This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa File: aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa (raw, json) Hash identifier: oI22uKILujStYB+pqg7ruNc8yjv2eUXZNYgZFEzoze0= Subject key identifier: 09:DD:38:1C:AE:9C:83:8F:DC:C9:88:92:4E:55:73:88:A6:E0:81:77 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584BFBAB74FCA39BDFB0766BDB00 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 400866 IP address blocks: 23.251.53.0/24 maxlen: 24 23.251.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:74:fc:a3:9b:df:b0:76:6b:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=cc2187f8-6642-462e-abab-da3e97392239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:f9:3b:21:b5:eb:89:95:5e:70:09:b3:8a: 17:81:1e:b9:c3:85:53:46:f9:53:8e:49:17:96:b9: 4a:59:fe:7c:5e:1c:e2:ca:b7:f8:54:2c:e8:47:7f: 04:ce:22:90:ff:64:fd:af:2c:2d:4a:9c:b6:e8:56: fb:dd:ba:74:f3:04:1d:42:ea:61:7b:f9:ff:a7:d3: 80:4d:4c:8d:ac:36:9d:d9:d9:a2:ec:c9:2f:86:d3: 9d:39:36:ab:78:9b:28:b9:62:ed:57:21:c8:5a:56: 64:fe:1f:09:00:64:dc:00:7b:97:b9:15:bf:29:09: bc:67:2d:b5:8c:5d:fd:86:a4:72:c6:b3:93:18:9f: b1:c0:3b:9f:90:3b:e9:2b:c9:59:bd:56:e2:54:4b: 2c:a9:4e:3f:6c:46:4c:a7:bd:c3:68:3a:f2:48:fb: 20:a4:fe:df:c7:fb:d4:f9:da:35:0a:7c:df:01:de: e0:03:3e:35:6e:80:43:90:e0:56:ae:0b:9b:8c:0d: 98:0d:9a:76:9e:a9:c4:ed:8c:64:27:1d:e1:09:63: 75:03:be:63:8d:95:05:5c:18:cf:3f:2b:6c:5d:91: 8c:de:2d:36:c9:50:59:be:ef:b9:2c:d7:f2:cb:0a: 24:9e:5c:6f:82:84:01:d9:1c:b2:c8:ca:e7:e4:6d: 10:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DD:38:1C:AE:9C:83:8F:DC:C9:88:92:4E:55:73:88:A6:E0:81:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 23.251.53.0-23.251.54.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d8:dc:c1:90:70:a3:a0:ae:de:a6:5b:da:74:04:dd:a9:48: 10:99:c5:e3:93:94:f3:49:16:a6:a2:20:22:d7:c7:b4:98:8a: e3:7a:73:9b:4b:ca:3e:75:db:dd:32:c0:90:f0:f5:e5:ec:cf: 10:ec:b0:8c:2a:dd:28:7f:cb:7d:2d:be:a1:87:38:80:db:ad: 6f:a3:85:9c:10:4a:63:67:48:d0:37:e3:28:19:bd:cd:e3:73: 97:95:02:2f:e9:77:52:90:35:99:84:98:d2:40:6c:48:ce:45: f5:28:9a:a6:e1:dc:68:09:31:b5:f9:2b:dd:8c:a5:d6:13:6e: 4f:a9:d9:0e:5d:8b:35:f3:53:0c:28:4e:d5:a0:63:42:11:17: 1e:52:99:78:7c:41:1f:cc:82:ec:15:5c:bf:50:11:98:b4:f9: d9:8d:49:3e:b8:b5:3f:35:c8:72:37:40:76:ae:91:0c:09:a9: 57:76:8d:46:a3:6e:b6:5a:0d:b5:2f:78:77:ec:a2:63:c4:2f: 4d:90:9c:be:c4:44:be:ea:04:a1:cd:04:fe:db:ec:a6:2f:97: 57:b0:d4:50:19:9d:5c:2f:54:bf:27:07:df:0a:7b:3c:8f:ef: 05:69:98:1c:e3:b3:54:67:87:19:77:64:d5:5e:c2:f6:61:61: 1a:19:3a:36 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEv7q3T8o5vfsHZr2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk Y2MyMTg3ZjgtNjY0Mi00NjJlLWFiYWItZGEzZTk3MzkyMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCH5OyG164mVXnAJs4oXgR65w4VTRvlTjkkX lrlKWf58Xhziyrf4VCzoR38EziKQ/2T9rywtSpy26Fb73bp08wQdQuphe/n/p9OA TUyNrDad2dmi7MkvhtOdOTareJsouWLtVyHIWlZk/h8JAGTcAHuXuRW/KQm8Zy21 jF39hqRyxrOTGJ+xwDufkDvpK8lZvVbiVEssqU4/bEZMp73DaDrySPsgpP7fx/vU +do1CnzfAd7gAz41boBDkOBWrgubjA2YDZp2nqnE7YxkJx3hCWN1A75jjZUFXBjP PytsXZGM3i02yVBZvu+5LNfyywoknlxvgoQB2RyyyMrn5G0QewIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFAndOByunIOP3MmIkk5Vc4im4IF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYWFiN2I0MmQtZmE3YS0z ZGRmLTg1MmItNTE1ZjJjZTQ4NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAX+zUD BAAX+zYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEARtjcwZBwo6Cu3qZb2nQE3alIEJnF45OU80kWpqIgItfH tJiK43pzm0vKPnXb3TLAkPD15ezPEOywjCrdKH/LfS2+oYc4gNutb6OFnBBKY2dI 0DfjKBm9zeNzl5UCL+l3UpA1mYSY0kBsSM5F9SiapuHcaAkxtfkr3Yyl1hNuT6nZ Dl2LNfNTDChO1aBjQhEXHlKZeHxBH8yC7BVcv1ARmLT52Y1JPri1PzXIcjdAdq6R DAmpV3aNRqNutloNtS94d+yiY8QvTZCcvsREvuoEoc0E/tvspi+XV7DUUBmdXC9U vycH3wp7PI/vBWmYHOOzVGeHGXdk1V7C9mFhGhk6Ng== -----END CERTIFICATE-----Generated at Sat Dec 6 14:32:08 2025 by rpki-client