This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d85ad17a-9443-36be-a0cd-94ed340eaab8.roa File: d85ad17a-9443-36be-a0cd-94ed340eaab8.roa (raw, json) Hash identifier: BpZOXgqQZwG0AL8SdJQnElcdhzkIQkSFBCs1ObR42Lw= Subject key identifier: 71:0E:D3:15:C8:1A:D3:44:0F:2E:A5:C9:1C:1B:98:92:51:5F:87:EA Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BFFDB7B7444E093A0F471A0C8 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d85ad17a-9443-36be-a0cd-94ed340eaab8.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 989 IP address blocks: 8.36.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:7b:74:44:e0:93:a0:f4:71:a0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=a8992a7f-5fa1-413f-9b02-b05f5ba1ee01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:34:2d:ac:20:d5:cb:f0:6f:3f:68:f7:0b:00: 65:79:56:66:4c:f0:5d:b9:5b:d0:f7:21:d7:24:b4: 5c:a4:dc:35:67:2e:46:9e:37:cd:ae:50:26:78:8a: 0e:41:30:80:3a:18:06:dc:b8:27:6b:8e:c2:53:4f: bb:8b:60:93:c7:ac:7b:56:d5:89:32:e8:14:5c:f2: c0:58:32:4b:a4:cf:ec:80:4c:f7:35:8e:0e:cc:e8: d7:dc:8b:e7:da:7e:01:7a:72:d8:c7:fb:53:5c:55: d4:ad:65:0e:38:e5:f3:21:da:af:f3:02:00:99:fc: c4:82:d4:16:e0:e5:ba:d1:bc:87:10:46:96:55:18: 9a:8a:b7:0f:b3:27:cb:89:36:01:fc:87:4f:a5:f9: ee:e8:fc:09:59:51:18:d5:ba:1a:0b:84:0e:a2:57: da:0f:88:bd:9c:0e:79:e4:03:b8:94:30:e6:14:10: 92:e0:47:df:ce:5f:9d:36:fc:05:21:0f:99:a8:b0: e7:1d:49:41:79:8f:60:30:b6:39:fb:89:b4:a4:0d: f1:37:48:53:86:aa:81:b9:4f:11:24:a3:60:0f:5e: 48:3b:7f:00:76:a2:88:f5:33:71:16:f1:0f:2e:ec: e5:42:7b:22:71:0d:01:27:ed:75:f2:07:ff:b2:49: a4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0E:D3:15:C8:1A:D3:44:0F:2E:A5:C9:1C:1B:98:92:51:5F:87:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d85ad17a-9443-36be-a0cd-94ed340eaab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.36.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2f:45:90:23:16:1b:37:c4:12:4c:02:94:86:03:ef:f7:72: 9c:af:9d:e6:49:89:47:0f:cd:3b:1b:3c:4e:96:58:db:42:64: bc:08:41:bb:e7:fb:17:ef:04:29:a5:65:a7:53:fe:47:8a:81: 0f:a9:83:bd:d5:65:73:c4:6d:20:74:d8:04:de:39:78:f3:e2: d1:be:97:9a:0d:e6:3e:58:a6:b1:1c:74:6d:2b:9c:b6:4f:98: 40:e6:99:96:97:44:41:7b:93:59:9e:0d:a9:c3:cd:9b:ff:24: e7:0e:65:cf:bd:3b:3e:d1:85:0a:7f:8e:5b:26:58:91:3f:88: ae:e9:90:c4:93:10:94:91:9d:38:66:68:87:21:88:c5:89:3d: 86:33:6c:e1:ff:8d:7d:22:0d:8a:0c:45:eb:8a:c9:22:12:e2: fd:c2:ae:e5:9c:54:66:df:4c:9b:0d:8c:df:c1:6c:29:8f:ae: 7f:71:60:e7:b7:32:06:1f:83:8a:4b:7e:cf:14:18:26:55:13: bc:b4:1d:ca:5e:ce:69:35:56:b1:66:13:1a:8a:da:cb:fe:cb: ca:59:c7:88:05:d1:9c:85:50:ba:31:6b:ed:72:e2:17:f1:c9: 5c:7a:0e:9f:d9:90:3b:06:6c:a7:52:4d:1c:1d:26:37:b8:b5: 6a:0e:2e:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/23t0ROCToPRxoMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk YTg5OTJhN2YtNWZhMS00MTNmLTliMDItYjA1ZjViYTFlZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzQtrCDVy/BvP2j3CwBleVZmTPBduVvQ9yHX JLRcpNw1Zy5GnjfNrlAmeIoOQTCAOhgG3Lgna47CU0+7i2CTx6x7VtWJMugUXPLA WDJLpM/sgEz3NY4OzOjX3Ivn2n4BenLYx/tTXFXUrWUOOOXzIdqv8wIAmfzEgtQW 4OW60byHEEaWVRiaircPsyfLiTYB/IdPpfnu6PwJWVEY1boaC4QOolfaD4i9nA55 5AO4lDDmFBCS4Effzl+dNvwFIQ+ZqLDnHUlBeY9gMLY5+4m0pA3xN0hThqqBuU8R JKNgD15IO38AdqKI9TNxFvEPLuzlQnsicQ0BJ+118gf/skmkJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEO0xXIGtNEDy6lyRwbmJJRX4fqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZDg1YWQxN2EtOTQ0My0z NmJlLWEwY2QtOTRlZDM0MGVhYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCCTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMvRZAjFhs3xBJMApSGA+/3cpyvneZJiUcPzTsbPE6WWNtCZLwIQbvn +xfvBCmlZadT/keKgQ+pg73VZXPEbSB02ATeOXjz4tG+l5oN5j5YprEcdG0rnLZP mEDmmZaXREF7k1meDanDzZv/JOcOZc+9Oz7RhQp/jlsmWJE/iK7pkMSTEJSRnThm aIchiMWJPYYzbOH/jX0iDYoMReuKySIS4v3CruWcVGbfTJsNjN/BbCmPrn9xYOe3 MgYfg4pLfs8UGCZVE7y0Hcpezmk1VrFmExqK2sv+y8pZx4gF0ZyFULoxa+1y4hfx yVx6Dp/ZkDsGbKdSTRwdJje4tWoOLoM= -----END CERTIFICATE-----Generated at Sat Dec 6 22:42:35 2025 by rpki-client