This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/00b8bd76-9778-3e13-90d1-44c43d4c3610.roa File: 00b8bd76-9778-3e13-90d1-44c43d4c3610.roa (raw, json) Hash identifier: +uVgqPN53F3Sj3mEByFzKTGvDjLYaO7gBfQbcYsOKIs= Subject key identifier: A8:00:CE:50:E5:87:22:60:A6:66:AF:A7:54:27:88:DE:33:65:81:20 Certificate issuer: /CN=af2f6961-091f-4bb2-90d1-dcdd969f1c75 Certificate serial: 010D0C9F4328584BFFDB7D8CFD35A23B1EE5AF00 Authority key identifier: 41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/00b8bd76-9778-3e13-90d1-44c43d4c3610.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 30323 IP address blocks: 23.174.96.0/24 maxlen: 24 173.195.97.0/24 maxlen: 24 2620:66:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:7d:8c:fd:35:a2:3b:1e:e5:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af2f6961-091f-4bb2-90d1-dcdd969f1c75 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=2ad78b07-f401-42f0-a715-9cff3d1a0193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:b8:bd:08:d1:44:5c:bc:5e:14:09:c3:ed: 65:0d:95:53:cc:86:5a:94:5e:d1:41:8c:c5:6e:ad: 29:b3:04:8d:4a:19:93:b5:01:70:e1:7a:67:e1:07: 46:32:33:fd:49:a1:0b:ea:5c:29:ef:22:2a:6b:32: 47:04:57:02:9f:80:34:76:b1:8d:8c:de:99:0c:e2: 0d:72:fd:0c:07:51:ab:64:38:99:12:5c:d9:95:05: 36:33:eb:dc:fb:0e:26:ac:8d:95:4b:8c:fa:25:e4: 94:89:34:2e:6d:de:a3:4f:17:37:f6:f4:ec:45:c5: 26:17:53:9e:9c:98:d9:1d:86:df:d1:77:dd:97:31: de:c8:cb:35:fd:fb:b2:0d:c7:90:4f:db:d1:1f:49: 81:b2:d2:b9:7d:3d:b3:d4:31:18:f8:5b:84:f1:e5: f3:39:c5:07:b2:8c:92:4b:0c:69:5e:2a:64:ad:6f: bd:89:96:17:32:91:ca:ec:e7:a8:4b:0d:46:47:71: 1c:7a:37:8a:bc:c8:08:80:e6:c1:15:c4:4a:f4:99: 16:3f:05:4e:cd:f4:4e:62:2a:a5:fc:ad:ce:1f:40: 54:6c:a2:77:a1:be:27:5a:2a:f0:32:63:90:b0:ab: 6e:dd:5f:cc:a8:da:77:f5:10:d0:91:37:ca:30:1e: 8c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:00:CE:50:E5:87:22:60:A6:66:AF:A7:54:27:88:DE:33:65:81:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/00b8bd76-9778-3e13-90d1-44c43d4c3610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.crl X509v3 Authority Key Identifier: keyid:41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer sbgp-ipAddrBlock: critical IPv4: 23.174.96.0/24 173.195.97.0/24 IPv6: 2620:66:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:f1:b4:8f:73:e1:fa:a5:12:9f:d0:ff:dd:cd:b5:92:ab:46: ee:6d:1d:fd:50:cf:d4:f6:08:aa:68:d4:86:52:72:74:c1:c1: 05:97:a9:9e:78:c2:4c:9b:1e:e0:1a:a0:ff:e7:5d:2b:58:e0: 6e:0a:5f:e4:ba:76:d1:da:54:e5:03:93:4e:c0:0e:25:25:21: 49:31:04:ef:3a:c8:22:cc:c3:7a:0b:c6:f3:3d:1e:b9:2e:6a: f4:42:45:f3:ee:9c:74:0f:8d:0a:cb:f8:55:3f:ba:81:fa:1d: 03:82:ae:39:27:3a:a7:f6:ca:f3:93:3a:00:c9:e6:1c:0b:83: 10:0d:69:9f:81:26:16:fd:f9:31:79:af:4e:03:74:03:39:e0: 14:42:dd:0e:2b:43:98:1e:b0:81:3d:99:88:d2:02:ca:b6:44: 19:6a:c7:89:27:f8:9d:2b:e0:54:dc:68:b1:eb:45:c9:e0:e7: 14:b9:c1:79:c3:f3:84:9b:a8:e0:f4:4f:60:58:97:0b:6e:ec: f5:19:f1:e2:56:d3:20:48:e4:77:d2:c1:5d:69:d7:67:3f:84: 72:13:27:e1:b1:32:92:d5:b0:6d:f9:67:4a:86:de:13:a4:d5: 02:87:18:97:cc:86:4b:44:a0:e3:43:23:b6:72:8b:42:8d:58: e4:32:c6:50 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEv/232M/TWiOx7lrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYyZjY5NjEtMDkxZi00YmIyLTkwZDEtZGNkZDk2OWYx Yzc1MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MmFkNzhiMDctZjQwMS00MmYwLWE3MTUtOWNmZjNkMWEwMTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxO4vQjRRFy8XhQJw+1lDZVTzIZalF7RQYzF bq0pswSNShmTtQFw4Xpn4QdGMjP9SaEL6lwp7yIqazJHBFcCn4A0drGNjN6ZDOIN cv0MB1GrZDiZElzZlQU2M+vc+w4mrI2VS4z6JeSUiTQubd6jTxc39vTsRcUmF1Oe nJjZHYbf0XfdlzHeyMs1/fuyDceQT9vRH0mBstK5fT2z1DEY+FuE8eXzOcUHsoyS SwxpXipkrW+9iZYXMpHK7OeoSw1GR3EcejeKvMgIgObBFcRK9JkWPwVOzfROYiql /K3OH0BUbKJ3ob4nWirwMmOQsKtu3V/MqNp39RDQkTfKMB6MtQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFKgAzlDlhyJgpmavp1QniN4zZYEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZjJm Njk2MS0wOTFmLTRiYjItOTBkMS1kY2RkOTY5ZjFjNzUvMDBiOGJkNzYtOTc3OC0z ZTEzLTkwZDEtNDRjNDNkNGMzNjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWYyZjY5NjEtMDkxZi00YmIyLTkw ZDEtZGNkZDk2OWYxYzc1L2FmMmY2OTYxLTA5MWYtNGJiMi05MGQxLWRjZGQ5Njlm MWM3NS5jcmwwHwYDVR0jBBgwFoAUQdUiRGVyuzxnZ2XnKD6/fTQXGCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZjJmNjk2MS0wOTFmLTRiYjItOTBkMS1kY2Rk OTY5ZjFjNzUuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAF65gAwQA rcNhMA8EAgACMAkDBwAmIABmoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAvvG0j3Ph+qUSn9D/3c21kqtG 7m0d/VDP1PYIqmjUhlJydMHBBZepnnjCTJse4Bqg/+ddK1jgbgpf5Lp20dpU5QOT TsAOJSUhSTEE7zrIIszDegvG8z0euS5q9EJF8+6cdA+NCsv4VT+6gfodA4KuOSc6 p/bK85M6AMnmHAuDEA1pn4EmFv35MXmvTgN0AzngFELdDitDmB6wgT2ZiNICyrZE GWrHiSf4nSvgVNxosetFyeDnFLnBecPzhJuo4PRPYFiXC27s9Rnx4lbTIEjkd9LB XWnXZz+EchMn4bEyktWwbflnSobeE6TVAocYl8yGS0Sg40MjtnKLQo1Y5DLGUA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:42 2025 by rpki-client