This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc8ef8fd-0ba1-36eb-9fcb-25485a7d76e1.roa File: cc8ef8fd-0ba1-36eb-9fcb-25485a7d76e1.roa (raw, json) Hash identifier: Jo7EKy5Z78n2Q8lOsreiwqbAEMHdVPsVVRv++t0PF7k= Subject key identifier: FD:55:EE:AB:7D:70:92:E4:0A:4A:D9:20:40:CD:0D:04:A2:4A:1E:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C2C865570AAE4AF0A7637F280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc8ef8fd-0ba1-36eb-9fcb-25485a7d76e1.roa Signing time: Sat 13 Dec 2025 14:00:38 +0000 ROA not before: Sat 13 Dec 2025 14:00:38 +0000 ROA not after: Fri 13 Mar 2026 13:00:38 +0000 asID: 16625 IP address blocks: 23.217.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2c:86:55:70:aa:e4:af:0a:76:37:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 13 14:00:38 2025 GMT Not After : Mar 13 13:00:38 2026 GMT Subject: CN=f25ec1d0-f4b0-45ff-bd77-ee5132ffec66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b2:f1:19:0c:97:08:7c:62:1b:8c:ed:05:4d: 1a:48:57:d6:d3:ec:b7:d5:f4:a6:11:1c:3e:bd:17: 18:f4:dd:d3:d9:de:a3:07:4b:27:bd:f0:5f:da:f6: ab:04:7e:6e:75:b5:e4:c5:47:51:53:a8:92:ce:5c: c9:7e:15:44:a4:ea:21:e6:b7:7d:38:b9:29:e5:37: d9:dc:7a:aa:bb:61:e0:fa:e9:30:2a:03:22:74:16: e4:a0:d4:cf:13:33:18:b9:f5:8c:ed:85:43:89:99: 60:1f:50:aa:58:a5:e2:ed:4b:73:46:54:b0:6f:33: cc:5b:0d:17:a6:49:9d:16:eb:ed:4f:e5:c9:ef:8c: 57:22:c0:52:e6:0d:e3:15:8d:06:4b:68:ca:b0:9e: 92:5d:f7:63:96:bb:d4:42:24:8a:89:4a:71:69:4a: b9:b2:36:d4:b8:52:1a:ed:58:5b:88:5f:c2:1e:22: f2:a5:e3:67:34:fc:03:fa:81:84:01:dc:84:a2:79: 7e:89:47:ae:c4:dd:26:65:c5:3a:0f:64:f1:49:34: e7:ef:36:04:57:3e:cf:b7:2c:f2:c2:30:2d:25:e3: 31:ab:16:44:39:74:21:f2:55:96:56:8f:49:d2:3f: f3:40:5d:4f:6a:f5:f5:78:17:ae:70:68:a1:0e:9a: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:55:EE:AB:7D:70:92:E4:0A:4A:D9:20:40:CD:0D:04:A2:4A:1E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc8ef8fd-0ba1-36eb-9fcb-25485a7d76e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:90:6b:a2:26:86:6c:61:e6:b0:01:da:e3:cf:40:60:88:f6: 8d:93:4e:32:b6:b9:63:02:7b:77:bc:83:43:4a:8f:7a:98:2e: 20:8e:cc:a6:d0:29:a9:49:b0:7f:be:ae:0d:f0:13:11:cd:4c: 4c:31:2a:23:68:a6:80:9d:c3:02:87:a0:20:1d:e6:82:1e:4a: cf:1f:7e:ea:52:36:1d:62:e4:e0:21:17:2c:4d:86:23:f6:f5: 8c:4c:c2:72:ab:b7:09:d5:e2:32:41:2b:e2:bb:1c:d5:00:2b: 39:d4:2e:79:21:e9:5a:c7:27:9a:3c:23:94:b7:c1:eb:f0:ee: 42:4e:01:c2:7d:cd:ca:a2:b7:2c:7d:bc:0c:d8:78:ae:d7:8c: 0e:5f:98:4f:c9:69:f5:d7:3a:51:06:8b:79:d4:27:5a:9f:68: fa:33:8f:a3:b5:16:81:9c:40:ff:67:61:06:15:c2:04:5d:1b: 5e:95:6b:6b:eb:fc:5e:ef:35:bf:df:18:5f:1f:b3:d3:ef:24: a8:c6:a7:03:34:27:92:d5:0f:f3:e9:5f:ea:75:8a:34:b3:55: 41:2b:af:03:fd:6f:4d:63:f7:0f:30:71:cd:34:94:0b:75:f2: 8f:79:df:8c:85:d3:b6:c5:f1:a9:70:c8:10:17:aa:d8:e9:c5: b1:04:61:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwshlVwquSvCnY38oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxMzE0MDAzOFoXDTI2MDMxMzEzMDAzOFowLzEtMCsGA1UEAxMk ZjI1ZWMxZDAtZjRiMC00NWZmLWJkNzctZWU1MTMyZmZlYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07LxGQyXCHxiG4ztBU0aSFfW0+y31fSmERw+ vRcY9N3T2d6jB0snvfBf2varBH5udbXkxUdRU6iSzlzJfhVEpOoh5rd9OLkp5TfZ 3Hqqu2Hg+ukwKgMidBbkoNTPEzMYufWM7YVDiZlgH1CqWKXi7UtzRlSwbzPMWw0X pkmdFuvtT+XJ74xXIsBS5g3jFY0GS2jKsJ6SXfdjlrvUQiSKiUpxaUq5sjbUuFIa 7VhbiF/CHiLypeNnNPwD+oGEAdyEonl+iUeuxN0mZcU6D2TxSTTn7zYEVz7Ptyzy wjAtJeMxqxZEOXQh8lWWVo9J0j/zQF1PavX1eBeucGihDpqE6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1V7qt9cJLkCkrZIEDNDQSiSh5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2M4ZWY4ZmQtMGJhMS0z NmViLTlmY2ItMjU0ODVhN2Q3NmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9kMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuQa6Imhmxh5rAB2uPPQGCI9o2TTjK2uWMCe3e8g0NKj3qYLiCOzKbQ KalJsH++rg3wExHNTEwxKiNopoCdwwKHoCAd5oIeSs8ffupSNh1i5OAhFyxNhiP2 9YxMwnKrtwnV4jJBK+K7HNUAKznULnkh6VrHJ5o8I5S3wevw7kJOAcJ9zcqityx9 vAzYeK7XjA5fmE/JafXXOlEGi3nUJ1qfaPozj6O1FoGcQP9nYQYVwgRdG16Va2vr /F7vNb/fGF8fs9PvJKjGpwM0J5LVD/PpX+p1ijSzVUErrwP9b01j9w8wcc00lAt1 8o9534yF07bF8alwyBAXqtjpxbEEYTA= -----END CERTIFICATE-----Generated at Sat Dec 20 08:56:17 2025 by rpki-client