This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/842aff0d-4736-3cb9-b2ba-5d3969752f1e.roa File: 842aff0d-4736-3cb9-b2ba-5d3969752f1e.roa (raw, json) Hash identifier: z4P/gE4BGuuP+2qr059kdVNPOXichvKI77nmsOnBu9I= Subject key identifier: DD:0B:1D:61:E1:FA:B2:90:79:76:98:12:CD:29:56:43:37:3C:B0:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C2426710330D93B7ECEBC5540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/842aff0d-4736-3cb9-b2ba-5d3969752f1e.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 16625 IP address blocks: 23.197.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:71:03:30:d9:3b:7e:ce:bc:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=e0f5828c-bab8-4f98-9099-92478f99b133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dc:d2:65:bd:14:b4:5a:b9:a4:af:39:fc:15: ad:92:a6:40:06:cd:71:c1:a7:2e:d2:f0:27:c2:a5: 00:c6:8d:8e:2c:27:1f:f9:41:6d:8e:64:71:42:61: 9f:83:af:cc:31:31:83:a1:e9:0b:d9:1a:91:10:a7: 93:1e:ec:99:d5:6d:21:2c:4d:8e:02:0a:2c:b4:48: 51:06:35:27:87:9e:6c:ca:32:36:93:64:52:14:08: 10:17:c8:83:22:17:02:cf:ab:eb:6d:90:e4:1d:18: 0b:01:a3:79:07:4f:bf:1f:91:69:d3:01:a8:18:a5: 96:5f:94:d7:98:42:2a:80:c1:2a:b3:f8:02:cf:41: 15:c2:5c:5c:a0:6c:be:9e:d3:23:1f:3b:35:4d:bd: ab:df:40:87:42:5a:21:3c:12:98:76:ca:75:61:75: a3:2e:14:0a:ed:58:f3:b3:5d:21:c4:09:86:15:a1: 35:df:4d:fc:0f:b0:72:de:fa:e8:ce:35:c4:62:f1: f0:a9:51:6f:5e:47:d5:72:89:7d:a0:4f:80:30:bb: 15:c0:bf:03:be:ae:70:a0:f8:1d:97:00:22:bf:df: 64:6b:07:4b:76:a4:a6:41:49:83:d2:d9:bc:b2:ed: 2d:7f:a4:16:7a:b1:f5:0c:cc:71:02:09:dc:f8:5b: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0B:1D:61:E1:FA:B2:90:79:76:98:12:CD:29:56:43:37:3C:B0:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/842aff0d-4736-3cb9-b2ba-5d3969752f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:5d:eb:06:6d:a5:e9:70:09:34:e5:f8:7c:30:05:c7:4f:5c: 59:b7:af:53:85:35:ea:85:68:00:0d:85:f6:a3:c1:f1:b5:11: c1:75:ef:93:69:f0:67:1e:02:05:c5:b4:4b:85:7c:65:43:83: 48:ff:d4:15:af:6d:34:3b:79:76:bb:dd:23:12:3f:ee:09:a1: 69:d9:7f:23:62:94:48:4e:5b:ad:ab:f5:24:80:8e:aa:c7:27: b4:e8:07:b8:17:61:5e:aa:1d:f8:fb:7e:90:f7:8b:1a:b5:78: c7:39:ba:ee:ac:ec:ec:4a:9a:ad:56:83:fd:2c:df:eb:81:3e: 8e:cc:49:b6:17:12:98:a3:8b:a8:fd:28:4d:24:d8:b3:75:11: 4f:d4:ef:5d:54:02:b3:3d:36:78:e4:9a:d8:10:8b:a7:f5:dd: 12:41:92:99:c5:6f:a0:17:e1:d4:a8:97:36:32:af:7c:86:ce: e6:42:fe:35:8e:0f:e1:12:3b:19:1d:30:b1:8b:9b:0b:7e:ee: 17:67:ea:81:a9:9b:f4:f5:fe:65:65:fa:39:ea:07:0a:ac:15: 4f:06:40:d0:92:e5:4e:24:9c:34:8d:23:e6:e5:63:17:65:5d: 15:c2:6d:4f:c2:c5:6b:49:23:23:40:f5:9a:79:8a:32:a8:01: 11:d5:78:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJnEDMNk7fs68VUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk ZTBmNTgyOGMtYmFiOC00Zjk4LTkwOTktOTI0NzhmOTliMTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9zSZb0UtFq5pK85/BWtkqZABs1xwacu0vAn wqUAxo2OLCcf+UFtjmRxQmGfg6/MMTGDoekL2RqREKeTHuyZ1W0hLE2OAgostEhR BjUnh55syjI2k2RSFAgQF8iDIhcCz6vrbZDkHRgLAaN5B0+/H5Fp0wGoGKWWX5TX mEIqgMEqs/gCz0EVwlxcoGy+ntMjHzs1Tb2r30CHQlohPBKYdsp1YXWjLhQK7Vjz s10hxAmGFaE13038D7By3vrozjXEYvHwqVFvXkfVcol9oE+AMLsVwL8Dvq5woPgd lwAiv99kawdLdqSmQUmD0tm8su0tf6QWerH1DMxxAgnc+FvjXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0LHWHh+rKQeXaYEs0pVkM3PLDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQyYWZmMGQtNDczNi0z Y2I5LWIyYmEtNWQzOTY5NzUyZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVd6wZtpelwCTTl+HwwBcdPXFm3r1OFNeqFaAANhfajwfG1EcF175Np 8GceAgXFtEuFfGVDg0j/1BWvbTQ7eXa73SMSP+4JoWnZfyNilEhOW62r9SSAjqrH J7ToB7gXYV6qHfj7fpD3ixq1eMc5uu6s7OxKmq1Wg/0s3+uBPo7MSbYXEpiji6j9 KE0k2LN1EU/U711UArM9NnjkmtgQi6f13RJBkpnFb6AX4dSolzYyr3yGzuZC/jWO D+ESOxkdMLGLmwt+7hdn6oGpm/T1/mVl+jnqBwqsFU8GQNCS5U4knDSNI+blYxdl XRXCbU/CxWtJIyNA9Zp5ijKoARHVeLI= -----END CERTIFICATE-----Generated at Sat Dec 20 07:47:47 2025 by rpki-client