This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28d65aad-6b71-3872-aa61-8aadd2447825.roa File: 28d65aad-6b71-3872-aa61-8aadd2447825.roa (raw, json) Hash identifier: F4+K9VwQlKXrOo6GiqO/RCjXtsT2hmxYyDm+Uq1zO4A= Subject key identifier: 04:59:8B:1A:B3:AA:DE:23:AB:F7:F3:CE:DE:1E:88:E1:CC:09:12:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C1630D72F81FEE3B624A5D1A8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28d65aad-6b71-3872-aa61-8aadd2447825.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 7713 IP address blocks: 23.219.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:d7:2f:81:fe:e3:b6:24:a5:d1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=409a09c6-b977-4632-8250-6079a687983f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6e:48:7d:e3:07:2c:6b:4c:b9:50:0f:24:3a: b3:a2:f5:42:e1:15:19:53:21:69:d1:6b:75:6e:4e: 0a:31:0b:34:99:c7:9c:de:bf:58:11:be:54:8c:da: e8:3b:d4:50:da:c6:c3:cb:db:28:02:0b:4e:a0:10: 64:6f:4e:1c:39:24:63:c4:af:46:6f:b6:d6:bf:55: e3:23:f3:0c:30:11:46:b8:b5:e1:4d:0b:c1:38:0d: 6d:78:06:75:20:19:d6:16:84:77:ec:bb:7f:58:20: 04:c1:4a:6b:a0:a4:d6:b2:13:8d:c3:75:fe:8b:72: 6a:b3:3a:93:44:3e:7e:d1:21:8c:46:9e:9c:40:46: a9:32:46:b7:15:58:f4:eb:60:8a:86:7f:8e:52:16: 79:4a:97:ce:42:34:9b:7b:40:63:fb:d5:3b:ad:77: 1a:4e:2d:03:67:23:4d:13:52:93:56:26:56:bf:b0: ef:85:b7:f4:d1:6a:4b:47:b0:68:20:3e:fd:40:7d: e5:cd:4b:8b:54:8a:7d:63:7d:43:9d:7e:d6:9f:24: 0a:15:fc:cd:43:07:31:8b:15:07:07:75:a9:73:dc: 24:5b:65:f6:d4:41:68:71:e3:be:17:c9:20:20:65: 53:f0:c8:a2:f4:71:73:0d:04:97:09:26:0a:f3:11: e8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:59:8B:1A:B3:AA:DE:23:AB:F7:F3:CE:DE:1E:88:E1:CC:09:12:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28d65aad-6b71-3872-aa61-8aadd2447825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:be:a3:50:2e:03:52:d9:93:c5:95:20:f7:98:6f:82:8b:8b: 43:2f:bd:85:33:14:25:31:c1:6d:ec:5b:25:b7:d0:c5:75:10: 37:2a:e8:1b:19:05:4a:b4:53:49:71:7f:78:2b:e4:c4:a2:cc: 14:8d:46:de:bd:2a:63:75:56:df:a4:e3:7e:83:4c:78:dc:9c: 15:a0:f7:ce:00:0f:e6:7a:a2:d2:18:7c:2e:95:9e:c2:06:b5: a5:5d:82:33:0b:6d:af:d4:10:4c:08:a0:f4:ab:ac:d9:58:d3: 96:b7:4f:1a:83:e0:2a:1e:20:d4:48:ec:fe:a0:f6:76:e0:ba: 13:ca:ec:ad:cb:1a:52:0a:72:96:71:91:00:20:67:c1:7e:13: 9d:aa:93:a5:6e:f3:76:59:bf:4a:fb:1c:ef:47:dd:ae:75:65: e3:b6:ba:0c:ec:87:f0:09:0b:76:02:57:20:32:11:70:39:03: 5c:56:98:72:81:93:3a:f7:70:97:94:72:6e:e2:12:46:ba:3c: ae:5b:de:b9:43:25:89:6d:0c:ff:e0:31:6b:f7:d0:15:60:de: f1:e9:54:54:44:70:c6:b2:3f:4f:9a:96:d5:75:2e:51:94:69: 2b:dc:90:39:8d:d2:2d:87:29:f7:ee:05:08:a0:a5:e8:a7:22: 93:08:ae:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMNcvgf7jtiSl0agwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk NDA5YTA5YzYtYjk3Ny00NjMyLTgyNTAtNjA3OWE2ODc5ODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG5IfeMHLGtMuVAPJDqzovVC4RUZUyFp0Wt1 bk4KMQs0mcec3r9YEb5UjNroO9RQ2sbDy9soAgtOoBBkb04cOSRjxK9Gb7bWv1Xj I/MMMBFGuLXhTQvBOA1teAZ1IBnWFoR37Lt/WCAEwUproKTWshONw3X+i3JqszqT RD5+0SGMRp6cQEapMka3FVj062CKhn+OUhZ5SpfOQjSbe0Bj+9U7rXcaTi0DZyNN E1KTViZWv7Dvhbf00WpLR7BoID79QH3lzUuLVIp9Y31DnX7WnyQKFfzNQwcxixUH B3Wpc9wkW2X21EFoceO+F8kgIGVT8Mii9HFzDQSXCSYK8xHoWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARZixqzqt4jq/fzzt4eiOHMCRKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjhkNjVhYWQtNmI3MS0z ODcyLWFhNjEtOGFhZGQyNDQ3ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9vNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq+o1AuA1LZk8WVIPeYb4KLi0MvvYUzFCUxwW3sWyW30MV1EDcq6BsZ BUq0U0lxf3gr5MSizBSNRt69KmN1Vt+k436DTHjcnBWg984AD+Z6otIYfC6VnsIG taVdgjMLba/UEEwIoPSrrNlY05a3TxqD4CoeINRI7P6g9nbguhPK7K3LGlIKcpZx kQAgZ8F+E52qk6Vu83ZZv0r7HO9H3a51ZeO2ugzsh/AJC3YCVyAyEXA5A1xWmHKB kzr3cJeUcm7iEka6PK5b3rlDJYltDP/gMWv30BVg3vHpVFREcMayP0+altV1LlGU aSvckDmN0i2HKffuBQigpeinIpMIrrc= -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:43 2025 by rpki-client