This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/80afc93c-8379-33e4-8c58-900d16b82c22.roa File: 80afc93c-8379-33e4-8c58-900d16b82c22.roa (raw, json) Hash identifier: c7PXZm3n8DoAZFUeDHwZMWfsgO8pmKHwvIOWpDm443E= Subject key identifier: B9:43:C8:72:75:12:59:D1:58:E1:8D:AD:67:ED:BF:83:36:1C:29:F7 Certificate issuer: /CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d Certificate serial: 010D0C9F4328584BFFDB8374E4DE7DE13EAC5900 Authority key identifier: 4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/80afc93c-8379-33e4-8c58-900d16b82c22.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 26421 IP address blocks: 23.29.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:83:74:e4:de:7d:e1:3e:ac:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=82729112-82f3-4e0a-967f-abbcf6246655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:5c:68:d1:1f:55:63:f7:1c:26:9c:7a:48: 1c:44:4c:b4:bc:1f:db:9d:e3:05:c3:e8:f9:a5:17: 8d:68:6d:0a:0b:88:c3:2d:7f:53:a7:51:bc:06:08: e1:1d:14:05:66:6e:ba:69:f8:a9:83:b6:b2:e8:a7: 74:22:17:eb:08:32:6b:f2:cd:98:73:e5:60:b2:06: 38:0a:ee:da:9e:2d:67:95:4e:94:d3:f7:4f:a6:67: f6:fb:f0:8f:e4:20:10:d6:32:fb:2c:d5:50:68:9c: 66:fa:aa:ec:87:51:a2:6b:09:bd:c3:c3:1a:a5:4c: 58:27:ca:20:85:d6:95:bc:26:00:3f:64:b2:e3:3b: 19:83:6d:23:8f:58:99:e9:d8:13:5d:1f:6b:ad:fb: c4:3f:37:f6:f6:93:01:05:8b:17:59:e6:ac:e6:39: a7:6f:4b:93:69:17:60:12:e2:e9:c2:63:f2:a7:b5: 46:18:07:7f:de:34:82:4c:1d:21:2f:ea:f5:40:54: a6:47:29:78:e6:81:49:d8:21:83:59:49:62:e9:05: b6:0b:6a:05:bb:d4:6c:f3:e5:27:93:f0:4d:f8:33: 4e:8d:c5:8b:54:5c:25:78:60:29:af:70:9c:14:17: 4c:4e:f6:f6:e7:80:be:6d:ae:b6:f8:f4:b9:08:75: dd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:43:C8:72:75:12:59:D1:58:E1:8D:AD:67:ED:BF:83:36:1C:29:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/80afc93c-8379-33e4-8c58-900d16b82c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl X509v3 Authority Key Identifier: keyid:4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer sbgp-ipAddrBlock: critical IPv4: 23.29.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e3:d2:df:e3:03:b9:a5:08:30:97:49:24:e1:d7:d8:74:c3: b0:e2:41:17:8b:8c:c3:3f:e4:19:ae:f1:14:a4:cf:fb:a2:0a: e8:1f:83:3e:45:4f:df:4d:83:67:98:dc:15:e5:53:74:16:2d: 56:43:9e:69:5f:45:11:af:08:1e:a6:ef:f3:a3:4b:fa:68:52: cc:5f:d0:a0:ad:63:6c:de:94:cd:e5:28:e3:1c:7f:9c:8f:aa: 17:aa:44:b8:0f:63:f6:2f:b1:dd:2b:c5:3f:33:78:cf:dc:8b: f1:37:3e:92:58:e4:50:ce:95:f9:80:59:0e:ac:08:b4:fd:b1: 9f:57:65:01:48:5c:e4:5c:be:8f:e1:8b:9d:5e:f0:86:b7:25: 11:30:02:7f:f9:cb:95:a7:6d:50:5d:87:cc:b7:e1:a7:5f:66: d6:2c:fe:54:02:ab:e8:e8:7c:25:60:de:a9:91:6d:1a:ee:63: 6d:2c:c9:0c:31:ad:59:bb:d8:94:6c:74:1b:71:70:2b:ba:68: 8e:2c:f8:b9:ca:de:2a:b8:8e:2d:bc:03:c8:e5:a1:2a:52:dc: 19:6c:23:bc:0a:3b:8e:61:d1:c6:5c:05:87:63:b9:6e:dd:37: 45:d4:55:fb:d5:c1:1e:6e:c3:35:9d:48:f2:06:a7:c0:7c:15: bb:af:7c:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/24N05N594T6sWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZjk2OGEtNmY4Yi00YzkyLWJhZTUtYzhmZDFjNzNk OTVkMB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk ODI3MjkxMTItODJmMy00ZTBhLTk2N2YtYWJiY2Y2MjQ2NjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnZcaNEfVWP3HCacekgcREy0vB/bneMFw+j5 pReNaG0KC4jDLX9Tp1G8BgjhHRQFZm66afipg7ay6Kd0IhfrCDJr8s2Yc+VgsgY4 Cu7ani1nlU6U0/dPpmf2+/CP5CAQ1jL7LNVQaJxm+qrsh1Giawm9w8MapUxYJ8og hdaVvCYAP2Sy4zsZg20jj1iZ6dgTXR9rrfvEPzf29pMBBYsXWeas5jmnb0uTaRdg EuLpwmPyp7VGGAd/3jSCTB0hL+r1QFSmRyl45oFJ2CGDWUli6QW2C2oFu9Rs8+Un k/BN+DNOjcWLVFwleGApr3CcFBdMTvb254C+ba62+PS5CHXdhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlDyHJ1ElnRWOGNrWftv4M2HCn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Y2Fm OTY4YS02ZjhiLTRjOTItYmFlNS1jOGZkMWM3M2Q5NWQvODBhZmM5M2MtODM3OS0z M2U0LThjNTgtOTAwZDE2YjgyYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWNhZjk2OGEtNmY4Yi00YzkyLWJh ZTUtYzhmZDFjNzNkOTVkLzljYWY5NjhhLTZmOGItNGM5Mi1iYWU1LWM4ZmQxYzcz ZDk1ZC5jcmwwHwYDVR0jBBgwFoAUSh0rIJrR3Xexa1NtSjyGeV0epNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85Y2FmOTY4YS02ZjhiLTRjOTItYmFlNS1jOGZk MWM3M2Q5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFx0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXj0t/jA7mlCDCXSSTh19h0w7DiQReLjMM/5Bmu8RSkz/uiCugfgz5F T99Ng2eY3BXlU3QWLVZDnmlfRRGvCB6m7/OjS/poUsxf0KCtY2zelM3lKOMcf5yP qheqRLgPY/Yvsd0rxT8zeM/ci/E3PpJY5FDOlfmAWQ6sCLT9sZ9XZQFIXORcvo/h i51e8Ia3JREwAn/5y5WnbVBdh8y34adfZtYs/lQCq+jofCVg3qmRbRruY20syQwx rVm72JRsdBtxcCu6aI4s+LnK3iq4ji28A8jloSpS3BlsI7wKO45h0cZcBYdjuW7d N0XUVfvVwR5uwzWdSPIGp8B8FbuvfII= -----END CERTIFICATE-----Generated at Sat Dec 6 20:39:50 2025 by rpki-client