This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/a9270aef-9b4e-3df7-aa5b-0b12831a0972.roa File: a9270aef-9b4e-3df7-aa5b-0b12831a0972.roa (raw, json) Hash identifier: 6pdo2J5LqotJSo9/NN0OK8HNEahPXpm1E4GXcmgOI7k= Subject key identifier: DD:1C:E2:71:D2:03:89:89:37:38:BB:3B:79:26:22:79:E7:95:56:A3 Certificate issuer: /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd Certificate serial: 010D0C9F4328584BE555D62047C1C0128F52BA80 Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/a9270aef-9b4e-3df7-aa5b-0b12831a0972.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 16509 IP address blocks: 23.165.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:d6:20:47:c1:c0:12:8f:52:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=7f35db34-ebf1-4e81-9e74-5f79c9206dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a7:5b:a6:45:2d:4c:d4:6e:1f:63:33:b5:fe: 10:87:6c:1f:96:07:5b:2a:36:03:42:f3:81:8b:b0: 1a:ad:c3:d4:60:44:1d:0e:c3:60:b1:61:7c:e4:94: ac:05:ab:d3:2a:f6:ad:f9:ea:63:61:74:0f:ce:fc: 28:73:eb:a5:fb:bd:d3:32:25:54:8f:f6:43:b9:95: fb:8b:46:e4:22:d6:37:21:d4:09:c2:6f:50:5a:8f: b6:05:03:f3:a3:85:cb:40:cb:5b:e7:bc:13:c6:4c: 29:e2:41:89:a8:24:f4:96:9a:61:50:a3:32:36:a7: af:26:f6:0d:36:24:33:bc:9d:84:de:2b:5b:28:bd: 84:e8:93:72:0d:28:47:9a:b7:34:a8:24:64:a9:d4: f4:ff:1c:99:3f:2c:a0:6b:8d:94:88:59:62:0c:cb: 5a:22:15:67:37:bc:58:28:8d:06:95:d8:f5:67:34: 1a:02:21:0a:17:a6:fa:15:ac:f8:06:30:ec:8f:13: f7:cd:30:6b:ad:70:46:4a:4a:c5:18:46:44:93:a0: ba:17:d0:37:f2:5f:8b:dd:10:3a:45:dc:22:9d:58: 42:74:ad:ab:e6:69:47:38:3e:6b:6c:16:3e:79:0e: 37:86:4d:ec:8c:be:d4:83:78:ef:db:2d:e3:4e:a3: 81:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1C:E2:71:D2:03:89:89:37:38:BB:3B:79:26:22:79:E7:95:56:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/a9270aef-9b4e-3df7-aa5b-0b12831a0972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl X509v3 Authority Key Identifier: keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer sbgp-ipAddrBlock: critical IPv4: 23.165.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:9a:e2:a3:09:46:2a:53:35:ec:ed:bb:91:d4:d3:18:a3:64: f3:a1:a1:6d:ef:99:6f:ca:ff:be:97:39:02:41:56:13:ff:d4: 8b:9f:ea:63:f5:84:a9:ea:94:e1:4b:bc:df:24:aa:7d:8b:a2: 49:21:f8:b8:78:88:40:70:ee:fa:d5:27:7d:1d:1d:07:ae:63: 7d:c7:fb:6d:c4:90:e3:6e:df:19:f8:19:fe:f9:c4:18:25:99: e6:10:bb:01:92:d3:6f:76:af:92:dc:73:30:28:5b:59:a6:66: 1d:b1:84:f7:24:bd:89:7f:2d:b0:3c:86:dc:ae:4d:75:3c:62: 30:5c:c8:8c:e4:01:a4:9f:18:2c:13:b6:d8:ea:fd:cf:13:17: 9f:ca:46:6a:f7:86:c2:a8:f3:b5:2a:26:d5:ab:c2:2c:5c:c9: 7f:05:8d:97:b6:bb:72:be:79:20:46:71:d8:01:de:3c:96:9d: 09:19:90:e3:e7:37:51:23:6d:1e:8e:35:52:27:e1:bf:b3:9a: 73:3f:ce:dc:d1:91:50:93:7d:a5:b7:9b:4e:27:0f:b8:e4:11: 2c:b0:b5:7e:76:a3:02:df:96:41:be:b4:cb:d2:4c:70:ae:54: 0d:43:e1:c4:cc:d0:bb:eb:8f:4b:d7:11:4b:3c:cf:b4:25:3b: 44:dd:14:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVdYgR8HAEo9SuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YjliMjgtNzkzNC00NTRhLThiMmYtMjQ2ZDg4ODlm ZGJkMB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk N2YzNWRiMzQtZWJmMS00ZTgxLTllNzQtNWY3OWM5MjA2ZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqdbpkUtTNRuH2Mztf4Qh2wflgdbKjYDQvOB i7AarcPUYEQdDsNgsWF85JSsBavTKvat+epjYXQPzvwoc+ul+73TMiVUj/ZDuZX7 i0bkItY3IdQJwm9QWo+2BQPzo4XLQMtb57wTxkwp4kGJqCT0lpphUKMyNqevJvYN NiQzvJ2E3itbKL2E6JNyDShHmrc0qCRkqdT0/xyZPyyga42UiFliDMtaIhVnN7xY KI0Gldj1ZzQaAiEKF6b6Faz4BjDsjxP3zTBrrXBGSkrFGEZEk6C6F9A38l+L3RA6 RdwinVhCdK2r5mlHOD5rbBY+eQ43hk3sjL7Ug3jv2y3jTqOBTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0c4nHSA4mJNzi7O3kmInnnlVajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdi OWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZkODg4OWZkYmQvYTkyNzBhZWYtOWI0ZS0z ZGY3LWFhNWItMGIxMjgzMWEwOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWU3YjliMjgtNzkzNC00NTRhLThi MmYtMjQ2ZDg4ODlmZGJkLzFlN2I5YjI4LTc5MzQtNDU0YS04YjJmLTI0NmQ4ODg5 ZmRiZC5jcmwwHwYDVR0jBBgwFoAU7CTbIeW+m2u6JkrzwmZOds7dmxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdiOWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZk ODg4OWZkYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACua4qMJRipTNeztu5HU0xijZPOhoW3vmW/K/76XOQJBVhP/1Iuf6mP1 hKnqlOFLvN8kqn2Lokkh+Lh4iEBw7vrVJ30dHQeuY33H+23EkONu3xn4Gf75xBgl meYQuwGS0292r5LcczAoW1mmZh2xhPckvYl/LbA8htyuTXU8YjBcyIzkAaSfGCwT ttjq/c8TF5/KRmr3hsKo87UqJtWrwixcyX8FjZe2u3K+eSBGcdgB3jyWnQkZkOPn N1EjbR6ONVIn4b+zmnM/ztzRkVCTfaW3m04nD7jkESywtX52owLflkG+tMvSTHCu VA1D4cTM0Lvrj0vXEUs8z7QlO0TdFPc= -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:07 2025 by rpki-client