This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa File: 01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa (raw, json) Hash identifier: mkMCWyS662BZVzkeibVTrJEwHQyl+eWQf9PpNIc+BmY= Subject key identifier: 01:4E:6A:CE:D9:E6:91:17:F8:D6:9E:7A:33:DE:7E:65:E3:01:91:84 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BCD9B0884D9C59A14877E0880 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 3356 IP address blocks: 8.29.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:08:84:d9:c5:9a:14:87:7e:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=e1dce8f0-1bf2-4097-a49b-fbac37624fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:39:43:fd:af:a0:3e:e0:02:86:f7:dc:1e: 38:fc:6d:ef:49:95:8b:84:63:f5:63:a5:c3:2a:84: 9a:64:bf:ff:ef:e4:b1:82:3a:07:d6:83:fa:cc:1e: 02:e0:6f:0d:a0:41:09:c9:91:01:01:17:38:b0:9c: b6:84:7e:bb:be:54:20:4d:37:0f:ab:18:61:82:03: a0:04:33:78:34:80:2a:55:dd:ef:04:f5:1c:3f:20: bc:64:a0:7b:56:5e:0c:92:f9:d6:c2:41:41:18:65: 1a:b1:92:f1:4b:a4:29:b4:e8:29:13:4a:05:49:da: 60:ea:07:30:36:2b:76:2d:9f:ea:ef:5c:53:36:58: 0b:39:7c:0a:06:35:fd:65:da:b1:91:1d:1b:6e:d6: 48:b6:b9:d5:1b:90:37:1e:27:0a:65:80:5d:53:86: 4c:f8:f1:26:71:a8:d2:19:29:7e:6f:7c:13:8d:67: 75:9a:bc:33:3e:23:68:2b:70:78:4d:87:26:7d:c2: 25:ec:29:c5:05:ba:76:6e:63:7f:d0:3b:5b:d3:7b: 45:e9:a0:15:f9:e8:d7:63:ec:e7:0a:8f:0b:e1:a7: c3:fa:95:b5:8a:49:58:bb:c7:2a:50:02:fc:92:91: 21:ca:88:d4:67:db:66:06:4d:2e:a7:4d:f9:a0:f4: b8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4E:6A:CE:D9:E6:91:17:F8:D6:9E:7A:33:DE:7E:65:E3:01:91:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/01b1e3c2-0245-3e89-ba0b-3cb1e6f56235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.29.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:81:c0:a4:be:28:35:0b:e7:c3:0d:e7:80:93:eb:9b:2d:0b: c3:45:a0:a3:d3:73:3d:f4:e4:83:89:5a:87:a0:bb:33:59:b9: 0e:c1:f8:0c:8e:e4:8f:50:39:b1:fb:8d:32:99:e9:ce:4e:e4: a4:e2:82:01:83:96:59:74:75:e6:54:73:7c:70:b9:a5:4a:a9: d8:1f:97:58:55:03:55:38:98:14:58:de:71:9c:7e:21:a2:72: e5:c3:6a:50:2e:21:a1:c7:73:58:da:aa:9f:b5:db:16:fd:b2: d9:21:bd:9e:a0:a7:38:b3:37:65:e6:a7:7a:98:8e:19:0d:db: cd:ea:d8:87:9a:5b:58:69:88:68:9e:da:34:12:05:37:51:8d: 61:f2:06:12:c7:15:6c:c8:aa:64:c2:28:07:6a:5a:26:97:87: 54:5c:c9:84:93:88:a1:e2:c1:6f:c3:dd:e9:62:7a:cb:98:06: 4d:4b:ec:2f:45:e6:1a:bc:6b:81:bb:08:47:35:48:80:bc:d3: ce:7f:b9:5b:04:d6:df:87:04:89:e9:9b:ee:dc:22:25:be:22: 94:0d:70:b4:8f:5c:03:52:e8:d1:a6:05:91:51:ee:db:03:b8: 72:1d:ee:85:81:a9:b9:73:bb:20:18:d5:33:69:05:01:d7:00: 93:2f:dc:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmwiE2cWaFId+CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZTFkY2U4ZjAtMWJmMi00MDk3LWE0OWItZmJhYzM3NjI0ZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBQ5Q/2voD7gAob33B44/G3vSZWLhGP1Y6XD KoSaZL//7+SxgjoH1oP6zB4C4G8NoEEJyZEBARc4sJy2hH67vlQgTTcPqxhhggOg BDN4NIAqVd3vBPUcPyC8ZKB7Vl4MkvnWwkFBGGUasZLxS6QptOgpE0oFSdpg6gcw Nit2LZ/q71xTNlgLOXwKBjX9ZdqxkR0bbtZItrnVG5A3HicKZYBdU4ZM+PEmcajS GSl+b3wTjWd1mrwzPiNoK3B4TYcmfcIl7CnFBbp2bmN/0Dtb03tF6aAV+ejXY+zn Co8L4afD+pW1iklYu8cqUAL8kpEhyojUZ9tmBk0up035oPS4QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFOas7Z5pEX+NaeejPefmXjAZGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMDFiMWUzYzItMDI0NS0z ZTg5LWJhMGItM2NiMWU2ZjU2MjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECB0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGBwKS+KDUL58MN54CT65stC8NFoKPTcz305IOJWoeguzNZuQ7B+AyO 5I9QObH7jTKZ6c5O5KTiggGDlll0deZUc3xwuaVKqdgfl1hVA1U4mBRY3nGcfiGi cuXDalAuIaHHc1jaqp+12xb9stkhvZ6gpzizN2Xmp3qYjhkN283q2IeaW1hpiGie 2jQSBTdRjWHyBhLHFWzIqmTCKAdqWiaXh1RcyYSTiKHiwW/D3eliesuYBk1L7C9F 5hq8a4G7CEc1SIC8085/uVsE1t+HBInpm+7cIiW+IpQNcLSPXANS6NGmBZFR7tsD uHId7oWBqblzuyAY1TNpBQHXAJMv3Og= -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:55 2025 by rpki-client