This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da28ca4d-c794-307e-8505-e3e72e0becc6.roa File: da28ca4d-c794-307e-8505-e3e72e0becc6.roa (raw, json) Hash identifier: xHDtgVErFkiytk30Nc0JuoUCWXy29hgXfTl2tqOE3OI= Subject key identifier: A7:44:46:9E:AE:47:E6:62:9D:2B:25:C2:B1:50:9E:58:97:90:73:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3BE1220586A11BF984CF5600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da28ca4d-c794-307e-8505-e3e72e0becc6.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 9498 IP address blocks: 23.211.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:22:05:86:a1:1b:f9:84:cf:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=9c9adcec-dd7a-43c1-9de7-1889936954cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b6:9d:a7:7f:69:67:1f:7d:36:ae:c0:2e:c7: 87:96:f3:5b:cb:35:71:ee:35:e9:57:92:6a:c6:97: f8:6c:7a:9c:84:db:7b:62:3e:9a:43:24:37:f4:ee: 21:88:11:86:05:a0:cd:b4:c7:f3:61:14:43:0e:f7: e7:7a:ad:f9:91:33:f6:8d:aa:0d:eb:ce:55:46:d1: e9:18:7a:84:60:7d:0e:ea:14:72:cb:75:f3:41:72: cb:c6:42:4b:30:13:16:18:8a:6e:36:8c:80:df:ca: 73:b6:39:f2:76:eb:10:4b:df:2c:19:e4:f1:2f:1f: 78:14:79:b4:c7:c8:45:58:85:b0:8a:52:85:72:b6: 6f:90:f4:91:4f:c9:f9:b3:bb:9b:65:f3:74:69:ba: 26:26:2c:4d:c2:74:98:c4:5a:8b:49:f0:5b:06:4f: 4e:15:e7:8c:81:1a:5e:4f:6e:47:08:ef:f2:ec:a4: e0:a0:ac:ae:46:db:d3:51:58:44:b6:cf:12:f7:d2: 5d:55:c7:11:eb:7a:47:ce:96:1e:3a:11:f6:df:f7: ae:cb:ce:d7:59:c9:0d:16:41:c5:8a:4a:47:ee:b6: 82:6d:82:20:71:75:1d:6f:84:9c:48:5d:7c:c1:bf: 60:d8:7e:19:89:f5:67:4f:69:c6:b0:41:b0:3b:fb: 71:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:44:46:9E:AE:47:E6:62:9D:2B:25:C2:B1:50:9E:58:97:90:73:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da28ca4d-c794-307e-8505-e3e72e0becc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:6a:d7:7a:c1:91:5b:db:49:ab:32:02:67:69:36:c1:c1:5a: b6:94:28:9e:4d:40:e3:4b:e9:79:a7:f5:03:60:c9:e4:76:d7: 18:94:38:a2:26:ae:62:03:50:d3:d9:2e:45:ea:ca:d6:22:80: 1e:5d:03:62:a1:29:ac:ad:af:ae:21:e8:e2:27:24:ac:77:9a: 75:a4:26:26:24:3e:a4:d3:06:63:cd:74:91:a5:43:c2:fb:0f: 70:01:af:7f:8d:a6:5e:7e:cc:eb:78:bc:c0:d6:93:6e:3d:bc: a0:ac:10:fe:7f:45:10:f8:e1:db:20:34:28:0b:76:a3:7c:f2: f1:30:de:f3:95:3f:dd:3c:4d:16:55:e5:7d:24:44:db:79:33: 73:b1:92:74:89:8f:92:73:a4:f7:42:6a:fc:f5:3e:6d:5d:e6: c1:4d:38:78:83:a8:97:88:88:ff:16:68:17:05:9b:2b:1c:f4: 7b:8a:9b:0f:75:97:58:db:11:0c:28:14:62:75:29:51:4c:9c: 5b:f4:e2:0c:bc:de:8a:e8:a0:cf:66:3d:1d:0a:94:be:98:a1: c3:cc:96:5d:4a:f0:03:6b:d9:c3:4d:76:9b:dd:08:4c:1e:56: eb:91:6b:a1:5e:ad:5a:cb:e7:be:6c:c7:13:f2:80:d0:b5:a9: 7c:a7:ce:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74SIFhqEb+YTPVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk OWM5YWRjZWMtZGQ3YS00M2MxLTlkZTctMTg4OTkzNjk1NGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLadp39pZx99Nq7ALseHlvNbyzVx7jXpV5Jq xpf4bHqchNt7Yj6aQyQ39O4hiBGGBaDNtMfzYRRDDvfneq35kTP2jaoN685VRtHp GHqEYH0O6hRyy3XzQXLLxkJLMBMWGIpuNoyA38pztjnydusQS98sGeTxLx94FHm0 x8hFWIWwilKFcrZvkPSRT8n5s7ubZfN0abomJixNwnSYxFqLSfBbBk9OFeeMgRpe T25HCO/y7KTgoKyuRtvTUVhEts8S99JdVccR63pHzpYeOhH23/euy87XWckNFkHF ikpH7raCbYIgcXUdb4ScSF18wb9g2H4ZifVnT2nGsEGwO/txWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdERp6uR+ZinSslwrFQnliXkHMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGEyOGNhNGQtYzc5NC0z MDdlLTg1MDUtZTNlNzJlMGJlY2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9OJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpq13rBkVvbSasyAmdpNsHBWraUKJ5NQONL6Xmn9QNgyeR21xiUOKIm rmIDUNPZLkXqytYigB5dA2KhKaytr64h6OInJKx3mnWkJiYkPqTTBmPNdJGlQ8L7 D3ABr3+Npl5+zOt4vMDWk249vKCsEP5/RRD44dsgNCgLdqN88vEw3vOVP908TRZV 5X0kRNt5M3OxknSJj5JzpPdCavz1Pm1d5sFNOHiDqJeIiP8WaBcFmysc9HuKmw91 l1jbEQwoFGJ1KVFMnFv04gy83orooM9mPR0KlL6YocPMll1K8ANr2cNNdpvdCEwe VuuRa6FerVrL575sxxPygNC1qXynzgo= -----END CERTIFICATE-----Generated at Sat Dec 20 04:49:46 2025 by rpki-client