This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa File: 930237d2-7c98-3e15-b444-d23772ae4891.roa (raw, json) Hash identifier: 65Lvlgn2YV8hUU8mwVZ3UGDU5giOB6VMjFtjY1r9ZAo= Subject key identifier: D2:AB:09:78:BE:9C:1B:43:40:C9:29:66:EF:98:7C:82:0A:59:4D:3D Certificate issuer: /CN=862a9ade-3d88-4730-8033-1414625d565b Certificate serial: 010D0C9F4328584BFFDBB2FB46C36703D493C800 Authority key identifier: 2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 400593 IP address blocks: 23.131.108.0/24 maxlen: 24 2602:f75d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:b2:fb:46:c3:67:03:d4:93:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=862a9ade-3d88-4730-8033-1414625d565b Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=39362bb5-c564-492a-8a1b-9a25e16df368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a7:f6:6a:c5:38:8a:91:ff:df:18:54:7e:1c: c0:1f:71:68:55:0d:7b:e5:cb:d2:01:65:32:cb:44: 34:7e:27:fe:01:e4:2f:97:d9:86:72:89:80:6a:a7: fb:4b:d7:4a:b7:cf:95:d6:f6:82:05:e2:8e:3c:2e: c4:c1:84:97:90:eb:ab:1c:6c:49:be:4a:74:83:2b: be:a4:89:d3:eb:8c:31:01:be:9f:77:ee:7a:87:f4: 13:97:78:65:66:51:5e:18:82:df:b9:3b:67:fb:da: 33:c5:37:41:67:c0:1c:48:df:b4:b0:ce:ec:a1:62: c5:b1:0e:53:59:04:db:13:2d:e4:ed:8f:5d:d0:55: 6b:98:4e:2a:93:c4:06:12:ed:75:26:3d:bb:2c:39: c8:c4:71:8b:ce:4e:b9:0c:df:41:62:44:24:9a:6a: f3:6d:f1:28:a8:8d:aa:52:69:bd:8e:60:f5:a2:58: 10:09:5c:60:2e:fc:c8:ec:39:4a:03:a2:26:13:3b: a1:5e:3c:7f:fd:1b:48:c9:b6:b0:9f:94:a3:35:3c: 47:d4:11:b2:69:ef:54:b2:3c:94:83:d5:65:94:a6: f1:f2:18:cc:bb:db:32:c6:24:74:b6:f4:4b:56:38: 5b:14:90:c1:95:7b:68:22:0d:95:f2:83:6f:6f:ec: 07:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AB:09:78:BE:9C:1B:43:40:C9:29:66:EF:98:7C:82:0A:59:4D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/930237d2-7c98-3e15-b444-d23772ae4891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b/862a9ade-3d88-4730-8033-1414625d565b.crl X509v3 Authority Key Identifier: keyid:2C:E1:46:DA:DF:D5:E4:78:2E:B1:F4:E3:E1:6F:6E:E5:18:EA:C4:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/862a9ade-3d88-4730-8033-1414625d565b.cer sbgp-ipAddrBlock: critical IPv4: 23.131.108.0/24 IPv6: 2602:f75d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b1:b1:e0:4b:67:1a:ed:12:2d:3d:70:1b:77:e2:04:0f:07: d5:89:3d:f6:83:a0:dc:14:39:4e:58:6d:5e:aa:d3:f2:16:b0: a1:8b:d7:41:f2:8c:1c:a9:2e:e7:a6:3b:66:5e:f5:f3:25:b0: d2:4d:08:73:ab:9a:8b:26:ec:01:45:e3:ab:5d:1c:0d:10:4d: d0:37:c7:69:c6:40:ca:06:c9:78:f6:ad:64:af:57:02:fe:aa: 26:21:2b:9e:8d:85:75:a1:c9:bb:8b:a9:43:8a:16:e1:b2:ca: 58:43:61:6c:31:fd:98:36:8a:8f:6b:0f:6b:a6:a8:14:cf:60: 91:af:e6:38:88:e4:2d:8b:dc:3f:d7:cc:75:4c:1b:1e:40:f6: 3c:3a:6a:c0:d8:eb:11:38:92:27:9c:75:fe:19:55:37:98:f8: cb:a0:1a:a2:b2:13:7a:b6:68:70:1e:24:a6:94:b1:83:0a:4a: e7:38:4f:70:96:ce:58:61:93:13:6a:2e:e1:dc:ef:0d:b3:14: 36:d7:67:03:e0:11:a8:cc:89:ab:ef:36:dc:4a:2a:7d:5b:bc: 51:06:e6:e2:6c:58:6b:3b:dc:39:6c:85:0a:86:f1:b0:de:0f: 26:fb:d6:c0:7f:8c:91:78:66:f1:6c:e2:c4:70:96:39:aa:10: 53:82:6c:0e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEv/27L7RsNnA9STyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYyYTlhZGUtM2Q4OC00NzMwLTgwMzMtMTQxNDYyNWQ1 NjViMB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MzkzNjJiYjUtYzU2NC00OTJhLThhMWItOWEyNWUxNmRmMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaf2asU4ipH/3xhUfhzAH3FoVQ175cvSAWUy y0Q0fif+AeQvl9mGcomAaqf7S9dKt8+V1vaCBeKOPC7EwYSXkOurHGxJvkp0gyu+ pInT64wxAb6fd+56h/QTl3hlZlFeGILfuTtn+9ozxTdBZ8AcSN+0sM7soWLFsQ5T WQTbEy3k7Y9d0FVrmE4qk8QGEu11Jj27LDnIxHGLzk65DN9BYkQkmmrzbfEoqI2q Umm9jmD1olgQCVxgLvzI7DlKA6ImEzuhXjx//RtIybawn5SjNTxH1BGyae9UsjyU g9VllKbx8hjMu9syxiR0tvRLVjhbFJDBlXtoIg2V8oNvb+wHRQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNKrCXi+nBtDQMkpZu+YfIIKWU09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NjJh OWFkZS0zZDg4LTQ3MzAtODAzMy0xNDE0NjI1ZDU2NWIvOTMwMjM3ZDItN2M5OC0z ZTE1LWI0NDQtZDIzNzcyYWU0ODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODYyYTlhZGUtM2Q4OC00NzMwLTgw MzMtMTQxNDYyNWQ1NjViLzg2MmE5YWRlLTNkODgtNDczMC04MDMzLTE0MTQ2MjVk NTY1Yi5jcmwwHwYDVR0jBBgwFoAULOFG2t/V5HgusfTj4W9u5RjqxO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NjJhOWFkZS0zZDg4LTQ3MzAtODAzMy0xNDE0 NjI1ZDU2NWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4NsMA4E AgACMAgDBgQmAvddADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDsbHgS2ca7RItPXAbd+IEDwfViT32g6Dc FDlOWG1eqtPyFrChi9dB8owcqS7npjtmXvXzJbDSTQhzq5qLJuwBReOrXRwNEE3Q N8dpxkDKBsl49q1kr1cC/qomISuejYV1ocm7i6lDihbhsspYQ2FsMf2YNoqPaw9r pqgUz2CRr+Y4iOQti9w/18x1TBseQPY8OmrA2OsROJInnHX+GVU3mPjLoBqishN6 tmhwHiSmlLGDCkrnOE9wls5YYZMTai7h3O8NsxQ212cD4BGozImr7zbcSip9W7xR BubibFhrO9w5bIUKhvGw3g8m+9bAf4yReGbxbOLEcJY5qhBTgmwO -----END CERTIFICATE-----Generated at Sun Dec 7 01:32:56 2025 by rpki-client