This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa File: cf849384-a1f0-358f-8cff-6f887dcd91a0.roa (raw, json) Hash identifier: 03937GlaqMNQv08qKJLKYUO+SCaxb5UKzO1wJHoi2G4= Subject key identifier: 4B:70:53:D0:14:3B:63:9B:9D:0D:39:BB:29:23:58:3E:E8:65:F4:3A Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584C0DD0C99C848E328E02D85200 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 152156 IP address blocks: 23.249.28.0/23 maxlen: 24 23.249.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:c9:9c:84:8e:32:8e:02:d8:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=e626be81-bacb-43bb-aa09-ed3110ef8ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:96:42:6e:a1:a7:b2:78:c6:12:df:90:49: 19:1a:cd:d3:e5:d8:c7:23:01:c9:f6:a4:80:65:bd: 7e:c5:7a:4e:fb:19:e6:12:3d:59:16:88:b4:17:98: b0:02:8e:3a:73:fa:a2:3b:50:e9:06:a6:45:1d:93: a5:48:5e:69:ed:01:e7:f7:86:d7:33:96:19:65:da: 45:6d:16:21:44:20:78:3f:81:70:23:78:07:fc:69: ca:e3:d6:6c:e1:c8:3d:82:2d:4d:8c:10:57:5e:18: 14:c7:b6:00:1c:89:8e:67:4a:29:b2:76:bf:30:97: 0c:d5:e7:fb:f4:71:69:34:0d:76:90:55:0a:b9:67: db:b9:cf:aa:1d:47:b6:20:65:73:9c:10:15:e9:8e: 41:6a:75:3a:3a:a5:bc:76:af:24:3a:d4:db:53:7b: ee:4b:4c:06:e3:a9:ae:e5:2b:51:fd:85:bc:9f:33: 97:45:11:47:61:62:52:7c:32:3c:7c:a6:5a:a1:9c: 67:fd:e2:3c:8d:a3:5b:10:56:ef:d4:4c:47:d7:5d: 8f:da:86:3b:40:7e:54:f8:59:ff:25:a1:d0:c8:39: e8:01:01:88:a5:6c:c5:af:0c:40:13:e1:43:18:34: ca:9c:c2:19:8f:3c:4d:e4:10:47:1b:f8:81:6d:fd: 80:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:70:53:D0:14:3B:63:9B:9D:0D:39:BB:29:23:58:3E:E8:65:F4:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 23.249.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:21:4e:b5:84:e8:10:1e:74:a4:5d:3e:16:5e:f3:d4:6d:3e: 2f:a8:3c:d3:07:99:af:74:7c:58:26:e4:b5:f2:01:d9:61:f1: 04:11:37:db:25:43:1f:eb:54:8c:68:01:fa:49:bb:36:5c:98: c6:32:ad:b4:7e:10:68:a3:71:8c:f2:65:e5:b0:89:fc:27:51: 96:b7:3d:d3:22:8d:c3:2e:19:ef:3c:af:42:9e:1f:ef:14:db: f6:62:05:c7:c7:e4:65:12:75:b7:aa:bc:04:27:1d:6f:18:c8: 89:68:98:7f:13:1b:92:18:32:51:b7:31:cc:8f:76:54:d2:b5: 3e:df:f1:3a:8f:f7:1b:de:2d:72:ba:2d:be:58:12:2f:f1:6f: 00:a8:d3:3a:18:32:31:88:f3:78:9e:eb:73:67:e4:39:6c:9e: c7:d9:09:cc:97:d2:39:05:cf:64:b5:03:34:4e:ca:54:a5:07: 0a:79:a7:cc:19:78:fc:4e:0d:31:9a:23:55:11:dd:98:2b:56: 53:f6:51:f0:54:d9:69:3b:0a:4c:1a:c4:b9:2c:c1:5e:ab:84: c6:13:14:49:42:1f:84:dd:2f:83:29:94:01:65:a8:d4:1f:9e: fe:ae:ed:d0:87:d9:4b:79:86:a9:37:c8:e4:5d:24:53:cb:f7: 52:41:5b:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0MmchI4yjgLYUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZTYyNmJlODEtYmFjYi00M2JiLWFhMDktZWQzMTEwZWY4YWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydiWQm6hp7J4xhLfkEkZGs3T5djHIwHJ9qSA Zb1+xXpO+xnmEj1ZFoi0F5iwAo46c/qiO1DpBqZFHZOlSF5p7QHn94bXM5YZZdpF bRYhRCB4P4FwI3gH/GnK49Zs4cg9gi1NjBBXXhgUx7YAHImOZ0opsna/MJcM1ef7 9HFpNA12kFUKuWfbuc+qHUe2IGVznBAV6Y5BanU6OqW8dq8kOtTbU3vuS0wG46mu 5StR/YW8nzOXRRFHYWJSfDI8fKZaoZxn/eI8jaNbEFbv1ExH112P2oY7QH5U+Fn/ JaHQyDnoAQGIpWzFrwxAE+FDGDTKnMIZjzxN5BBHG/iBbf2ArQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtwU9AUO2ObnQ05uykjWD7oZfQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvY2Y4NDkzODQtYTFmMC0z NThmLThjZmYtNmY4ODdkY2Q5MWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/kcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAhTrWE6BAedKRdPhZe89RtPi+oPNMHma90fFgm5LXyAdlh8QQRN9sl Qx/rVIxoAfpJuzZcmMYyrbR+EGijcYzyZeWwifwnUZa3PdMijcMuGe88r0KeH+8U 2/ZiBcfH5GUSdbeqvAQnHW8YyIlomH8TG5IYMlG3McyPdlTStT7f8TqP9xveLXK6 Lb5YEi/xbwCo0zoYMjGI83ie63Nn5DlsnsfZCcyX0jkFz2S1AzROylSlBwp5p8wZ ePxODTGaI1UR3ZgrVlP2UfBU2Wk7CkwaxLkswV6rhMYTFElCH4TdL4MplAFlqNQf nv6u7dCH2Ut5hqk3yORdJFPL91JBW/w= -----END CERTIFICATE-----Generated at Sat Dec 6 13:24:40 2025 by rpki-client