This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f34e744c-3131-373e-b137-574dc656b4e0.roa File: f34e744c-3131-373e-b137-574dc656b4e0.roa (raw, json) Hash identifier: dYlffXHSAkZI9hcpnAvb7QF4P2Zn0eyfMgLfE0t2Tm4= Subject key identifier: 3C:60:A4:7B:23:31:29:B0:7C:19:DE:EB:3B:95:3C:3A:46:8A:26:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3BE1189E979280BE9B741400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f34e744c-3131-373e-b137-574dc656b4e0.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.212.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:18:9e:97:92:80:be:9b:74:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=ee9ac4c5-72e4-4e04-bcec-d4e747028c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ce:a5:4d:b9:a9:f3:11:c9:66:bf:e0:15:7d: 16:37:0d:ed:8d:a3:ba:9d:9e:5e:c0:a6:55:12:8b: 42:74:30:79:7d:90:dc:bd:8e:13:eb:cc:02:58:e2: ce:fa:88:d6:21:7f:01:ac:94:bf:b6:ea:75:79:11: 22:8b:0f:25:32:4b:7a:d5:62:39:5f:71:61:46:f8: 84:f7:ae:b8:8a:5d:5a:e8:a2:7e:88:49:07:e6:e9: 94:59:e8:18:7b:f4:05:20:11:38:fc:de:9c:37:19: fa:d1:c0:41:cb:45:dc:55:d4:42:34:ec:4f:55:ff: 7c:db:c2:2e:4c:d6:12:b4:37:17:b1:ab:08:f8:af: 9a:24:91:4d:3c:55:44:1c:89:eb:fc:5e:17:51:ad: ec:05:bc:e7:ac:08:09:c9:85:23:eb:03:16:51:ae: 81:72:bb:88:fd:bc:02:df:34:fe:16:b7:77:78:46: d4:fb:73:dd:9a:55:54:ae:76:ce:fa:52:2e:9b:b7: 08:6e:49:44:42:ee:47:fb:82:6c:a7:86:00:98:2c: 69:a2:92:96:05:65:ed:16:b5:b3:30:b9:4a:23:7e: e3:53:d7:52:09:6a:94:15:e5:51:c3:cb:23:a8:1e: 6e:89:8b:9a:12:a0:be:4c:d7:39:50:b0:cd:03:8a: bf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:60:A4:7B:23:31:29:B0:7C:19:DE:EB:3B:95:3C:3A:46:8A:26:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f34e744c-3131-373e-b137-574dc656b4e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:23:6c:38:52:6c:16:3e:0b:5b:93:cf:6b:4f:48:4d:89:49: 72:f0:66:07:26:f1:51:be:f0:a1:b7:02:6f:26:f6:3a:03:bb: 95:50:ef:ad:e4:f2:6e:ac:67:40:3e:6b:6d:8a:d9:ca:79:4b: f9:5a:7d:88:80:df:2d:e7:ef:98:2e:56:91:e0:3a:8b:02:40: 7e:60:e7:0d:77:1e:33:bb:5b:6b:16:1b:9a:47:76:48:29:5d: 4e:84:8d:11:ff:0d:d0:9e:60:a2:82:8c:01:1a:e2:e7:86:cd: 8c:c7:bb:ce:25:ae:3b:a7:40:18:1c:14:70:69:cf:bd:d0:f0: 33:10:3d:0d:9b:7b:a7:62:cf:70:62:c7:87:ad:26:b3:d9:96: 8a:56:29:56:83:23:4e:ea:f3:ef:65:ee:5b:cc:18:0f:1b:92: 7d:6e:c6:0b:96:e8:d3:e7:27:9c:bd:8d:79:aa:48:df:08:6d: a2:e0:ed:c4:e9:72:ea:6b:29:17:2c:ff:38:19:05:78:99:5b: b6:3c:81:9a:74:59:d5:db:cf:48:57:3a:b4:76:91:80:43:33: a1:e0:06:b0:09:b1:e7:35:0d:b9:36:fd:37:cb:c0:9e:06:fb: d3:b4:65:20:ae:80:c3:47:2b:00:4f:af:69:11:34:88:1f:b9: 8f:4c:f0:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74Riel5KAvpt0FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZWU5YWM0YzUtNzJlNC00ZTA0LWJjZWMtZDRlNzQ3MDI4YzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks6lTbmp8xHJZr/gFX0WNw3tjaO6nZ5ewKZV EotCdDB5fZDcvY4T68wCWOLO+ojWIX8BrJS/tup1eREiiw8lMkt61WI5X3FhRviE 9664il1a6KJ+iEkH5umUWegYe/QFIBE4/N6cNxn60cBBy0XcVdRCNOxPVf9828Iu TNYStDcXsasI+K+aJJFNPFVEHInr/F4XUa3sBbznrAgJyYUj6wMWUa6BcruI/bwC 3zT+Frd3eEbU+3PdmlVUrnbO+lIum7cIbklEQu5H+4Jsp4YAmCxpopKWBWXtFrWz MLlKI37jU9dSCWqUFeVRw8sjqB5uiYuaEqC+TNc5ULDNA4q/LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxgpHsjMSmwfBne6zuVPDpGiiYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjM0ZTc0NGMtMzEzMS0z NzNlLWIxMzctNTc0ZGM2NTZiNGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9RgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIjbDhSbBY+C1uTz2tPSE2JSXLwZgcm8VG+8KG3Am8m9joDu5VQ763k 8m6sZ0A+a22K2cp5S/lafYiA3y3n75guVpHgOosCQH5g5w13HjO7W2sWG5pHdkgp XU6EjRH/DdCeYKKCjAEa4ueGzYzHu84lrjunQBgcFHBpz73Q8DMQPQ2be6diz3Bi x4etJrPZlopWKVaDI07q8+9l7lvMGA8bkn1uxguW6NPnJ5y9jXmqSN8IbaLg7cTp cuprKRcs/zgZBXiZW7Y8gZp0WdXbz0hXOrR2kYBDM6HgBrAJsec1Dbk2/TfLwJ4G +9O0ZSCugMNHKwBPr2kRNIgfuY9M8MQ= -----END CERTIFICATE-----Generated at Sat Dec 20 06:20:13 2025 by rpki-client