This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69e90291-17b7-3ca6-9dae-4a362a185d7f.roa File: 69e90291-17b7-3ca6-9dae-4a362a185d7f.roa (raw, json) Hash identifier: 2aDXLLDHESdlW7w9yJeZRFSx7Iw4fbG9D0heOfBGiv4= Subject key identifier: D2:62:71:38:F6:18:4B:F6:0C:84:58:2E:65:51:02:25:83:43:91:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C29BBEC7BA9A6F01620DCF650 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69e90291-17b7-3ca6-9dae-4a362a185d7f.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 20940 IP address blocks: 23.203.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:ec:7b:a9:a6:f0:16:20:dc:f6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=d25d22f4-f7f8-48e3-8244-8d341aa1b5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f3:09:31:23:3f:4d:0e:74:e9:45:71:ea:5f: 61:8f:72:23:53:84:b0:35:ca:fb:68:11:49:7d:75: 56:43:47:ff:17:0f:0c:7a:63:52:b5:84:7c:a4:75: 7a:1f:13:f3:79:b8:cf:3b:99:d3:26:31:5b:06:fa: f5:ec:2e:29:1a:69:23:2c:bc:65:37:2b:c3:68:03: 68:98:d4:35:b1:79:0d:a1:6c:b3:13:5e:1c:1c:ce: f6:43:3c:9b:6f:64:e6:f3:71:ab:61:ed:96:cd:9c: bf:f2:8f:92:59:38:68:07:a8:10:97:7b:8d:28:01: 2b:46:e3:15:95:49:8d:87:43:3b:d1:c7:53:7a:f8: 0f:8b:a9:dc:3e:ca:9c:47:74:de:f3:f9:a3:29:07: bf:ea:27:98:96:58:45:6a:81:93:ff:f5:d6:9e:17: 68:b0:6b:e4:6c:93:6c:88:b8:c5:d4:9e:99:ea:fd: 93:2c:ec:67:9b:20:3e:bc:62:12:65:23:42:c8:d3: b9:17:86:c3:89:08:b6:7a:fa:db:26:42:0d:4d:c4: cd:11:8a:e2:15:5d:53:d4:f8:c5:45:24:b4:b8:6a: a0:c5:ce:a5:7e:0c:ec:a6:32:b8:c9:43:39:49:44: 67:ae:f2:d7:b9:21:17:52:f8:ef:3d:4e:8b:5a:ca: d2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:62:71:38:F6:18:4B:F6:0C:84:58:2E:65:51:02:25:83:43:91:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69e90291-17b7-3ca6-9dae-4a362a185d7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:68:c5:c6:81:e0:b4:fe:2d:e8:91:4f:aa:4c:92:90:80:c5: 7b:d0:44:ab:27:92:58:ab:fb:42:16:5a:79:13:93:3a:22:25: 6a:b0:51:fd:c5:b3:91:ad:63:e7:a8:78:93:c3:a0:41:dc:24: 1c:01:77:ed:59:c3:dc:e7:03:17:79:c5:7b:44:7a:1f:ad:30: cf:28:b4:00:ac:ce:89:47:c0:35:7c:08:10:59:8d:ac:bd:9d: 96:e4:56:7d:63:f3:bf:41:43:ea:59:d3:d3:a8:c2:d6:d9:23: a7:18:70:b0:3c:03:98:57:9d:46:4e:c7:48:e6:c9:01:fa:ef: c4:6d:c9:8e:9c:9a:61:25:11:9f:f5:08:28:1c:0f:fa:e9:fc: 10:66:38:7c:90:57:96:4a:2e:73:3e:43:f3:77:7c:2d:37:7e: 8d:98:3d:ff:b5:ae:2e:10:26:69:ff:03:ee:06:4e:57:60:67: 90:c7:20:ef:f3:7f:72:a8:4a:72:52:49:ba:af:8a:ff:c8:68: f6:ac:b7:57:1a:ae:cf:b7:5b:d4:5d:a0:0d:73:93:c1:9c:79: f0:3e:d4:17:99:27:f7:ff:66:1a:bf:ee:1d:48:39:b0:f2:3d: 87:4e:a1:ac:4a:97:a2:bd:94:6f:a0:e7:c8:81:03:73:09:9b: 3d:18:30:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwpu+x7qabwFiDc9lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk ZDI1ZDIyZjQtZjdmOC00OGUzLTgyNDQtOGQzNDFhYTFiNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fMJMSM/TQ506UVx6l9hj3IjU4SwNcr7aBFJ fXVWQ0f/Fw8MemNStYR8pHV6HxPzebjPO5nTJjFbBvr17C4pGmkjLLxlNyvDaANo mNQ1sXkNoWyzE14cHM72Qzybb2Tm83GrYe2WzZy/8o+SWThoB6gQl3uNKAErRuMV lUmNh0M70cdTevgPi6ncPsqcR3Te8/mjKQe/6ieYllhFaoGT//XWnhdosGvkbJNs iLjF1J6Z6v2TLOxnmyA+vGISZSNCyNO5F4bDiQi2evrbJkINTcTNEYriFV1T1PjF RSS0uGqgxc6lfgzspjK4yUM5SURnrvLXuSEXUvjvPU6LWsrSfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJicTj2GEv2DIRYLmVRAiWDQ5EXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjllOTAyOTEtMTdiNy0z Y2E2LTlkYWUtNGEzNjJhMTg1ZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8uHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBoxcaB4LT+LeiRT6pMkpCAxXvQRKsnklir+0IWWnkTkzoiJWqwUf3F s5GtY+eoeJPDoEHcJBwBd+1Zw9znAxd5xXtEeh+tMM8otACszolHwDV8CBBZjay9 nZbkVn1j879BQ+pZ09OowtbZI6cYcLA8A5hXnUZOx0jmyQH678RtyY6cmmElEZ/1 CCgcD/rp/BBmOHyQV5ZKLnM+Q/N3fC03fo2YPf+1ri4QJmn/A+4GTldgZ5DHIO/z f3KoSnJSSbqviv/IaPast1cars+3W9RdoA1zk8GcefA+1BeZJ/f/Zhq/7h1IObDy PYdOoaxKl6K9lG+g58iBA3MJmz0YMCM= -----END CERTIFICATE-----Generated at Sat Dec 20 02:39:56 2025 by rpki-client