This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d66da6-9cd0-3802-a69f-d43c544a57ec.roa File: 68d66da6-9cd0-3802-a69f-d43c544a57ec.roa (raw, json) Hash identifier: QXKS3ezlJsFD4BzimabI8uT2u+xkIDTONRKha7BVtUU= Subject key identifier: 86:7B:08:90:B6:FA:92:D9:84:04:80:DA:4A:00:92:AA:8D:11:FD:D6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3BE12484AD009EC8D5E93880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d66da6-9cd0-3802-a69f-d43c544a57ec.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.212.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:24:84:ad:00:9e:c8:d5:e9:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=1e1651bf-6a62-4615-883c-404ced34e2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:36:93:6e:1d:4c:ea:58:bf:ba:0d:90:ce: 71:d7:e7:a6:91:41:6b:31:60:64:d9:73:3e:09:f6: 98:bf:8b:86:35:e5:f8:07:44:ee:e5:03:e1:c7:35: 4c:a1:20:cc:02:e2:43:76:d6:f0:57:cb:e0:dc:d2: a5:8a:75:43:0f:77:a2:52:d1:c7:b5:29:51:26:68: a2:52:5c:15:a0:ab:54:8e:d0:f9:d4:f7:a2:4d:ac: 00:4a:96:df:a9:9f:a1:73:37:ca:10:2a:0c:64:23: 8e:36:5a:22:7b:33:16:8f:5c:27:f0:db:c2:ef:bc: 22:1d:00:28:56:e2:ea:b6:68:95:23:d7:b2:7e:df: e2:63:42:0d:05:1f:9a:c0:95:fc:7d:87:0c:3a:7a: 02:8c:0e:8c:5a:31:a5:9f:07:f0:3c:a7:59:ab:4d: 8d:46:25:1d:c9:da:16:a6:62:82:63:6d:f9:58:05: c4:fb:8a:00:ac:ea:e8:30:9b:a1:ff:c4:d8:5d:7d: 27:0c:9a:22:88:c3:f5:55:e1:2c:06:3a:bc:df:f3: e1:c5:e6:1b:66:9b:54:03:1f:a3:3f:75:98:14:b2: b4:a9:d7:d1:3e:cf:9c:ee:63:de:8c:03:a3:d5:7f: 51:d7:b2:ce:12:e5:89:c3:50:72:64:e6:25:6e:83: c1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7B:08:90:B6:FA:92:D9:84:04:80:DA:4A:00:92:AA:8D:11:FD:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68d66da6-9cd0-3802-a69f-d43c544a57ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:eb:7e:af:a5:28:d1:ad:5a:a2:16:68:e4:87:2c:74:c0:a2: 67:dc:fc:d5:1a:bf:07:51:c1:f8:7c:a1:37:60:58:73:62:20: cd:1c:c7:d6:cd:c4:c7:99:45:28:a1:58:9d:ae:1f:f2:61:ba: cd:cb:ad:e1:13:48:ac:4c:76:b2:f7:da:ab:9e:97:65:d9:2a: fb:d6:67:ad:25:c1:5c:f6:b8:24:7f:9e:4b:34:6c:71:65:bc: a5:ea:3b:76:03:ee:97:b5:f6:89:8c:44:c1:56:95:2d:4b:01: e7:5d:70:72:89:6c:5f:f6:ea:67:b4:ea:6e:c7:2b:46:f9:4a: 5c:20:5b:23:57:b0:72:27:18:27:2b:38:36:16:e6:a9:10:87: db:4f:af:71:cc:b6:60:9b:af:fb:79:37:85:c0:6d:3a:a9:82: a0:1b:94:e8:de:ac:c8:01:18:cf:a3:b9:8d:bc:24:66:0d:fc: bf:ce:52:9e:48:a6:3e:15:7f:a5:2a:11:91:e6:ea:c1:3b:a5: bb:db:a2:57:fa:f7:55:99:ad:98:10:61:e0:bc:45:e5:42:5e: 9f:06:e5:77:de:c5:e8:97:5f:9a:94:5a:a9:6b:46:08:09:76: fb:e2:ed:52:6d:7e:42:1b:4e:e7:be:8a:59:92:86:37:5b:88: 38:7a:33:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74SSErQCeyNXpOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk MWUxNjUxYmYtNmE2Mi00NjE1LTg4M2MtNDA0Y2VkMzRlMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+o2k24dTOpYv7oNkM5x1+emkUFrMWBk2XM+ CfaYv4uGNeX4B0Tu5QPhxzVMoSDMAuJDdtbwV8vg3NKlinVDD3eiUtHHtSlRJmii UlwVoKtUjtD51PeiTawASpbfqZ+hczfKECoMZCOONloiezMWj1wn8NvC77wiHQAo VuLqtmiVI9eyft/iY0INBR+awJX8fYcMOnoCjA6MWjGlnwfwPKdZq02NRiUdydoW pmKCY235WAXE+4oArOroMJuh/8TYXX0nDJoiiMP1VeEsBjq83/PhxeYbZptUAx+j P3WYFLK0qdfRPs+c7mPejAOj1X9R17LOEuWJw1ByZOYlboPBDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZ7CJC2+pLZhASA2koAkqqNEf3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjhkNjZkYTYtOWNkMC0z ODAyLWE2OWYtZDQzYzU0NGE1N2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9TsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDrfq+lKNGtWqIWaOSHLHTAomfc/NUavwdRwfh8oTdgWHNiIM0cx9bN xMeZRSihWJ2uH/Jhus3LreETSKxMdrL32quel2XZKvvWZ60lwVz2uCR/nks0bHFl vKXqO3YD7pe19omMRMFWlS1LAeddcHKJbF/26me06m7HK0b5SlwgWyNXsHInGCcr ODYW5qkQh9tPr3HMtmCbr/t5N4XAbTqpgqAblOjerMgBGM+juY28JGYN/L/OUp5I pj4Vf6UqEZHm6sE7pbvbolf691WZrZgQYeC8ReVCXp8G5XfexeiXX5qUWqlrRggJ dvvi7VJtfkIbTue+ilmShjdbiDh6MyU= -----END CERTIFICATE-----Generated at Sat Dec 20 11:04:41 2025 by rpki-client