This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c588837b-ecec-34e5-9a02-6b872078d923.roa File: c588837b-ecec-34e5-9a02-6b872078d923.roa (raw, json) Hash identifier: /877I3RCYN77Z9xQKCIps2dXo/aRpQKMgTXiXg6c59I= Subject key identifier: 33:A0:6E:D5:1B:55:98:92:37:25:B2:05:91:48:69:32:96:44:F0:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C24265CB5854A4784ABCCDC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c588837b-ecec-34e5-9a02-6b872078d923.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 20940 IP address blocks: 23.197.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:5c:b5:85:4a:47:84:ab:cc:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=1e6563bd-de11-4576-9324-222b6200ad25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a7:e2:14:24:e2:e9:c4:8f:bf:05:6f:f6:1d: 26:22:b5:be:35:75:ae:a9:1a:91:85:2d:16:aa:90: 07:82:69:ab:cf:27:2b:38:17:3a:08:d5:fd:48:66: d2:51:b5:b9:cc:17:ab:ff:98:28:f3:6d:17:02:b7: 8e:78:ee:32:be:b2:15:e1:38:68:6f:0a:84:cf:79: 92:d8:0d:56:f7:19:62:33:d6:61:8d:f6:30:03:39: 31:fa:4f:5c:a2:f8:98:9b:4a:ec:ea:dd:57:20:34: fa:1b:e1:ff:c5:31:56:43:b2:e0:2f:a8:16:50:65: fb:a1:44:24:6e:88:f6:71:dc:f1:c2:97:0e:eb:cb: 1d:d4:f1:96:48:f1:e2:c7:43:3a:99:64:e4:23:60: e4:05:b8:43:8f:f6:d1:36:68:ce:fe:50:1b:a1:5f: 4c:ba:a2:8b:85:f8:18:66:84:f3:90:76:ae:5b:b6: 0a:e1:a5:fa:26:17:ec:64:d6:7a:77:80:be:4d:3a: 04:2f:ac:81:a2:23:c0:de:e7:02:da:71:5d:c5:a0: 29:42:f2:f1:91:67:4a:9b:98:63:1b:c5:a3:50:b7: 98:83:74:04:97:76:35:4f:5d:63:cd:db:96:20:61: fa:25:19:4d:db:b2:26:57:6f:d0:91:e2:1e:7b:86: 3e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A0:6E:D5:1B:55:98:92:37:25:B2:05:91:48:69:32:96:44:F0:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c588837b-ecec-34e5-9a02-6b872078d923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:68:34:47:92:c8:dd:43:45:42:53:c3:ed:7d:22:83:5d:54: 1e:7f:0d:5a:85:9d:d3:f0:d0:c5:2a:a7:f3:c6:b4:6c:37:03: af:db:d7:4f:26:c7:d8:e3:b9:77:92:68:61:2b:1a:78:30:33: f0:63:b4:93:0b:56:74:16:ea:d0:c4:0a:bb:fe:6d:ba:97:b3: a1:6f:ef:fd:33:5f:b8:f6:b0:ea:9a:b0:14:e4:2b:9a:40:ff: d5:43:0a:4b:84:71:5d:65:4c:0a:dd:8e:d5:33:7d:db:9c:23: c5:f0:b9:7e:ac:28:fb:a0:11:6b:bc:c9:54:d4:b4:d1:0a:5b: 0e:31:02:01:bf:9f:1d:68:b4:59:17:a2:95:9e:b4:78:7b:36: 8d:25:ca:21:47:19:3e:75:4a:7a:ae:66:75:51:98:60:1b:c4: 73:d5:5a:c0:19:41:ef:0f:48:f4:24:88:d9:a2:60:03:97:a4: ab:d9:1f:8b:ef:03:28:35:f6:57:77:47:40:f4:38:85:fc:85: 15:b2:d7:4f:6e:b3:76:ad:a1:4e:10:89:e2:42:c5:23:7b:24: f4:bd:b6:59:ca:be:61:0d:e4:bc:a5:86:ea:47:25:a9:fb:25: 1e:71:95:b3:2a:55:35:8a:84:df:17:72:4b:1a:41:a6:6a:7f: 7f:71:24:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJly1hUpHhKvM3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk MWU2NTYzYmQtZGUxMS00NTc2LTkzMjQtMjIyYjYyMDBhZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqfiFCTi6cSPvwVv9h0mIrW+NXWuqRqRhS0W qpAHgmmrzycrOBc6CNX9SGbSUbW5zBer/5go820XAreOeO4yvrIV4ThobwqEz3mS 2A1W9xliM9ZhjfYwAzkx+k9coviYm0rs6t1XIDT6G+H/xTFWQ7LgL6gWUGX7oUQk boj2cdzxwpcO68sd1PGWSPHix0M6mWTkI2DkBbhDj/bRNmjO/lAboV9MuqKLhfgY ZoTzkHauW7YK4aX6JhfsZNZ6d4C+TToEL6yBoiPA3ucC2nFdxaApQvLxkWdKm5hj G8WjULeYg3QEl3Y1T11jzduWIGH6JRlN27ImV2/QkeIee4Y+owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOgbtUbVZiSNyWyBZFIaTKWRPCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzU4ODgzN2ItZWNlYy0z NGU1LTlhMDItNmI4NzIwNzhkOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8XPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJoNEeSyN1DRUJTw+19IoNdVB5/DVqFndPw0MUqp/PGtGw3A6/b108m x9jjuXeSaGErGngwM/BjtJMLVnQW6tDECrv+bbqXs6Fv7/0zX7j2sOqasBTkK5pA /9VDCkuEcV1lTArdjtUzfducI8XwuX6sKPugEWu8yVTUtNEKWw4xAgG/nx1otFkX opWetHh7No0lyiFHGT51SnquZnVRmGAbxHPVWsAZQe8PSPQkiNmiYAOXpKvZH4vv Ayg19ld3R0D0OIX8hRWy109us3atoU4QieJCxSN7JPS9tlnKvmEN5LylhupHJan7 JR5xlbMqVTWKhN8XcksaQaZqf39xJOg= -----END CERTIFICATE-----Generated at Sat Dec 20 09:30:40 2025 by rpki-client