This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dffb3457-fa8e-35cd-954f-8e144680b750.roa File: dffb3457-fa8e-35cd-954f-8e144680b750.roa (raw, json) Hash identifier: PL1wtwnA5uyl3pSTlmZh4xIP1JgLUU+6xoKkDj1Tmnw= Subject key identifier: D6:D9:46:0B:A6:84:EF:7F:17:2F:92:50:BA:59:9E:AD:69:FA:40:E0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C258B77968E29F9A96C1A6A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dffb3457-fa8e-35cd-954f-8e144680b750.roa Signing time: Thu 11 Dec 2025 02:00:30 +0000 ROA not before: Thu 11 Dec 2025 02:00:30 +0000 ROA not after: Wed 11 Mar 2026 01:00:30 +0000 asID: 20940 IP address blocks: 23.212.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:25:8b:77:96:8e:29:f9:a9:6c:1a:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 11 02:00:30 2025 GMT Not After : Mar 11 01:00:30 2026 GMT Subject: CN=57bede6c-925a-4775-80ce-0c06b335ef5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9b:33:ed:9a:ad:e6:d1:e4:2a:4e:cd:e5:c8: 51:f1:e2:5f:2c:84:a4:99:2e:e6:2a:53:7d:e0:e2: 4f:09:ed:10:45:aa:2d:58:be:b3:4f:a5:01:1f:45: 18:cb:c4:42:e3:81:3e:e2:25:4d:c5:84:f4:66:81: 23:a5:f1:c9:42:ef:f7:9d:2b:c3:d0:fd:91:9b:6d: 2a:dc:0e:d4:bb:ea:b8:80:69:8d:f6:66:37:0e:86: c9:8e:9e:6b:26:6e:c0:89:6e:95:af:98:7e:5b:be: 65:a9:6f:91:e8:ec:7d:db:dd:9b:39:0c:c0:db:4d: e8:f5:3b:c4:34:67:25:03:b1:2b:99:8c:ab:a8:28: d5:da:ea:76:6d:41:1a:4e:92:92:dd:c1:e9:14:a7: 15:22:11:7d:b4:f1:bb:53:4d:af:05:00:a7:8b:b4: 95:64:82:95:da:52:c6:a0:9e:76:72:2f:d1:1c:6e: 3e:b0:6b:3f:61:2e:85:f8:0f:9e:cc:a8:7c:b8:bc: 8f:28:a5:3e:c8:45:5d:72:54:47:43:ef:2c:d3:66: 2d:e9:38:10:cf:48:36:8c:7a:cf:b0:97:af:61:aa: c5:6f:4f:00:a1:f1:40:f4:1b:64:11:d4:71:04:c7: 77:a0:d7:37:e5:aa:22:4d:3f:c7:16:2d:fb:61:7e: da:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D9:46:0B:A6:84:EF:7F:17:2F:92:50:BA:59:9E:AD:69:FA:40:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dffb3457-fa8e-35cd-954f-8e144680b750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0a:22:5c:92:2f:40:40:45:e5:33:9e:df:2b:05:80:b0:77: a0:32:f0:7e:61:1a:d1:a1:4c:4e:b9:7b:51:f5:58:ca:44:45: 36:30:a5:a7:44:7d:28:67:c7:3e:49:d3:a1:15:d1:14:4a:aa: 59:f3:bc:01:51:32:87:b0:07:8d:b9:b4:f7:52:89:b3:b8:89: 50:dc:5e:03:ff:20:4c:04:c9:0e:b7:5d:fa:3c:01:db:25:0c: ca:2a:ec:89:e0:09:61:1b:71:4b:f0:81:65:70:e6:b2:7c:b3: 1c:a4:60:eb:cf:ca:3f:89:54:66:8e:a6:ef:fd:e6:57:80:da: 4e:66:0d:0c:05:4b:b0:c9:2f:cc:a4:5f:a6:c2:50:27:77:21: 9d:09:31:80:30:9b:a9:ed:c6:ca:9a:06:73:9d:7c:31:02:83: 5e:01:65:0a:e7:3f:0a:ee:91:f7:05:92:d9:e5:3b:c4:d9:c6: a9:4c:a4:e8:c5:a6:37:c8:72:c2:b1:37:d3:94:16:5f:c4:cf: e5:61:18:74:57:3f:d7:81:e6:55:24:61:16:66:63:40:c7:fa: 47:4d:e0:7a:95:b7:91:a8:b9:dc:84:1d:84:68:40:3c:68:2f: 49:76:14:75:5f:6d:b8:81:d5:97:15:e0:01:97:8c:32:16:ff: 01:5b:a3:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwli3eWjin5qWwaaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxMTAyMDAzMFoXDTI2MDMxMTAxMDAzMFowLzEtMCsGA1UEAxMk NTdiZWRlNmMtOTI1YS00Nzc1LTgwY2UtMGMwNmIzMzVlZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15sz7Zqt5tHkKk7N5chR8eJfLISkmS7mKlN9 4OJPCe0QRaotWL6zT6UBH0UYy8RC44E+4iVNxYT0ZoEjpfHJQu/3nSvD0P2Rm20q 3A7Uu+q4gGmN9mY3DobJjp5rJm7AiW6Vr5h+W75lqW+R6Ox9292bOQzA203o9TvE NGclA7ErmYyrqCjV2up2bUEaTpKS3cHpFKcVIhF9tPG7U02vBQCni7SVZIKV2lLG oJ52ci/RHG4+sGs/YS6F+A+ezKh8uLyPKKU+yEVdclRHQ+8s02Yt6TgQz0g2jHrP sJevYarFb08AofFA9BtkEdRxBMd3oNc35aoiTT/HFi37YX7a3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbZRgumhO9/Fy+SULpZnq1p+kDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZmYjM0NTctZmE4ZS0z NWNkLTk1NGYtOGUxNDQ2ODBiNzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9Q6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0KIlySL0BAReUznt8rBYCwd6Ay8H5hGtGhTE65e1H1WMpERTYwpadE fShnxz5J06EV0RRKqlnzvAFRMoewB425tPdSibO4iVDcXgP/IEwEyQ63Xfo8Adsl DMoq7IngCWEbcUvwgWVw5rJ8sxykYOvPyj+JVGaOpu/95leA2k5mDQwFS7DJL8yk X6bCUCd3IZ0JMYAwm6ntxsqaBnOdfDECg14BZQrnPwrukfcFktnlO8TZxqlMpOjF pjfIcsKxN9OUFl/Ez+VhGHRXP9eB5lUkYRZmY0DH+kdN4HqVt5GoudyEHYRoQDxo L0l2FHVfbbiB1ZcV4AGXjDIW/wFbo10= -----END CERTIFICATE-----Generated at Sat Dec 20 01:14:50 2025 by rpki-client