This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa File: 3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa (raw, json) Hash identifier: +8bWtSmPGXEgrwd9Q21VeQDkICi+DTd+Qnzs+4uIIQ4= Subject key identifier: E3:53:4C:3E:75:20:6C:3E:02:1D:59:DF:A4:FE:DE:4A:A5:D1:1B:D0 Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Certificate serial: 010D0C9F4328584BC53AFDBDF62BBBB76C0DEA00 Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 398328 IP address blocks: 23.160.208.0/24 maxlen: 24 174.136.248.0/24 maxlen: 24 2602:fd46::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:fd:bd:f6:2b:bb:b7:6c:0d:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=0ac2bcc0-d334-41b6-a7e7-5d831f8776cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:11:54:be:7a:f4:db:d5:89:9e:69:15:c2:c1: dc:30:dd:c8:28:8f:e6:86:9a:c2:92:f6:8f:c6:6d: 4a:98:3a:0f:0c:c8:24:22:95:75:d3:97:a3:4a:87: 16:1a:2c:75:bc:36:da:84:81:24:34:6a:ed:83:e4: 3e:73:74:c0:56:ab:ce:e0:19:c2:d5:97:6a:28:ec: 6b:a5:fa:c5:0a:06:75:10:51:57:33:c3:94:4d:99: 9a:5d:f7:02:5d:a7:7d:78:2f:68:1e:fc:f9:7c:c8: e4:b7:fc:c2:d7:f6:e4:78:40:62:3f:67:ef:c6:10: 5e:28:73:9f:f8:58:ca:03:89:6f:5d:12:09:c9:69: 8c:a3:39:f1:c5:83:a0:a5:03:86:0c:35:85:1f:33: 03:69:1c:03:89:c3:9e:c1:83:9a:da:4b:35:5f:f3: 51:ce:e6:ad:d3:70:f5:11:b7:ac:c0:78:69:ec:ad: ed:26:bc:18:4f:6b:25:92:3c:ca:9b:2a:ba:c9:e5: c1:3e:42:a3:3f:e7:a5:69:43:c5:62:ee:03:29:aa: a5:ad:b5:e2:0b:be:04:41:dd:8b:d8:25:61:2b:6a: 81:72:58:fe:fb:7a:87:17:06:83:cc:2b:ce:3d:85: 9b:41:41:13:22:7a:07:ae:c5:f8:db:90:bf:0a:9b: 4d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:53:4C:3E:75:20:6C:3E:02:1D:59:DF:A4:FE:DE:4A:A5:D1:1B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl X509v3 Authority Key Identifier: keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer sbgp-ipAddrBlock: critical IPv4: 23.160.208.0/24 174.136.248.0/24 IPv6: 2602:fd46::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:76:0d:cb:1c:cc:6d:9c:f9:11:90:6f:7a:29:73:68:7f:4c: 15:24:11:66:f0:00:e6:94:69:61:cc:de:87:6f:89:dd:be:94: 15:a0:d7:93:ee:0f:23:3e:87:a6:a4:58:bf:de:c8:d2:97:c7: d6:99:ee:f0:e8:e6:51:dc:b8:2b:3b:11:d3:d1:65:a0:83:a5: 83:f2:51:95:32:f0:51:40:9a:f3:b8:0f:69:6a:32:83:52:4c: 2a:b0:47:01:b8:3c:9f:24:c0:11:d4:fc:02:ca:2c:f5:ed:a7: 34:82:dd:c3:9f:6d:9e:69:48:98:a5:49:ca:91:50:8b:25:b7: ef:9f:4c:44:d1:e6:06:be:73:26:31:de:6a:21:78:f9:2b:75: 5c:9c:53:ba:97:0f:bf:45:a6:dd:1c:21:12:f9:82:a8:67:f6: 6e:65:76:c6:c8:48:cb:f4:38:01:5f:53:83:b0:9d:70:9d:e5: c9:a1:7d:29:0f:fb:5e:d8:4f:76:59:fa:6d:93:96:75:89:cc: 4d:e1:74:d4:f0:0a:d7:e7:1d:15:3b:0b:52:59:7c:df:4f:5a: 49:f0:d2:b2:2c:c6:d3:4b:f4:68:42:ae:59:ba:b8:17:8a:ee: 8c:15:61:e0:fd:e9:9f:2e:ee:cd:55:bc:43:d9:0e:c6:8a:38: 31:73:48:29 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEvFOv299iu7t2wN6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmMWEwNWYtZWZhYy00ZWYzLThiMjMtNWZkYmUzY2I0 ZTg4MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MGFjMmJjYzAtZDMzNC00MWI2LWE3ZTctNWQ4MzFmODc3NmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhFUvnr029WJnmkVwsHcMN3IKI/mhprCkvaP xm1KmDoPDMgkIpV105ejSocWGix1vDbahIEkNGrtg+Q+c3TAVqvO4BnC1ZdqKOxr pfrFCgZ1EFFXM8OUTZmaXfcCXad9eC9oHvz5fMjkt/zC1/bkeEBiP2fvxhBeKHOf +FjKA4lvXRIJyWmMoznxxYOgpQOGDDWFHzMDaRwDicOewYOa2ks1X/NRzuat03D1 EbeswHhp7K3tJrwYT2slkjzKmyq6yeXBPkKjP+elaUPFYu4DKaqlrbXiC74EQd2L 2CVhK2qBclj++3qHFwaDzCvOPYWbQUETInoHrsX425C/CptNCQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFONTTD51IGw+Ah1Z36T+3kql0RvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Yx YTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRiZTNjYjRlODgvM2JkZmViZDMtMTkxYy0z MGU5LWIyMGItNjdiNmYwMGMwMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmMWEwNWYtZWZhYy00ZWYzLThi MjMtNWZkYmUzY2I0ZTg4L2RjZjFhMDVmLWVmYWMtNGVmMy04YjIzLTVmZGJlM2Ni NGU4OC5jcmwwHwYDVR0jBBgwFoAUMR6T8lfYI525l+itPI4ghmPqWe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2YxYTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRi ZTNjYjRlODguY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6DQAwQA roj4MA4EAgACMAgDBgQmAv1GADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcdg3LHMxtnPkRkG96KXNof0wV JBFm8ADmlGlhzN6Hb4ndvpQVoNeT7g8jPoempFi/3sjSl8fWme7w6OZR3LgrOxHT 0WWgg6WD8lGVMvBRQJrzuA9pajKDUkwqsEcBuDyfJMAR1PwCyiz17ac0gt3Dn22e aUiYpUnKkVCLJbfvn0xE0eYGvnMmMd5qIXj5K3VcnFO6lw+/RabdHCES+YKoZ/Zu ZXbGyEjL9DgBX1ODsJ1wneXJoX0pD/te2E92Wfptk5Z1icxN4XTU8ArX5x0VOwtS WXzfT1pJ8NKyLMbTS/RoQq5ZurgXiu6MFWHg/emfLu7NVbxD2Q7Gijgxc0gp -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:09 2025 by rpki-client