This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e7a536c-b584-35dc-a3b1-e5c6905f0b05.roa File: 8e7a536c-b584-35dc-a3b1-e5c6905f0b05.roa (raw, json) Hash identifier: /r2jjKYUHEvHvKWUkhGzBTofY4qs0U9gI1ZXUzJbroE= Subject key identifier: 2A:F8:77:23:2E:DD:0B:11:55:76:92:73:D3:AF:F0:49:63:DF:D9:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C391660E370D27C85D1CE1B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e7a536c-b584-35dc-a3b1-e5c6905f0b05.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.206.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:60:e3:70:d2:7c:85:d1:ce:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=17b5df48-60e2-4d32-ae7e-e4c1f5e1bae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:58:35:27:cf:3f:73:49:86:67:29:5a:1b:df: 1e:05:a0:e0:2a:f1:6b:6f:59:8e:30:e9:5b:0f:d9: 59:91:0e:92:56:fe:f5:e9:91:46:80:29:0e:18:65: 43:6f:d4:1a:86:69:93:38:32:dc:2e:a8:9a:01:9a: f3:1c:f5:4c:3a:b6:7e:55:72:8b:02:0d:cf:a8:23: 28:ac:ff:ee:a4:c3:1b:84:f9:92:30:f7:6c:d7:50: a0:b4:39:91:3a:53:50:61:73:a3:6a:25:12:bf:01: 8d:de:c1:84:e8:76:fe:14:75:75:22:32:23:20:dd: fd:6b:e5:5a:58:87:c5:2e:bc:70:bb:4b:c8:41:77: 40:01:f1:30:f9:ea:06:f6:4e:c2:bc:fa:3b:51:94: c8:78:d1:89:fa:f0:d6:2e:54:2f:70:12:da:32:34: a7:26:f7:f0:9a:42:e1:c4:93:a7:71:c6:5b:94:e1: 9f:54:92:8a:98:42:c4:52:de:cf:80:13:d1:87:5a: 2d:c2:e6:ae:f6:ec:98:33:0f:13:9b:4b:fc:c4:da: 18:4b:a9:ac:8c:e6:24:ed:6b:bb:bc:a4:80:1d:7b: 57:20:ab:f0:03:1b:27:dd:7c:a8:96:a0:2d:5d:f6: 22:d0:70:21:2a:db:24:2a:f7:43:1f:b2:14:98:4a: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F8:77:23:2E:DD:0B:11:55:76:92:73:D3:AF:F0:49:63:DF:D9:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e7a536c-b584-35dc-a3b1-e5c6905f0b05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:09:fc:5a:1f:f4:b0:c2:6e:22:4d:cd:9d:eb:6a:bf:f5:8c: ae:a7:3f:38:8f:96:65:0f:f5:6f:98:3e:24:1a:a7:a6:1c:4f: 07:64:3d:8d:ff:9e:c4:16:ce:89:9f:2a:83:fa:63:47:a1:a8: f2:93:1b:17:71:6c:b0:e6:67:30:2a:fb:6b:7f:25:f3:7e:0f: b5:20:f1:81:ba:26:92:a8:5e:3a:76:84:9d:ac:88:5b:21:e0: fb:59:86:c9:3d:45:54:bf:f2:7c:3d:a9:0b:b8:7b:eb:c1:33: 4f:e4:37:29:a3:46:ee:7d:bf:5e:73:36:70:b5:df:06:ea:01: 4c:0c:7d:91:30:70:3a:f9:c1:64:2f:54:68:b3:95:97:06:10: 78:5f:8d:77:41:83:57:61:60:60:28:6d:4d:b7:96:8e:f7:e6: 17:90:e3:85:11:9a:e2:a6:f5:7c:3d:64:55:11:61:a1:98:21: 29:54:1f:ba:97:12:78:9a:00:50:01:f3:63:37:17:a6:f4:8b: 42:17:3e:10:6a:77:24:8a:75:79:7f:2f:de:bf:5a:13:48:2c: 69:27:fa:19:2e:69:ee:ff:39:68:74:55:82:39:99:51:b3:d8: cf:50:ae:54:ac:dd:22:39:0f:18:da:52:95:35:2f:fb:1d:bf: 75:bc:7d:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FmDjcNJ8hdHOGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk MTdiNWRmNDgtNjBlMi00ZDMyLWFlN2UtZTRjMWY1ZTFiYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFg1J88/c0mGZylaG98eBaDgKvFrb1mOMOlb D9lZkQ6SVv716ZFGgCkOGGVDb9QahmmTODLcLqiaAZrzHPVMOrZ+VXKLAg3PqCMo rP/upMMbhPmSMPds11CgtDmROlNQYXOjaiUSvwGN3sGE6Hb+FHV1IjIjIN39a+Va WIfFLrxwu0vIQXdAAfEw+eoG9k7CvPo7UZTIeNGJ+vDWLlQvcBLaMjSnJvfwmkLh xJOnccZblOGfVJKKmELEUt7PgBPRh1otwuau9uyYMw8Tm0v8xNoYS6msjOYk7Wu7 vKSAHXtXIKvwAxsn3XyolqAtXfYi0HAhKtskKvdDH7IUmEoYhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr4dyMu3QsRVXaSc9Ov8Elj39lUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU3YTUzNmMtYjU4NC0z NWRjLWEzYjEtZTVjNjkwNWYwYjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMJ/Fof9LDCbiJNzZ3rar/1jK6nPziPlmUP9W+YPiQap6YcTwdkPY3/ nsQWzomfKoP6Y0ehqPKTGxdxbLDmZzAq+2t/JfN+D7Ug8YG6JpKoXjp2hJ2siFsh 4PtZhsk9RVS/8nw9qQu4e+vBM0/kNymjRu59v15zNnC13wbqAUwMfZEwcDr5wWQv VGizlZcGEHhfjXdBg1dhYGAobU23lo735heQ44URmuKm9Xw9ZFURYaGYISlUH7qX EniaAFAB82M3F6b0i0IXPhBqdySKdXl/L96/WhNILGkn+hkuae7/OWh0VYI5mVGz 2M9QrlSs3SI5DxjaUpU1L/sdv3W8faE= -----END CERTIFICATE-----Generated at Sat Dec 20 12:56:19 2025 by rpki-client