This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bfa53bc-cfbe-30d3-ba27-24fd90b159a6.roa File: 4bfa53bc-cfbe-30d3-ba27-24fd90b159a6.roa (raw, json) Hash identifier: bczXI0ukI/tAdNQgMJuq9VFU9DFxBRzo9jUhJPBopFY= Subject key identifier: 11:CC:FE:27:D6:5B:9D:14:2C:F8:3C:9A:7C:BB:9C:3C:43:E0:A4:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3BE11DEA60C4D56810F49100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bfa53bc-cfbe-30d3-ba27-24fd90b159a6.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.209.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:1d:ea:60:c4:d5:68:10:f4:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=ddff9e56-c023-42d0-9e99-d7c89096079c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:44:8b:4b:11:8e:e0:bd:43:55:01:9e:e2:b0: 1c:b7:56:5b:d1:c1:fc:c0:df:29:9d:01:36:1c:fb: 03:1a:a7:6c:be:70:50:d9:80:01:2c:98:12:88:1d: 6c:27:87:a0:5f:de:41:14:40:91:4d:27:f7:a0:9d: a3:b1:ac:a0:41:e3:b9:c3:38:2f:3a:64:d7:37:b2: 53:97:7c:31:0c:83:47:20:f5:52:66:1b:c0:5a:2f: 02:c2:8e:ac:0e:ba:cd:79:40:06:16:ec:dd:c7:99: ed:ed:6a:8e:ab:ec:c3:04:be:25:d4:87:27:5a:3c: 81:32:f6:3b:74:05:7d:a1:e9:8a:c0:36:a2:95:f0: ca:61:b6:8e:53:bf:ac:9e:c1:9d:13:30:68:40:34: 1e:b6:e5:c1:e8:36:b3:14:53:d6:6a:91:3d:ed:9a: 8a:df:13:1a:15:23:3a:3c:a3:41:b9:45:53:81:17: 06:95:68:b4:8e:c7:9b:06:c7:80:73:b7:69:0a:68: b9:47:7c:30:21:01:81:49:55:4c:36:fc:b1:70:2a: a3:b7:2a:6a:0f:c9:56:18:ca:ed:9a:c6:50:35:2c: 1c:f8:20:5c:49:3d:1a:ad:c3:e4:5d:e9:65:89:cc: 75:ab:3b:ef:e8:bc:1a:af:50:9b:8a:f4:d0:a9:b6: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CC:FE:27:D6:5B:9D:14:2C:F8:3C:9A:7C:BB:9C:3C:43:E0:A4:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bfa53bc-cfbe-30d3-ba27-24fd90b159a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:85:8b:d9:3a:08:f2:e6:36:90:88:55:d4:ff:6e:f4:51:33: 5a:b2:e3:b9:a5:45:62:60:d3:51:07:2e:d3:e3:83:e7:26:0a: e9:66:ec:38:50:1a:db:8d:78:c9:db:0c:7c:b2:39:4f:fc:70: 27:34:b7:95:fc:8a:6a:df:7b:ba:8d:1d:1c:64:f4:7c:c1:eb: 9f:99:08:9b:1f:b4:1f:88:b6:04:f6:a7:a7:f1:11:dd:4c:55: 8f:30:65:70:7c:8f:d0:07:4a:d6:41:98:89:4e:bf:77:8f:c3: 4d:50:a9:1e:6d:d4:ff:56:6a:47:68:93:b5:65:b1:83:1c:91: a2:ee:d9:cd:77:62:c0:a0:85:87:75:55:7f:2a:67:8d:b8:95: 8f:30:20:89:f1:d7:66:8c:3a:e6:f3:87:dd:d0:96:4a:28:9d: cb:75:1d:d8:a6:10:da:1f:25:88:d1:ab:d2:8b:86:b3:33:cc: c4:de:89:f1:60:3e:28:81:e3:8d:91:9d:92:d1:ed:9e:50:98: 3d:4e:7e:5a:d1:ca:b6:87:39:e9:95:85:f9:07:87:f2:fa:da: cc:3a:d1:c0:01:37:6a:6e:8c:5a:29:87:ee:be:d5:29:a7:b8: 38:a9:c8:10:7b:c4:c2:f2:d3:4e:ec:d3:d2:c2:1d:9f:d6:bd: f1:05:b8:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74R3qYMTVaBD0kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZGRmZjllNTYtYzAyMy00MmQwLTllOTktZDdjODkwOTYwNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60SLSxGO4L1DVQGe4rAct1Zb0cH8wN8pnQE2 HPsDGqdsvnBQ2YABLJgSiB1sJ4egX95BFECRTSf3oJ2jsaygQeO5wzgvOmTXN7JT l3wxDINHIPVSZhvAWi8Cwo6sDrrNeUAGFuzdx5nt7WqOq+zDBL4l1IcnWjyBMvY7 dAV9oemKwDailfDKYbaOU7+snsGdEzBoQDQetuXB6DazFFPWapE97ZqK3xMaFSM6 PKNBuUVTgRcGlWi0jsebBseAc7dpCmi5R3wwIQGBSVVMNvyxcCqjtypqD8lWGMrt msZQNSwc+CBcST0arcPkXellicx1qzvv6Lwar1CbivTQqbbN+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHM/ifWW50ULPg8mny7nDxD4KQjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGJmYTUzYmMtY2ZiZS0z MGQzLWJhMjctMjRmZDkwYjE1OWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9EwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWFi9k6CPLmNpCIVdT/bvRRM1qy47mlRWJg01EHLtPjg+cmCulm7DhQ GtuNeMnbDHyyOU/8cCc0t5X8imrfe7qNHRxk9HzB65+ZCJsftB+ItgT2p6fxEd1M VY8wZXB8j9AHStZBmIlOv3ePw01QqR5t1P9Wakdok7VlsYMckaLu2c13YsCghYd1 VX8qZ424lY8wIInx12aMOubzh93Qlkoonct1HdimENofJYjRq9KLhrMzzMTeifFg PiiB442RnZLR7Z5QmD1OflrRyraHOemVhfkHh/L62sw60cABN2pujFoph+6+1Smn uDipyBB7xMLy007s09LCHZ/WvfEFuGw= -----END CERTIFICATE-----Generated at Wed Dec 24 13:38:45 2025 by rpki-client