This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa File: a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (raw, json) Hash identifier: QQHwwy68JyakO5akFxKtHr5BZWipFLMgHYOQAX5ZToA= Subject key identifier: 96:8E:6A:94:3A:12:00:CE:D7:B7:45:4A:75:FC:8A:6C:DF:2F:07:36 Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584C16A40502158AED8FF32A0AA0 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 396500 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:a4:05:02:15:8a:ed:8f:f3:2a:0a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=f84b5e4b-0e75-4689-9047-8fbc6b3e370c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:e6:8f:18:40:db:47:65:f7:02:39:fd:7c: 38:6b:1f:fb:54:b6:80:a5:09:5e:88:32:4b:66:de: 41:f8:2c:4d:a3:29:91:37:9b:24:85:ab:24:64:d7: 4a:00:c0:4c:1d:0c:a1:ed:a9:d7:05:ea:93:45:2e: 72:6c:70:bb:7c:4d:2f:ee:10:82:ac:97:61:0a:08: 16:b8:91:aa:d3:fc:4d:b1:1e:d1:f5:17:0e:0a:c6: b5:7d:d0:bd:fe:0a:a3:e8:f6:1e:50:49:92:9f:de: 66:91:ac:9b:36:a8:08:62:72:40:48:a4:2a:ff:2e: 2d:7b:cd:73:c5:47:39:73:6f:05:d4:5b:34:8e:50: 11:2b:6f:03:17:b8:9b:83:60:11:52:ab:e7:b5:01: 09:1e:46:70:8b:89:00:5a:64:07:72:6d:66:b5:5f: 7c:be:32:d7:9b:f1:b3:0d:81:69:0a:ef:df:f7:c4: 21:e3:7f:19:3f:14:09:02:c7:73:60:87:43:67:99: e7:e4:ab:6c:d6:36:22:df:93:78:7e:cd:19:e7:2a: 4d:bd:76:e0:50:c9:f1:a3:d7:ae:2a:4d:d8:ca:6b: dc:7b:f1:b4:ba:c6:e6:24:6b:bf:81:4d:3c:60:f7: 11:ef:0e:4d:d2:a9:80:61:94:9e:f5:3b:41:b4:e7: a4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8E:6A:94:3A:12:00:CE:D7:B7:45:4A:75:FC:8A:6C:DF:2F:07:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ae:3f:6f:33:35:4a:96:a1:7c:99:7d:02:09:3e:4c:6e:dd: 17:66:4e:a6:4b:c6:c8:68:ec:b9:9d:06:70:c0:f1:9e:b0:ee: 5b:c2:40:52:8d:1e:e1:f5:7d:bc:ac:10:8a:56:ce:4e:9a:c4: 22:0d:90:53:77:6c:7d:39:02:51:64:9f:34:45:b7:53:0d:b3: 2a:a3:10:87:95:83:d9:7d:55:4d:e4:2a:3d:87:f9:ab:17:8c: 54:5c:9e:10:e9:a0:95:8a:8d:87:2a:75:d0:a7:6a:da:d7:10: 4f:d5:5f:51:1f:45:a0:0a:99:53:8a:a7:35:27:27:e1:56:2d: 10:99:ca:b2:9e:9d:91:85:62:50:45:01:07:b2:85:88:49:89: 11:0c:44:2d:ff:7c:dd:dc:60:e4:cd:dd:1f:2a:0f:99:2e:9e: 6e:8c:6b:17:83:70:d4:4e:4d:5c:7c:f5:af:b0:b4:94:ea:71: 74:07:31:3b:d4:d0:c9:2e:25:ee:da:28:f3:29:e4:5c:b9:2a: 28:e4:05:29:b9:79:92:4e:88:71:e0:2b:36:60:7a:83:49:a8: 90:41:89:24:1e:ea:49:10:3d:f0:72:d8:b6:ed:d6:5f:c5:e8: 2d:9f:f8:13:ea:f7:3a:06:d6:87:65:5e:d4:0e:25:44:64:64: 4e:54:f3:fb -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEwWpAUCFYrtj/MqCqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk Zjg0YjVlNGItMGU3NS00Njg5LTkwNDctOGZiYzZiM2UzNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkanmjxhA20dl9wI5/Xw4ax/7VLaApQleiDJL Zt5B+CxNoymRN5skhaskZNdKAMBMHQyh7anXBeqTRS5ybHC7fE0v7hCCrJdhCggW uJGq0/xNsR7R9RcOCsa1fdC9/gqj6PYeUEmSn95mkaybNqgIYnJASKQq/y4te81z xUc5c28F1Fs0jlARK28DF7ibg2ARUqvntQEJHkZwi4kAWmQHcm1mtV98vjLXm/Gz DYFpCu/f98Qh438ZPxQJAsdzYIdDZ5nn5Kts1jYi35N4fs0Z5ypNvXbgUMnxo9eu Kk3Yymvce/G0usbmJGu/gU08YPcR7w5N0qmAYZSe9TtBtOekiQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJaOapQ6EgDO17dFSnX8imzfLwc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvYTk4MWMxMTEtMzM0MS0z ZjczLTg1ZWMtM2U5ZjViOGQyNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF7uYMA8E AgACMAkDBwAmAvgtAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAL64/bzM1SpahfJl9Agk+TG7dF2ZOpkvG yGjsuZ0GcMDxnrDuW8JAUo0e4fV9vKwQilbOTprEIg2QU3dsfTkCUWSfNEW3Uw2z KqMQh5WD2X1VTeQqPYf5qxeMVFyeEOmglYqNhyp10Kdq2tcQT9VfUR9FoAqZU4qn NScn4VYtEJnKsp6dkYViUEUBB7KFiEmJEQxELf983dxg5M3dHyoPmS6eboxrF4Nw 1E5NXHz1r7C0lOpxdAcxO9TQyS4l7too8ynkXLkqKOQFKbl5kk6IceArNmB6g0mo kEGJJB7qSRA98HLYtu3WX8XoLZ/4E+r3OgbWh2Ve1A4lRGRkTlTz+w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:36 2025 by rpki-client