This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8faf8363-0e29-3970-9fe9-dc74b1d4e0da.roa File: 8faf8363-0e29-3970-9fe9-dc74b1d4e0da.roa (raw, json) Hash identifier: PBMb3M4iYkx9HTMe2zR62FJE7RRgje/kkbwYLRzHD8Y= Subject key identifier: E9:D4:F7:0D:95:45:15:A3:D2:AD:6A:75:D1:C5:91:67:0E:01:D9:89 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C26F0E6DCFDE2C1E5543675A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8faf8363-0e29-3970-9fe9-dc74b1d4e0da.roa Signing time: Thu 11 Dec 2025 14:00:39 +0000 ROA not before: Thu 11 Dec 2025 14:00:39 +0000 ROA not after: Wed 11 Mar 2026 13:00:39 +0000 asID: 24319 IP address blocks: 23.199.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:26:f0:e6:dc:fd:e2:c1:e5:54:36:75:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 11 14:00:39 2025 GMT Not After : Mar 11 13:00:39 2026 GMT Subject: CN=65a08494-2f91-41bb-9398-8cac736311b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:19:6a:fb:a9:e3:71:cc:cf:4e:aa:07:93:7f: 97:b7:44:2a:ea:de:62:ae:b8:09:95:7d:6a:46:60: bb:26:c8:51:c1:a5:78:5c:bf:1d:f3:86:5c:47:ed: c7:80:53:9f:3c:24:8c:35:a2:e3:5c:ce:1d:49:30: 4a:53:ed:3c:b7:12:d5:7f:28:bc:87:ce:56:fd:5e: fd:7c:f1:c8:b2:d0:b5:ee:3a:63:b1:06:87:17:20: 26:ad:32:8c:05:78:2d:74:71:a8:23:74:c6:ec:23: f5:ec:49:eb:2b:ca:14:a1:cb:20:48:3e:b6:ee:96: a0:f1:b7:13:3f:6c:46:3b:3d:15:a2:d5:77:76:62: 53:11:79:da:5b:57:fc:95:dc:fb:30:fa:d8:36:5e: 4f:5f:8c:f5:45:ed:64:17:10:11:d9:1e:e1:2c:cc: 3a:ba:15:46:a7:03:0a:c5:4b:41:2f:9c:c1:05:61: 30:10:f2:11:74:c3:4b:a2:51:7e:57:65:74:71:96: f5:18:95:c1:e1:f0:d7:3f:2d:39:98:71:1c:cb:47: 19:0f:83:6f:2c:06:3f:2d:4b:e3:8a:27:9f:2a:6e: ae:31:a2:1d:dd:c7:e2:8f:1f:0d:49:3d:67:d2:67: a2:db:d2:27:15:34:06:a6:5a:07:d5:48:2f:ba:5a: 6d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D4:F7:0D:95:45:15:A3:D2:AD:6A:75:D1:C5:91:67:0E:01:D9:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8faf8363-0e29-3970-9fe9-dc74b1d4e0da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0a:c3:83:90:d9:8e:71:56:a2:2a:95:5e:25:05:62:db:3b: 16:75:00:fa:04:9d:40:31:e6:21:4e:4b:6f:e3:e6:23:9d:e0: 89:6d:30:b2:05:c0:7a:72:b0:4f:58:47:6c:ff:55:cf:9e:44: db:db:2e:03:b1:29:90:74:e2:9f:5d:77:05:30:04:11:f4:aa: 31:e4:12:c5:16:a8:46:ee:18:a7:9e:a6:5a:8f:cb:e1:a3:c3: 1b:9c:a1:49:61:d8:f2:52:b7:54:76:ec:a4:7c:14:8a:59:cd: 00:64:66:df:3d:44:57:ab:83:cb:61:c2:fe:12:14:13:4f:6c: c0:58:fa:a0:9a:46:4d:6a:d9:0e:c5:d6:92:9f:a1:cf:4a:9a: f5:2f:9c:32:01:0d:56:e7:ce:24:c5:7e:51:7a:a1:23:26:7e: 4f:50:72:22:cb:34:e5:88:1b:58:68:3b:fd:c8:b3:d7:9c:7b: 02:9d:26:f4:d0:40:ca:d8:61:79:47:f2:f2:56:75:92:6a:48: 65:81:8f:7b:61:72:25:e5:cd:93:c5:c7:54:88:5a:88:39:c9: 97:38:b3:5d:1b:57:d1:9c:34:87:a5:43:56:bf:dc:2d:54:7a: 5d:7e:aa:84:bd:a0:40:fd:9e:6c:d3:72:5b:1b:ae:a3:07:1d: 3a:f8:0f:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwm8Obc/eLB5VQ2daAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxMTE0MDAzOVoXDTI2MDMxMTEzMDAzOVowLzEtMCsGA1UEAxMk NjVhMDg0OTQtMmY5MS00MWJiLTkzOTgtOGNhYzczNjMxMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRlq+6njcczPTqoHk3+Xt0Qq6t5irrgJlX1q RmC7JshRwaV4XL8d84ZcR+3HgFOfPCSMNaLjXM4dSTBKU+08txLVfyi8h85W/V79 fPHIstC17jpjsQaHFyAmrTKMBXgtdHGoI3TG7CP17EnrK8oUocsgSD627pag8bcT P2xGOz0VotV3dmJTEXnaW1f8ldz7MPrYNl5PX4z1Re1kFxAR2R7hLMw6uhVGpwMK xUtBL5zBBWEwEPIRdMNLolF+V2V0cZb1GJXB4fDXPy05mHEcy0cZD4NvLAY/LUvj iiefKm6uMaId3cfijx8NST1n0mei29InFTQGploH1UgvulptYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnU9w2VRRWj0q1qddHFkWcOAdmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGZhZjgzNjMtMGUyOS0z OTcwLTlmZTktZGM3NGIxZDRlMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8c9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUKw4OQ2Y5xVqIqlV4lBWLbOxZ1APoEnUAx5iFOS2/j5iOd4IltMLIF wHpysE9YR2z/Vc+eRNvbLgOxKZB04p9ddwUwBBH0qjHkEsUWqEbuGKeeplqPy+Gj wxucoUlh2PJSt1R27KR8FIpZzQBkZt89RFerg8thwv4SFBNPbMBY+qCaRk1q2Q7F 1pKfoc9KmvUvnDIBDVbnziTFflF6oSMmfk9QciLLNOWIG1hoO/3Is9ecewKdJvTQ QMrYYXlH8vJWdZJqSGWBj3thciXlzZPFx1SIWog5yZc4s10bV9GcNIelQ1a/3C1U el1+qoS9oED9nmzTclsbrqMHHTr4D3w= -----END CERTIFICATE-----Generated at Sat Dec 20 11:17:31 2025 by rpki-client