This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa File: 1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa (raw, json) Hash identifier: XSZfRz5rUQKkbwzO0uI6QFdDTPZLAD9NfgEGU42MM2A= Subject key identifier: 7C:1B:E5:3B:9C:21:B8:14:6C:4F:0C:E4:61:50:49:6E:46:94:E2:94 Certificate issuer: /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Certificate serial: 010D0C9F4328584BF615DE046BBD729D0D733280 Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 53727 IP address blocks: 23.172.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:de:04:6b:bd:72:9d:0d:73:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=e8f1bc16-6769-4a47-a585-a973d23e0ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:35:14:a5:99:5d:d6:81:cb:f1:2e:6f:eb: 9b:e7:93:90:a0:a0:85:32:64:27:79:b6:57:ca:dc: 8f:cf:0c:79:71:e7:12:73:67:57:38:3e:ef:2d:1d: 9d:de:4c:d0:50:37:eb:6b:f3:ed:40:da:03:8e:fb: 02:6e:7b:95:cd:0a:c4:a8:da:69:40:74:76:6b:58: aa:13:bd:23:44:71:e6:d9:4a:a1:ca:5d:e3:1a:ac: 06:df:e1:da:5f:bf:fa:7a:f0:01:1b:e5:ac:84:3d: d8:a7:1e:df:1a:e4:82:61:66:08:57:1c:a7:99:9a: b1:c0:50:b7:67:83:e4:f5:28:f8:0e:73:b0:cb:db: be:39:ac:e5:29:f0:ef:a6:87:0c:72:57:bf:b4:89: 9a:05:6b:41:2e:bd:81:33:fb:b5:1e:5d:d7:c8:27: 5c:b9:8d:5d:50:a4:19:ee:35:d4:d0:ad:23:6b:90: 1a:42:b6:90:92:9e:0e:1f:fb:7d:a7:48:5a:72:a4: 27:35:25:2a:52:a4:ec:f0:90:6f:fe:f4:b2:04:b6: 22:43:42:eb:06:3a:de:24:ca:32:f8:f0:6c:cf:3d: 08:05:e9:3b:d0:6e:d7:b5:ee:44:c6:58:ba:2d:6c: af:5f:a8:76:3c:f2:f4:77:38:2e:92:21:0a:28:65: 73:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1B:E5:3B:9C:21:B8:14:6C:4F:0C:E4:61:50:49:6E:46:94:E2:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl X509v3 Authority Key Identifier: keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer sbgp-ipAddrBlock: critical IPv4: 23.172.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:6b:40:dc:c9:98:94:7f:3e:ab:e1:e6:ca:d5:ba:49:e9:da: 4a:02:2a:59:c0:a5:3b:9e:d3:57:7d:d0:e4:02:25:76:d7:86: 35:e5:b3:d4:1a:c4:40:5c:a2:83:b5:d7:b2:c1:7a:69:67:89: 9e:49:e0:e1:d9:4c:3c:45:9e:9d:01:bb:f5:59:24:97:70:f4: ac:d4:6a:60:98:03:13:00:7e:d6:01:a7:7f:39:f5:18:e2:d5: 2d:14:fa:a4:c3:51:04:59:b2:44:d0:dc:e8:10:26:3d:78:ae: c3:cd:5e:07:ac:07:31:27:0f:23:f9:b7:03:e6:b8:aa:31:c9: 19:97:1d:18:6f:7a:d3:fb:0d:ec:24:05:eb:16:31:a7:29:dd: 86:26:df:9e:34:f8:d6:1f:a6:35:5c:5c:8a:6b:5d:4d:9a:68: 2e:bc:29:ed:39:ba:91:76:0e:39:0c:37:d0:9e:03:0c:d6:7e: e5:81:69:ff:0a:68:1c:75:bd:03:9a:24:44:08:68:4b:e5:c4: 45:ef:42:70:f1:7e:17:19:d8:5f:d7:01:83:0a:44:17:ae:1d: b4:aa:a4:7c:1f:8f:07:2e:a0:a7:ce:b8:1c:bd:82:5a:25:ed: 29:4d:1c:c2:3e:1f:36:de:4e:34:80:f7:9e:53:4d:df:bb:3b: c8:61:c5:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2Fd4Ea71ynQ1zMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3 MmYzMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk ZThmMWJjMTYtNjc2OS00YTQ3LWE1ODUtYTk3M2QyM2UwYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvg1FKWZXdaBy/Eub+ub55OQoKCFMmQnebZX ytyPzwx5cecSc2dXOD7vLR2d3kzQUDfra/PtQNoDjvsCbnuVzQrEqNppQHR2a1iq E70jRHHm2Uqhyl3jGqwG3+HaX7/6evABG+WshD3Ypx7fGuSCYWYIVxynmZqxwFC3 Z4Pk9Sj4DnOwy9u+OazlKfDvpocMcle/tImaBWtBLr2BM/u1Hl3XyCdcuY1dUKQZ 7jXU0K0ja5AaQraQkp4OH/t9p0hacqQnNSUqUqTs8JBv/vSyBLYiQ0LrBjreJMoy +PBszz0IBek70G7Xte5Exli6LWyvX6h2PPL0dzgukiEKKGVzkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwb5TucIbgUbE8M5GFQSW5GlOKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvMTY1MmZkYjktMDVkMC0z YzRjLWEzZjYtMWRlYmZjZmI5MjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4 NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh ZjVhODcyZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6w4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtrQNzJmJR/Pqvh5srVuknp2koCKlnApTue01d90OQCJXbXhjXls9Qa xEBcooO117LBemlniZ5J4OHZTDxFnp0Bu/VZJJdw9KzUamCYAxMAftYBp3859Rji 1S0U+qTDUQRZskTQ3OgQJj14rsPNXgesBzEnDyP5twPmuKoxyRmXHRhvetP7Dewk BesWMacp3YYm3540+NYfpjVcXIprXU2aaC68Ke05upF2DjkMN9CeAwzWfuWBaf8K aBx1vQOaJEQIaEvlxEXvQnDxfhcZ2F/XAYMKRBeuHbSqpHwfjwcuoKfOuBy9glol 7SlNHMI+HzbeTjSA955TTd+7O8hhxUo= -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:18 2025 by rpki-client