:4b:bb:f5:5a:69:9e:6b:ea:b6: c5:3d:31:d1:d9:37:b3:e7:17:fd:77:c4:f2:d0:55: cf:a7:4a:9b:44:16:45:38:60:3a:d6:4b:b9:32:5e: 95:67:3b:83:40:b9:dc:fe:14:96:a2:05:21:8f:6b: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:47:67:D0:4F:EB:10:B9:B7:AD:F6:FB:21:82:3E:B5:99:68:F1:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bbc86b0-fd82-3504-abac-b7575e1605ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:37:44:f5:04:7e:fc:d0:83:60:1a:b7:8b:40:0c:63:68:a3: 0f:3d:f4:fc:82:c5:0e:71:a3:3e:7d:0a:4a:0d:95:dd:51:74: 87:9e:44:78:50:a0:cd:a4:f8:de:9e:7e:de:e9:11:91:b1:f2: 1a:1a:aa:57:e9:2c:d3:0a:6d:d6:e6:8e:d0:0c:e2:58:43:ab: 59:99:83:b3:7f:7b:ab:41:b1:c9:71:b5:20:6c:6a:e7:a2:91: 59:eb:db:ad:ac:e5:22:54:02:c8:60:53:b3:0f:91:79:07:b4: be:0a:33:f2:bf:e2:ed:b3:64:49:4a:d8:b9:e2:b0:58:24:c0: 06:e8:50:49:df:13:79:4a:47:b0:0e:fa:46:ec:8e:8e:07:5c: e9:85:c7:3b:20:57:a7:c8:b0:43:b6:57:ae:11:44:bf:61:29: 03:8a:89:d6:12:ad:bf:19:8f:08:b8:c6:4f:71:19:3c:2f:94: 58:36:64:1e:8b:15:db:a5:cc:da:2f:e0:18:4f:9f:2e:b7:13: 5e:eb:5e:56:f6:a8:96:0a:1e:2d:92:cf:9b:6a:d3:71:3b:84: a0:6a:63:b8:66:96:79:9f:f9:77:ae:61:4f:ea:e0:62:a3:ca: 6a:c0:7a:62:0c:22:ed:02:ae:2c:25:da:8d:ba:e3:06:9d:c4: da:38:25:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwpu+KhQ8y287c5IegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk MjRlNTlmZDktMDBkNy00ZmFiLWFhYzYtYjRhNmE1MmFmNTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1nzgzJ2ABF4wL7Z0LX4k4nBavZczr7LdrYH SJuszgPWFB1VNn40KYQu97Uy9myFEMq7JttXbQ50Xc/htWRBp2UpNzHdRYlBuv7c rXNMCPkqU2QSx6PApybzsCD3ehG9QURr5QGTl+Iz3N1WzkQfXtJ2Hl/QqfHw+s86 MxkJrDlZyeuf4JOEzoGAum54yD5qQBrkkCWrqZKa2fphJ71TyFrHU/i9CScGeiaO bgqHztI3u3r15auOIVBBOkn0NaBwyewhxaASfslLu/VaaZ5r6rbFPTHR2Tez5xf9 d8Ty0FXPp0qbRBZFOGA61ku5Ml6VZzuDQLnc/hSWogUhj2sucQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1HZ9BP6xC5t632+yGCPrWZaPE9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGJiYzg2YjAtZmQ4Mi0z NTA0LWFiYWMtYjc1NzVlMTYwNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8scMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ3RPUEfvzQg2Aat4tADGNoow899PyCxQ5xoz59CkoNld1RdIeeRHhQ oM2k+N6eft7pEZGx8hoaqlfpLNMKbdbmjtAM4lhDq1mZg7N/e6tBsclxtSBsauei kVnr262s5SJUAshgU7MPkXkHtL4KM/K/4u2zZElK2LnisFgkwAboUEnfE3lKR7AO +kbsjo4HXOmFxzsgV6fIsEO2V64RRL9hKQOKidYSrb8Zjwi4xk9xGTwvlFg2ZB6L FdulzNov4BhPny63E17rXlb2qJYKHi2Sz5tq03E7hKBqY7hmlnmf+XeuYU/q4GKj ymrAemIMIu0Criwl2o264wadxNo4JW8= -----END CERTIFICATE-----Generated at Sat Dec 20 02:58:57 2025 by rpki-client