This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa File: d893a598-2191-39e4-ab6f-df13d27172ac.roa (raw, json) Hash identifier: NVMunSPe78exgFyYuVkgig5CGgim8/ppFggFFEqoq8o= Subject key identifier: 3A:19:84:E7:EB:04:68:FB:B9:15:A2:09:76:11:1E:5A:4A:2F:7F:AA Certificate issuer: /CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c Certificate serial: 010D0C9F4328584C215B8F429B3C1CF6B20E45C0 Authority key identifier: 21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 399029 IP address blocks: 23.144.216.0/24 maxlen: 24 2607:dc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:8f:42:9b:3c:1c:f6:b2:0e:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=38dfa4b8-fa42-4f2d-bea5-81ad7d9c6769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:45:1c:e8:6c:04:26:1c:f5:e8:a0:b8:99: 90:ae:3a:01:18:ee:4c:c7:1a:93:a9:6f:92:4a:d7: 75:0c:1a:83:5a:2b:4e:97:d7:68:f8:37:19:67:9c: bf:ea:c2:61:7c:90:6c:3f:05:2d:3f:48:ee:dc:22: 56:9e:d7:15:4e:c3:20:09:53:d8:70:2c:b1:01:85: 3c:cb:28:3b:fe:23:29:0e:2b:fe:d6:87:1c:0e:55: e3:13:02:26:ff:e6:61:cf:06:18:7c:56:f1:b6:0f: 0b:80:9f:82:95:6b:ce:b0:97:c2:83:1a:86:a2:65: e5:4e:6a:37:c7:0a:7d:c2:ff:27:c9:c6:1d:ea:9b: 30:29:77:b8:f3:bf:26:e1:8f:58:c8:c4:e0:9b:32: 1e:53:cd:e4:5f:10:eb:67:46:bd:54:52:60:77:43: 50:84:37:d0:ac:8b:4e:be:a3:81:6f:2e:40:3f:4d: 53:87:8d:c2:55:c9:c1:a4:c9:ec:a7:cb:60:2f:2f: fe:b0:17:d0:a1:bd:be:35:ed:dd:f8:cb:48:11:77: ed:d8:c2:36:03:6e:e8:ed:1b:bc:85:8c:c0:de:7c: ff:30:32:7d:7d:30:47:31:2a:0d:31:64:9c:f4:62: 8f:36:27:31:1e:51:ca:d3:9e:d6:07:5b:5d:54:c3: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:19:84:E7:EB:04:68:FB:B9:15:A2:09:76:11:1E:5A:4A:2F:7F:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d893a598-2191-39e4-ab6f-df13d27172ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl X509v3 Authority Key Identifier: keyid:21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer sbgp-ipAddrBlock: critical IPv4: 23.144.216.0/24 IPv6: 2607:dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:19:26:a9:7f:34:89:1b:4f:ca:a7:fc:4a:8d:93:49:23:6f: aa:82:02:75:70:9b:7c:14:e7:b1:c9:dc:b7:05:fe:c4:93:c2: 88:bd:e4:d5:86:2f:2b:da:76:5a:8e:cb:ae:c8:85:56:99:a6: 42:d9:67:40:22:7f:9e:3c:c9:ee:68:e7:1d:6e:b8:23:02:93: a4:22:09:2e:bb:f0:2d:6c:18:8b:06:74:0f:82:dd:56:99:87: 7c:28:5b:a6:6c:d7:ac:db:97:e0:11:ba:d6:78:6f:7b:cb:92: 0b:6e:2e:9a:39:51:1d:26:3d:cd:75:12:b1:e7:2a:16:42:5a: 92:96:61:25:2f:44:f8:de:6d:9f:ca:e8:83:9f:2b:aa:eb:ca: cc:22:ab:83:01:d6:4a:f9:42:34:b3:84:34:d3:8f:bb:15:e6: 9d:4e:a5:da:96:99:9c:f3:94:62:75:9d:b1:9f:d8:74:b6:09: eb:2a:20:ae:c3:7d:f9:96:b3:07:7f:0c:07:44:2a:e0:da:46: d0:da:b0:d7:bd:f6:56:a8:d0:7c:b6:cb:af:df:df:af:91:f2: ff:c6:a8:6d:0e:a1:7d:21:29:56:85:65:5c:84:6f:71:6d:32: fc:67:27:a7:ef:71:35:d3:0f:c8:32:5f:6b:5a:52:2f:b6:e2: ac:2a:25:46 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEwhW49Cmzwc9rIORcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJkOWFiODYtOTVkNC00ZjI2LWFkZTYtNTJiY2FhMjlk NjZjMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk MzhkZmE0YjgtZmE0Mi00ZjJkLWJlYTUtODFhZDdkOWM2NzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwetFHOhsBCYc9eiguJmQrjoBGO5MxxqTqW+S Std1DBqDWitOl9do+DcZZ5y/6sJhfJBsPwUtP0ju3CJWntcVTsMgCVPYcCyxAYU8 yyg7/iMpDiv+1occDlXjEwIm/+ZhzwYYfFbxtg8LgJ+ClWvOsJfCgxqGomXlTmo3 xwp9wv8nycYd6pswKXe4878m4Y9YyMTgmzIeU83kXxDrZ0a9VFJgd0NQhDfQrItO vqOBby5AP01Th43CVcnBpMnsp8tgLy/+sBfQob2+Ne3d+MtIEXft2MI2A27o7Ru8 hYzA3nz/MDJ9fTBHMSoNMWSc9GKPNicxHlHK057WB1tdVMN1QwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDoZhOfrBGj7uRWiCXYRHlpKL3+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMmQ5 YWI4Ni05NWQ0LTRmMjYtYWRlNi01MmJjYWEyOWQ2NmMvZDg5M2E1OTgtMjE5MS0z OWU0LWFiNmYtZGYxM2QyNzE3MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDJkOWFiODYtOTVkNC00ZjI2LWFk ZTYtNTJiY2FhMjlkNjZjL2QyZDlhYjg2LTk1ZDQtNGYyNi1hZGU2LTUyYmNhYTI5 ZDY2Yy5jcmwwHwYDVR0jBBgwFoAUIUu7LAystD6Zr4hOwvd0d8UuOm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMmQ5YWI4Ni05NWQ0LTRmMjYtYWRlNi01MmJj YWEyOWQ2NmMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5DYMA0E AgACMAcDBQAmBw3AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADsZJql/NIkbT8qn/EqNk0kjb6qCAnVwm3wU 57HJ3LcF/sSTwoi95NWGLyvadlqOy67IhVaZpkLZZ0Aif548ye5o5x1uuCMCk6Qi CS678C1sGIsGdA+C3VaZh3woW6Zs16zbl+ARutZ4b3vLkgtuLpo5UR0mPc11ErHn KhZCWpKWYSUvRPjebZ/K6IOfK6rryswiq4MB1kr5QjSzhDTTj7sV5p1OpdqWmZzz lGJ1nbGf2HS2CesqIK7DffmWswd/DAdEKuDaRtDasNe99lao0Hy2y6/f36+R8v/G qG0OoX0hKVaFZVyEb3FtMvxnJ6fvcTXTD8gyX2taUi+24qwqJUY= -----END CERTIFICATE-----Generated at Tue Dec 16 14:27:31 2025 by rpki-client