This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e17e94-36fc-38d7-9385-045fa99e20e8.roa File: e1e17e94-36fc-38d7-9385-045fa99e20e8.roa (raw, json) Hash identifier: +ngRua3dFv8sNPIgQjSgCvXhhCEHwHkPb8J1EXK0MDE= Subject key identifier: 38:B4:52:03:A1:9F:15:0E:80:91:F6:D7:CB:28:10:69:11:7E:78:CD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3BE126F7DA91C1EACDC01D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e17e94-36fc-38d7-9385-045fa99e20e8.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.213.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:26:f7:da:91:c1:ea:cd:c0:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=11ee2864-8bfc-4ef5-9cff-ec2159fe2972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:14:fe:78:08:23:36:db:38:41:5d:35:88:ff: 0f:bc:30:e8:6d:cd:db:b2:82:d3:12:7e:7d:34:b1: 9b:59:5b:70:f9:05:2d:fc:48:a2:21:5f:53:d8:73: 8f:4b:cf:fb:a0:a6:8e:a9:fa:17:28:16:ff:54:84: e7:83:80:bb:37:57:0f:fa:7c:9d:0a:29:71:0c:03: c1:10:80:d2:a8:b1:fc:4a:2f:57:c9:14:7f:bd:26: 90:db:b6:2e:50:44:0c:f6:27:0e:d4:ac:c2:b4:c9: e7:97:7b:ff:f7:53:4d:17:43:91:1e:9f:cc:44:bf: c4:55:ee:e6:d6:35:f3:34:cc:2d:59:e3:f4:d0:10: 23:2f:78:28:bb:17:bd:aa:9b:e2:d7:78:0d:0c:5b: 71:fe:e0:6a:eb:6f:65:12:fa:07:50:28:b2:4c:1d: ea:2c:ec:99:43:85:33:ba:8a:fd:76:44:a2:99:d7: a5:6c:6f:61:c4:64:81:cc:56:b0:ab:47:d0:13:6b: 12:40:ee:d5:13:58:f7:7a:60:74:8c:0a:d4:85:cc: ff:d6:16:53:4a:0d:99:d7:78:7d:3b:bc:e4:38:03: eb:a3:75:37:97:37:b5:69:6d:f1:36:37:4a:d5:f2: 9f:1f:54:21:24:56:2a:90:7f:37:14:4b:78:36:98: d4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B4:52:03:A1:9F:15:0E:80:91:F6:D7:CB:28:10:69:11:7E:78:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1e17e94-36fc-38d7-9385-045fa99e20e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:79:68:c9:70:ca:fb:5c:d1:21:cb:5b:61:12:da:fd:41:45: 05:f4:e6:4c:fb:d8:eb:6e:05:b7:0a:c0:82:2b:a5:c2:6f:89: 71:99:f3:be:e3:88:86:14:07:cd:49:88:c3:c5:e0:30:7e:05: d8:d0:2f:06:45:eb:7b:aa:57:fc:3e:a1:4a:4b:77:b1:40:f2: 48:13:9e:4b:df:c7:1b:52:de:62:58:4a:cc:82:ca:ed:58:e3: 2d:1b:68:b3:83:85:f1:67:a0:9a:ef:49:0d:89:7f:97:76:22: d3:ec:32:d9:2c:e7:dd:6c:a3:42:7d:45:c2:5d:7d:94:05:8a: e2:33:d0:e0:6b:cf:3c:03:7a:4d:65:c9:5f:e4:f2:36:99:b6: 18:3b:51:fa:27:2e:21:d9:f6:00:48:b3:37:0c:c7:fb:f5:c5: 6b:7d:5a:cd:67:78:31:ee:03:1f:cd:52:bd:1b:8d:2d:49:6e: cc:c8:6d:43:2a:1f:1a:78:b5:62:23:18:fd:e4:7b:f1:08:b2: d0:31:7a:f5:d8:8b:32:8e:61:01:1a:5d:ae:a9:6e:28:a2:5e: fb:b7:21:03:f4:f3:8e:d0:48:8c:bf:0a:19:bd:7b:60:d2:d0: 3c:09:a0:4e:59:56:2f:32:00:ed:59:59:22:46:5d:e7:47:dc: 40:de:e0:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74Sb32pHB6s3AHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk MTFlZTI4NjQtOGJmYy00ZWY1LTljZmYtZWMyMTU5ZmUyOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghT+eAgjNts4QV01iP8PvDDobc3bsoLTEn59 NLGbWVtw+QUt/EiiIV9T2HOPS8/7oKaOqfoXKBb/VITng4C7N1cP+nydCilxDAPB EIDSqLH8Si9XyRR/vSaQ27YuUEQM9icO1KzCtMnnl3v/91NNF0ORHp/MRL/EVe7m 1jXzNMwtWeP00BAjL3gouxe9qpvi13gNDFtx/uBq629lEvoHUCiyTB3qLOyZQ4Uz uor9dkSimdelbG9hxGSBzFawq0fQE2sSQO7VE1j3emB0jArUhcz/1hZTSg2Z13h9 O7zkOAPro3U3lze1aW3xNjdK1fKfH1QhJFYqkH83FEt4NpjUYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDi0UgOhnxUOgJH218soEGkRfnjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTFlMTdlOTQtMzZmYy0z OGQ3LTkzODUtMDQ1ZmE5OWUyMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9X0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB5aMlwyvtc0SHLW2ES2v1BRQX05kz72OtuBbcKwIIrpcJviXGZ877j iIYUB81JiMPF4DB+BdjQLwZF63uqV/w+oUpLd7FA8kgTnkvfxxtS3mJYSsyCyu1Y 4y0baLODhfFnoJrvSQ2Jf5d2ItPsMtks591so0J9RcJdfZQFiuIz0OBrzzwDek1l yV/k8jaZthg7UfonLiHZ9gBIszcMx/v1xWt9Ws1neDHuAx/NUr0bjS1JbszIbUMq Hxp4tWIjGP3ke/EIstAxevXYizKOYQEaXa6pbiiiXvu3IQP0847QSIy/Chm9e2DS 0DwJoE5ZVi8yAO1ZWSJGXedH3EDe4G4= -----END CERTIFICATE-----Generated at Sat Dec 20 04:22:17 2025 by rpki-client