This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29630211-a286-36ba-b410-6bef60ebc95c.roa File: 29630211-a286-36ba-b410-6bef60ebc95c.roa (raw, json) Hash identifier: LOtf6Tn0QiNmlZMoCLoy5wGvtKOL02HGMHQ9MyU9lMk= Subject key identifier: 56:29:E5:B6:86:36:F9:C6:CB:A3:0E:FE:FA:80:6D:46:55:FB:82:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BE125DD090A291C41E1598540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29630211-a286-36ba-b410-6bef60ebc95c.roa Signing time: Sun 16 Nov 2025 14:00:39 +0000 ROA not before: Sun 16 Nov 2025 14:00:39 +0000 ROA not after: Sat 14 Feb 2026 14:00:39 +0000 asID: 35994 IP address blocks: 23.59.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e1:25:dd:09:0a:29:1c:41:e1:59:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 16 14:00:39 2025 GMT Not After : Feb 14 14:00:39 2026 GMT Subject: CN=53b86a05-43e2-406e-8b53-8aa5fb80119c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:01:3d:09:bc:7a:7b:13:72:8b:ea:78:ea: ad:cd:ae:4f:f5:08:61:87:90:13:b2:dd:04:2a:ba: 62:e8:7b:39:84:7c:f9:10:c7:19:8e:9c:a9:56:22: 45:70:2e:49:35:2a:c2:60:2c:89:5a:94:9a:1d:e9: c6:bb:5c:4a:da:ae:80:3e:70:48:51:ee:b9:94:f3: 6e:71:19:39:03:c9:c8:00:fe:5c:6c:fe:e7:a6:20: eb:94:75:42:bc:33:b7:e7:03:88:c2:e6:bc:01:a8: e0:23:5e:e0:b4:a4:fa:89:6e:6e:ec:30:26:7b:de: 41:40:cc:28:fa:85:e5:09:ac:f2:bc:89:4b:af:b7: 93:7f:93:17:08:2a:cc:2f:a3:67:3e:14:db:fd:6b: 87:5a:d5:2c:66:a2:76:e6:bb:f5:83:6e:4f:31:e3: 8f:b2:f5:8f:b8:ec:a9:90:12:cb:93:5f:03:f1:b2: 40:99:b0:79:16:5c:9c:ea:35:e5:93:a0:6e:55:18: c3:fa:01:ae:6d:c4:03:49:cd:9b:00:34:c3:15:9d: 7f:84:4e:2b:23:17:3e:65:d2:07:f3:c7:1e:ad:4c: c1:af:57:59:ea:49:45:c7:cb:8d:16:0e:cc:04:de: 67:07:23:52:46:45:b6:c2:fe:22:c6:b9:25:4c:14: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:29:E5:B6:86:36:F9:C6:CB:A3:0E:FE:FA:80:6D:46:55:FB:82:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29630211-a286-36ba-b410-6bef60ebc95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f0:dc:8f:eb:4c:bb:e1:6d:3b:cc:54:b6:a2:7c:2d:32:c0: 43:ac:52:35:a7:98:03:91:d0:0b:c0:35:53:b1:57:e9:77:7c: c7:b4:7b:73:4a:4e:5b:5b:b8:63:8a:0a:bd:fb:db:eb:1c:c1: d5:d5:a1:b8:17:c8:b8:98:da:e7:b3:77:ea:c1:07:5e:c6:f7: ce:c3:28:57:d6:09:32:da:eb:e0:cc:08:cf:f9:1f:d3:43:12: 99:63:1f:07:b4:c9:7e:b4:88:94:22:2e:23:59:d3:79:ed:e9: 91:4a:34:47:5c:7d:27:84:0e:8e:6f:e0:da:7a:46:53:66:9d: 78:fd:74:92:b1:3c:01:66:8f:77:e5:1a:7a:3b:77:85:2f:c3: 27:7a:06:c8:71:02:ce:f2:f3:b8:67:99:37:ca:f2:c0:da:03: 75:2d:4d:28:7f:fa:d8:dd:18:4d:c5:f4:07:4b:86:9c:85:75: 35:82:2d:28:c0:69:fb:6a:cf:60:29:5e:47:80:17:c4:d8:55: e7:0c:5f:9f:aa:f7:4a:62:e4:43:63:a2:cc:52:f2:38:dc:e1: 97:f0:42:fb:c3:70:f6:5e:c9:73:2d:22:dd:f8:c5:67:02:a2: e8:83:73:51:d6:bd:86:35:b6:93:03:ba:84:b7:11:4a:18:b7: 4c:cc:9c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvhJd0JCikcQeFZhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTExNjE0MDAzOVoXDTI2MDIxNDE0MDAzOVowLzEtMCsGA1UEAxMk NTNiODZhMDUtNDNlMi00MDZlLThiNTMtOGFhNWZiODAxMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz4BPQm8ensTcovqeOqtza5P9Qhhh5ATst0E Krpi6Hs5hHz5EMcZjpypViJFcC5JNSrCYCyJWpSaHenGu1xK2q6APnBIUe65lPNu cRk5A8nIAP5cbP7npiDrlHVCvDO35wOIwua8AajgI17gtKT6iW5u7DAme95BQMwo +oXlCazyvIlLr7eTf5MXCCrML6NnPhTb/WuHWtUsZqJ25rv1g25PMeOPsvWPuOyp kBLLk18D8bJAmbB5Flyc6jXlk6BuVRjD+gGubcQDSc2bADTDFZ1/hE4rIxc+ZdIH 88cerUzBr1dZ6klFx8uNFg7MBN5nByNSRkW2wv4ixrklTBQqGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYp5baGNvnGy6MO/vqAbUZV+4J7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjk2MzAyMTEtYTI4Ni0z NmJhLWI0MTAtNmJlZjYwZWJjOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzvyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHw3I/rTLvhbTvMVLaifC0ywEOsUjWnmAOR0AvANVOxV+l3fMe0e3NK TltbuGOKCr372+scwdXVobgXyLiY2uezd+rBB17G987DKFfWCTLa6+DMCM/5H9ND EpljHwe0yX60iJQiLiNZ03nt6ZFKNEdcfSeEDo5v4Np6RlNmnXj9dJKxPAFmj3fl Gno7d4Uvwyd6BshxAs7y87hnmTfK8sDaA3UtTSh/+tjdGE3F9AdLhpyFdTWCLSjA aftqz2ApXkeAF8TYVecMX5+q90pi5ENjosxS8jjc4ZfwQvvDcPZeyXMtIt34xWcC ouiDc1HWvYY1tpMDuoS3EUoYt0zMnFQ= -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:33 2025 by rpki-client