This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa File: 7da2d404-3d2a-3f91-945a-890dfa73775b.roa (raw, json) Hash identifier: tB+KnFBkzef+W+vbWiaOcD8dAoRIjARnUFfLKHqhVso= Subject key identifier: 9C:D4:DB:5B:3A:C6:79:19:5E:6B:52:D0:BD:D4:B2:0B:5D:DD:21:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3EABCC0CB832DB498A50CE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.217.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:cc:0c:b8:32:db:49:8a:50:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=2d87926f-379b-46c1-aeda-71dfcbd0bd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:c1:a7:93:85:3b:55:2d:21:ea:e1:09:70: 29:d0:b9:1e:64:0b:92:b7:ac:f6:d3:6a:b6:a7:ba: d3:23:fc:b8:1b:31:bf:6f:ea:06:2e:c9:42:22:c0: 05:62:cb:6e:94:79:a5:82:3f:b5:ea:b1:ce:d2:34: 77:5e:0b:6c:10:03:36:20:53:d5:d0:40:37:4a:8c: 79:4e:43:c0:5e:dd:7d:2f:0e:b8:ef:b1:4d:d7:0a: cd:1e:88:88:bb:b2:7e:fc:be:f4:cd:54:d7:9c:63: db:4f:56:f3:d6:c1:fb:dd:af:93:20:09:72:00:ff: 35:4b:0e:e9:64:bb:1b:df:e7:78:82:3c:6d:10:22: 77:83:ae:7f:12:ee:23:f0:73:47:12:25:03:67:2a: 8e:03:de:3e:35:74:39:9b:9b:ef:f1:17:ec:de:7d: 94:53:85:c3:6c:ff:f2:64:1c:d9:93:ec:bc:5a:b8: 27:90:39:2a:e0:c6:13:aa:42:b0:64:5f:ec:d9:a2: 57:c0:1d:9e:59:3d:54:1b:73:aa:88:42:36:02:48: 98:13:a7:66:59:df:4b:6c:0c:c6:87:9b:39:9e:13: 94:f2:5c:d1:5d:09:36:ec:c8:bb:84:36:f3:72:a2: 53:01:e7:0a:6d:5c:f7:fd:1f:0e:2f:1b:69:4a:9b: f7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D4:DB:5B:3A:C6:79:19:5E:6B:52:D0:BD:D4:B2:0B:5D:DD:21:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8c:69:0f:bd:56:dd:4d:c8:66:25:c9:35:6c:5d:53:3f:9b: be:e5:00:8b:65:8d:1f:b9:81:b4:90:d5:e1:7a:75:7f:5e:f4: 74:fc:66:45:03:e3:f9:e9:74:d8:8b:38:ad:1c:a6:9b:49:a0: 1b:22:37:88:b9:dc:7f:89:fa:a1:bc:90:3f:4c:8c:c1:ee:85: 87:eb:89:ed:e7:ba:1e:31:65:cb:5c:ba:64:59:d2:4a:5e:48: 30:ae:31:00:ed:ad:d1:d5:9f:26:65:42:b8:e6:89:71:ed:0c: e8:aa:02:51:4a:fa:96:db:4e:ee:a6:38:d5:dc:74:82:09:78: f7:98:20:8c:69:47:80:96:72:6d:c7:b6:39:89:bd:d9:8e:e5: 9b:7c:78:22:c3:03:d7:09:ed:77:4c:ac:4b:f0:80:ee:c2:5f: fe:b0:53:45:d2:07:12:d6:9b:27:cb:10:9c:5e:bf:f9:0b:32: b5:84:f8:fb:70:75:2a:4f:e0:9e:3a:61:8d:04:c1:25:2a:ea: 2b:5c:e4:56:d7:ea:55:8a:7e:c6:14:c3:3a:b9:8f:e5:9c:a0: bf:7d:e5:f6:d0:4c:39:c1:2c:18:11:8b:85:4d:fe:bc:53:f1: 48:d8:0e:ea:ad:c6:90:32:17:f6:af:00:4d:e4:be:23:0a:34: 27:cf:93:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q8wMuDLbSYpQzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk MmQ4NzkyNmYtMzc5Yi00NmMxLWFlZGEtNzFkZmNiZDBiZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxTBp5OFO1UtIerhCXAp0LkeZAuSt6z202q2 p7rTI/y4GzG/b+oGLslCIsAFYstulHmlgj+16rHO0jR3XgtsEAM2IFPV0EA3Sox5 TkPAXt19Lw6477FN1wrNHoiIu7J+/L70zVTXnGPbT1bz1sH73a+TIAlyAP81Sw7p ZLsb3+d4gjxtECJ3g65/Eu4j8HNHEiUDZyqOA94+NXQ5m5vv8Rfs3n2UU4XDbP/y ZBzZk+y8WrgnkDkq4MYTqkKwZF/s2aJXwB2eWT1UG3OqiEI2AkiYE6dmWd9LbAzG h5s5nhOU8lzRXQk27Mi7hDbzcqJTAecKbVz3/R8OLxtpSpv3VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzU21s6xnkZXmtS0L3Usgtd3SHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2RhMmQ0MDQtM2QyYS0z ZjkxLTk0NWEtODkwZGZhNzM3NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiMaQ+9Vt1NyGYlyTVsXVM/m77lAItljR+5gbSQ1eF6dX9e9HT8ZkUD 4/npdNiLOK0cpptJoBsiN4i53H+J+qG8kD9MjMHuhYfrie3nuh4xZctcumRZ0kpe SDCuMQDtrdHVnyZlQrjmiXHtDOiqAlFK+pbbTu6mONXcdIIJePeYIIxpR4CWcm3H tjmJvdmO5Zt8eCLDA9cJ7XdMrEvwgO7CX/6wU0XSBxLWmyfLEJxev/kLMrWE+Ptw dSpP4J46YY0EwSUq6itc5FbX6lWKfsYUwzq5j+WcoL995fbQTDnBLBgRi4VN/rxT 8UjYDuqtxpAyF/avAE3kviMKNCfPk7M= -----END CERTIFICATE-----Generated at Sat Dec 20 11:05:52 2025 by rpki-client