This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa File: 243c2121-9527-32f8-8657-ae22867f3928.roa (raw, json) Hash identifier: KXXieDwyauCNxdfmBUD6eg2eThjiZs6jb/aroMTTt5w= Subject key identifier: 0A:1D:77:B0:71:6C:32:D7:C6:5C:D7:85:34:31:41:29:F1:D7:2F:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3EABCB5E200AE0FC5F0B1AE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.217.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:cb:5e:20:0a:e0:fc:5f:0b:1a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=aa8d048f-389b-4558-a0c9-a5452e9ce9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:2e:21:bc:57:12:77:ed:c6:40:eb:b6:52: 1f:bd:e7:91:a8:01:70:1c:65:11:ad:70:b3:b3:10: ba:c2:fb:b0:6a:01:e4:fc:fc:74:69:ff:9a:6c:23: 8a:fc:53:71:25:99:8b:37:8c:bc:49:f1:5a:7e:7c: 55:55:0e:53:1e:60:8a:71:20:75:29:9c:c7:e2:dd: bd:70:b3:6f:8d:1e:ba:1a:f5:57:bf:46:1d:09:1b: 4d:cd:b8:34:33:d7:b4:cc:25:b0:cf:f7:7f:62:c2: 3d:7f:f6:99:ac:13:af:f8:03:c0:7a:ef:67:8a:98: 09:f3:1b:d0:62:3b:49:2e:db:f0:80:a1:ca:ee:01: 5c:16:94:6e:a1:c9:b7:c2:6e:57:31:c1:dd:8a:f2: 2a:21:fe:14:8f:ef:5c:48:f4:bb:74:2d:86:41:70: ce:99:22:9e:aa:33:d9:6c:0b:02:04:d7:ed:ae:91: b9:37:f7:3e:72:ff:24:d0:c4:87:39:cd:fe:ba:31: be:8f:22:8d:6e:48:a9:9b:df:f8:18:c9:a8:fa:cb: 70:46:62:fd:1d:f2:ab:90:2f:c9:6f:32:bc:e8:1d: 62:55:f3:fd:b9:8e:6d:73:15:17:fb:0f:55:17:60: 14:5b:3f:2f:70:bc:67:c8:9f:bf:08:cc:55:06:97: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1D:77:B0:71:6C:32:D7:C6:5C:D7:85:34:31:41:29:F1:D7:2F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:bc:a7:40:82:27:a8:bb:6c:82:40:69:a3:ce:ec:dc:36:a5: 2e:b1:e7:99:f6:b2:21:19:8d:eb:df:dd:19:e7:c0:12:c5:7a: f1:00:cc:af:4f:76:d4:ec:82:ea:c1:82:a2:aa:96:0d:f4:21: 45:ff:16:09:5d:ff:9c:2a:bc:1e:99:44:91:dd:da:ef:7e:c2: fa:b9:3c:8d:ab:0a:eb:8e:a0:8e:5f:13:e4:4d:71:55:47:2d: 53:2d:bc:8e:83:e2:b1:53:60:4b:58:a5:6b:de:ab:78:8a:b2: dd:0c:7a:c4:e1:a5:92:72:3c:90:9f:a1:1a:de:ea:ee:0a:3c: 0c:ed:9a:7b:d4:9d:61:c5:7e:92:3f:65:af:20:6c:fb:12:db: 57:60:8a:9b:7f:5a:79:8b:70:28:26:3a:4d:8e:2e:29:28:cd: 4b:10:d9:7d:91:63:25:77:e1:f9:d5:a3:b4:53:3f:e4:fb:b5: 0a:7a:12:5f:1f:d9:be:bf:f6:02:88:e4:52:a8:6f:47:65:62: b5:9a:7a:e9:6e:81:c8:5f:89:3b:6d:43:a1:a8:ef:28:14:c2: cd:70:16:5c:1e:1b:0c:dc:87:f6:ee:b9:ac:05:f8:e2:85:c5: 3b:5c:1f:43:35:96:a5:49:de:0c:1d:2c:48:a9:af:13:33:ee: 54:61:90:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q8teIArg/F8LGuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk YWE4ZDA0OGYtMzg5Yi00NTU4LWEwYzktYTU0NTJlOWNlOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswUuIbxXEnftxkDrtlIfveeRqAFwHGURrXCz sxC6wvuwagHk/Px0af+abCOK/FNxJZmLN4y8SfFafnxVVQ5THmCKcSB1KZzH4t29 cLNvjR66GvVXv0YdCRtNzbg0M9e0zCWwz/d/YsI9f/aZrBOv+APAeu9nipgJ8xvQ YjtJLtvwgKHK7gFcFpRuocm3wm5XMcHdivIqIf4Uj+9cSPS7dC2GQXDOmSKeqjPZ bAsCBNftrpG5N/c+cv8k0MSHOc3+ujG+jyKNbkipm9/4GMmo+stwRmL9HfKrkC/J bzK86B1iVfP9uY5tcxUX+w9VF2AUWz8vcLxnyJ+/CMxVBpcYZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAodd7BxbDLXxlzXhTQxQSnx1y+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjQzYzIxMjEtOTUyNy0z MmY4LTg2NTctYWUyMjg2N2YzOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGS8p0CCJ6i7bIJAaaPO7Nw2pS6x55n2siEZjevf3RnnwBLFevEAzK9P dtTsgurBgqKqlg30IUX/Fgld/5wqvB6ZRJHd2u9+wvq5PI2rCuuOoI5fE+RNcVVH LVMtvI6D4rFTYEtYpWveq3iKst0MesThpZJyPJCfoRre6u4KPAztmnvUnWHFfpI/ Za8gbPsS21dgipt/WnmLcCgmOk2OLikozUsQ2X2RYyV34fnVo7RTP+T7tQp6El8f 2b6/9gKI5FKob0dlYrWaeulugchfiTttQ6Go7ygUws1wFlweGwzch/buuawF+OKF xTtcH0M1lqVJ3gwdLEiprxMz7lRhkLE= -----END CERTIFICATE-----Generated at Sun Jan 25 08:14:19 2026 by rpki-client