This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4a66142-58dd-3d8b-8623-1a3bda7b8986.roa File: a4a66142-58dd-3d8b-8623-1a3bda7b8986.roa (raw, json) Hash identifier: 1OZNW0lX4pYFrBtZXs6Ve3MN8WdxiE/fJGlvOyiv/gk= Subject key identifier: 2B:40:01:A8:3C:76:03:EA:6E:1C:75:6E:30:30:2F:39:F6:AF:70:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3BE112D1332967DC6876200C Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4a66142-58dd-3d8b-8623-1a3bda7b8986.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.209.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:12:d1:33:29:67:dc:68:76:20:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=da72b9ee-9b56-47ac-b27d-8b439792ace1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:16:5c:8b:50:39:b7:cd:02:c4:52:1a:9c:eb: 34:9b:28:cc:b3:2a:fa:4c:8d:1b:6e:41:45:50:5b: 95:4a:ad:7a:62:a5:aa:22:1b:15:9c:7f:93:11:6c: 7b:51:71:f8:53:eb:37:50:ea:98:1b:25:7f:ac:f2: 19:b0:ec:92:4d:c9:46:0e:58:1c:a0:ec:27:af:81: 18:f2:74:67:dc:5b:1d:c2:a6:8a:b0:21:11:e7:85: a2:22:0f:9a:0a:39:e1:a1:3e:18:35:7d:00:4d:8d: d2:9c:4f:9c:70:55:d8:cd:09:8e:d9:1d:63:08:7e: 54:a2:7f:35:65:c6:14:72:8e:17:15:a0:60:a6:e3: 19:c3:a0:84:e9:cf:fb:8e:0e:c8:75:ce:a7:89:58: 3d:9e:db:46:9f:02:92:df:a7:85:5d:13:16:36:28: 08:d9:5a:d4:3f:19:47:92:c9:38:7c:2b:86:56:54: 5c:e1:9a:90:50:ff:ba:89:4f:df:e0:b9:10:f5:28: b2:68:e9:d0:55:fb:7f:ef:8c:e2:07:37:ab:ee:28: 85:8b:55:3b:e7:e4:e2:38:ff:71:d9:90:9c:f7:f5: e2:e7:1a:62:cc:98:6d:e4:b6:91:28:de:8a:71:43: ff:9a:92:19:8e:de:c2:3d:e9:56:be:99:6b:23:2e: 0c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:40:01:A8:3C:76:03:EA:6E:1C:75:6E:30:30:2F:39:F6:AF:70:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4a66142-58dd-3d8b-8623-1a3bda7b8986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b6:93:88:f1:61:03:d9:d6:1d:55:84:15:54:0c:d8:64:c7: 08:55:12:5d:9e:00:50:a5:c9:aa:36:78:1d:77:3a:af:90:f6: b2:f9:a6:28:85:ce:f8:3a:f8:13:9b:f1:39:e7:8d:0a:53:f4: 79:48:62:a7:ec:df:01:67:10:ea:48:f1:e8:72:e3:4a:1a:28: 63:bf:eb:b8:2c:0d:b7:10:45:22:70:6d:ec:40:e4:ad:fd:e6: b9:14:3a:8e:c8:06:5b:ba:94:c7:b5:3a:72:38:9c:05:94:3d: 10:3c:a4:d7:e1:98:62:b7:61:ba:19:2a:da:5c:89:5e:9a:d7: 69:36:4e:15:79:aa:33:23:c4:5a:99:6c:2a:f2:92:19:8c:f8: 6b:10:46:93:03:a1:03:09:33:e8:e7:45:e8:de:4f:6d:15:e4: a6:28:07:9c:70:88:0e:02:1f:95:ee:9e:dd:c0:3e:94:9b:33: cb:5a:a3:81:3a:89:a8:a1:40:f9:49:a5:17:4f:7d:7b:4d:e6: 75:20:bf:46:77:f2:af:c2:34:9d:0f:93:58:f9:f8:d3:42:2e: 78:f1:cd:66:7a:ff:d7:f6:ec:73:fa:08:15:d3:ef:b7:d9:9b: 54:e2:d2:5f:e1:1e:f9:14:de:88:bf:98:7d:d8:14:94:a3:49: 79:cc:c5:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74RLRMyln3Gh2IAwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZGE3MmI5ZWUtOWI1Ni00N2FjLWIyN2QtOGI0Mzk3OTJhY2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhZci1A5t80CxFIanOs0myjMsyr6TI0bbkFF UFuVSq16YqWqIhsVnH+TEWx7UXH4U+s3UOqYGyV/rPIZsOySTclGDlgcoOwnr4EY 8nRn3FsdwqaKsCER54WiIg+aCjnhoT4YNX0ATY3SnE+ccFXYzQmO2R1jCH5Uon81 ZcYUco4XFaBgpuMZw6CE6c/7jg7Idc6niVg9nttGnwKS36eFXRMWNigI2VrUPxlH ksk4fCuGVlRc4ZqQUP+6iU/f4LkQ9SiyaOnQVft/74ziBzer7iiFi1U75+TiOP9x 2ZCc9/Xi5xpizJht5LaRKN6KcUP/mpIZjt7CPelWvplrIy4MYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtAAag8dgPqbhx1bjAwLzn2r3AzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTRhNjYxNDItNThkZC0z ZDhiLTg2MjMtMWEzYmRhN2I4OTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD62k4jxYQPZ1h1VhBVUDNhkxwhVEl2eAFClyao2eB13Oq+Q9rL5piiF zvg6+BOb8TnnjQpT9HlIYqfs3wFnEOpI8ehy40oaKGO/67gsDbcQRSJwbexA5K39 5rkUOo7IBlu6lMe1OnI4nAWUPRA8pNfhmGK3YboZKtpciV6a12k2ThV5qjMjxFqZ bCrykhmM+GsQRpMDoQMJM+jnRejeT20V5KYoB5xwiA4CH5Xunt3APpSbM8tao4E6 iaihQPlJpRdPfXtN5nUgv0Z38q/CNJ0Pk1j5+NNCLnjxzWZ6/9f27HP6CBXT77fZ m1Ti0l/hHvkU3oi/mH3YFJSjSXnMxQk= -----END CERTIFICATE-----Generated at Sat Dec 20 02:39:47 2025 by rpki-client