This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/829029bf-93c1-3123-a84b-0e8364d0d0e8.roa File: 829029bf-93c1-3123-a84b-0e8364d0d0e8.roa (raw, json) Hash identifier: 5j8SgF5BQ6HX9ihrJ3HpQcOtPLbALhi3yZM3YWPbOQg= Subject key identifier: 97:40:49:7E:40:8C:49:CD:80:C8:E1:31:7F:9A:09:C2:57:A7:BD:AE Certificate issuer: /CN=dec85453-756b-41c4-9e89-03593a6d3f56 Certificate serial: 010D0C9F4328584BD5FB17A87EF9768B1AA1E0C0 Authority key identifier: 93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/829029bf-93c1-3123-a84b-0e8364d0d0e8.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 200510 IP address blocks: 23.144.152.0/24 maxlen: 24 2602:2f2::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:17:a8:7e:f9:76:8b:1a:a1:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dec85453-756b-41c4-9e89-03593a6d3f56 Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=0e9be5d9-d446-45d5-973e-a676714f2479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:12:26:05:66:a3:51:67:0c:a7:9a:81:11:fe: 0c:5a:7f:ed:fd:ed:30:56:b3:53:b6:c8:1e:f5:6f: a5:79:ac:5c:90:a4:f0:21:bf:97:d4:52:3f:41:58: f5:ce:a1:25:12:b2:c9:bb:a7:b3:4a:09:54:a2:b4: 33:05:16:b7:3b:30:50:af:aa:1e:7f:f1:e7:bb:5c: 2c:bc:8b:83:f1:19:07:2b:cd:85:aa:2d:9e:be:00: 1b:66:e3:41:11:54:7c:a4:62:01:e9:93:1d:ab:e7: a2:7b:7a:9a:c9:0d:0d:83:e7:78:5d:ec:56:43:d8: 4e:a1:b9:88:1e:17:e9:13:8a:9a:ea:50:cd:3a:ec: 16:ed:0d:fe:12:17:98:86:cb:ee:28:33:63:a4:62: cc:c2:05:34:2e:83:ac:92:74:7f:e8:c6:4c:81:b5: ef:c1:34:10:a7:49:53:8f:57:91:62:76:36:a8:bf: 8f:11:83:18:ee:ba:3c:02:79:60:46:10:6e:b8:e2: 66:1c:94:af:c1:ac:59:11:73:47:a7:ab:96:10:59: b3:72:eb:63:aa:3b:55:21:d2:4d:e3:06:d9:6d:16: d2:a6:a6:97:9c:88:3e:55:18:10:ff:7f:fa:4f:12: 15:4b:b6:00:ac:c1:3a:19:d2:1e:b1:8c:30:eb:58: c1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:40:49:7E:40:8C:49:CD:80:C8:E1:31:7F:9A:09:C2:57:A7:BD:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/829029bf-93c1-3123-a84b-0e8364d0d0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56/dec85453-756b-41c4-9e89-03593a6d3f56.crl X509v3 Authority Key Identifier: keyid:93:C3:EC:0E:AA:2F:E9:A5:ED:BA:4C:FB:B6:90:24:9B:80:86:3D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dec85453-756b-41c4-9e89-03593a6d3f56.cer sbgp-ipAddrBlock: critical IPv4: 23.144.152.0/24 IPv6: 2602:2f2::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:27:fa:88:78:30:27:66:73:6f:30:17:b1:f5:16:b1:d5:c2: d9:05:e4:ba:03:bb:89:42:cb:ff:7c:b8:70:37:0f:a7:ff:32: 17:0f:04:e0:54:23:f1:ec:43:ad:8c:5d:b4:05:07:87:a3:74: a1:fa:c9:24:75:95:33:85:be:c1:ea:8c:d9:b1:4e:5a:54:1b: 5e:e7:5b:00:be:ec:6f:57:2b:6f:3e:ae:c0:65:bf:4f:f2:5e: 4c:39:41:dc:1c:78:73:1f:47:8a:2b:d3:4c:f4:65:fa:44:95: dd:93:92:61:85:72:6f:55:a6:cf:43:85:0d:b7:96:e8:8c:0e: 34:6f:57:d2:6f:a3:6b:f9:aa:c3:fe:33:dd:0d:0e:5f:f0:d8: af:fc:40:7c:2c:04:b9:79:99:0e:44:fb:a2:c7:3e:b7:38:4c: bd:d6:e6:8f:71:e8:7d:02:3d:6c:69:2d:5b:7d:2f:a4:b4:54: 38:c9:5c:b6:03:b2:33:b8:1b:57:75:5f:61:6d:73:df:c9:cb: 49:0f:21:14:70:6c:36:71:d7:bd:a2:44:d4:b1:84:35:e4:e6: 35:01:50:1c:03:8c:1f:de:c7:26:0d:58:74:cb:60:bc:f3:9b: 7f:b0:fe:ff:73:9b:a2:cd:6c:eb:03:ac:46:3a:52:7f:b2:83: 9b:a6:6a:10 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEvV+xeofvl2ixqh4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVjODU0NTMtNzU2Yi00MWM0LTllODktMDM1OTNhNmQz ZjU2MB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk MGU5YmU1ZDktZDQ0Ni00NWQ1LTk3M2UtYTY3NjcxNGYyNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxImBWajUWcMp5qBEf4MWn/t/e0wVrNTtsge 9W+leaxckKTwIb+X1FI/QVj1zqElErLJu6ezSglUorQzBRa3OzBQr6oef/Hnu1ws vIuD8RkHK82Fqi2evgAbZuNBEVR8pGIB6ZMdq+eie3qayQ0Ng+d4XexWQ9hOobmI HhfpE4qa6lDNOuwW7Q3+EheYhsvuKDNjpGLMwgU0LoOsknR/6MZMgbXvwTQQp0lT j1eRYnY2qL+PEYMY7ro8AnlgRhBuuOJmHJSvwaxZEXNHp6uWEFmzcutjqjtVIdJN 4wbZbRbSpqaXnIg+VRgQ/3/6TxIVS7YArME6GdIesYww61jBQQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJdASX5AjEnNgMjhMX+aCcJXp72uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4 NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5M2E2ZDNmNTYvODI5MDI5YmYtOTNjMS0z MTIzLWE4NGItMGU4MzY0ZDBkMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGVjODU0NTMtNzU2Yi00MWM0LTll ODktMDM1OTNhNmQzZjU2L2RlYzg1NDUzLTc1NmItNDFjNC05ZTg5LTAzNTkzYTZk M2Y1Ni5jcmwwHwYDVR0jBBgwFoAUk8PsDqov6aXtukz7tpAkm4CGPWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kZWM4NTQ1My03NTZiLTQxYzQtOWU4OS0wMzU5 M2E2ZDNmNTYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5CYMA4E AgACMAgDBgAmAgLyADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7J/qIeDAnZnNvMBex9Rax1cLZBeS6A7uJ Qsv/fLhwNw+n/zIXDwTgVCPx7EOtjF20BQeHo3Sh+skkdZUzhb7B6ozZsU5aVBte 51sAvuxvVytvPq7AZb9P8l5MOUHcHHhzH0eKK9NM9GX6RJXdk5JhhXJvVabPQ4UN t5bojA40b1fSb6Nr+arD/jPdDQ5f8Niv/EB8LAS5eZkORPuixz63OEy91uaPceh9 Aj1saS1bfS+ktFQ4yVy2A7IzuBtXdV9hbXPfyctJDyEUcGw2cde9okTUsYQ15OY1 AVAcA4wf3scmDVh0y2C885t/sP7/c5uizWzrA6xGOlJ/soObpmoQ -----END CERTIFICATE-----Generated at Wed Dec 17 21:24:33 2025 by rpki-client