This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29d89bdd-91a3-3b50-a2a1-064367986503.roa File: 29d89bdd-91a3-3b50-a2a1-064367986503.roa (raw, json) Hash identifier: DjytGzaO5OrAirXAc+aE5Nhtmam1jcKol3BhG1G68Ls= Subject key identifier: E7:8E:1F:E7:3A:98:32:D0:75:27:E6:AB:B1:A4:09:BC:35:BA:94:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BFBAB68443FDE6A9106D72680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29d89bdd-91a3-3b50-a2a1-064367986503.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 23.36.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:68:44:3f:de:6a:91:06:d7:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=d427ba55-9ac8-4ac7-b397-bc024e4c6a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c5:47:5b:61:fa:c0:6f:67:70:06:ea:4f:0b: ec:9e:91:a8:e4:7d:f8:6e:15:32:b1:48:37:3c:08: 48:d1:85:3f:da:e1:1f:a5:0b:17:68:3c:6c:a9:59: b1:12:ee:e3:3b:0f:fd:6a:5d:00:fd:65:b1:fb:63: f5:76:dc:e2:35:55:00:eb:dc:ea:65:c6:65:eb:c6: 01:e8:46:ce:51:f6:1e:cb:2b:cd:03:ee:1a:f6:76: 54:b1:7f:7c:63:b1:c1:62:0d:08:d3:2a:54:5a:83: 80:e5:d8:8b:02:b3:73:58:60:a1:52:7a:10:41:2f: c4:9b:16:5f:83:30:25:da:ae:7c:58:76:ac:98:3b: 30:19:18:ea:dd:ef:0b:71:8a:9f:96:9d:37:57:d0: f0:cf:25:63:04:c5:3f:3c:c5:82:8f:5e:0a:52:3b: 76:0e:39:49:99:36:9f:2e:60:77:2b:e9:69:69:79: aa:f0:2d:fc:3c:b5:dc:0b:74:9d:17:91:50:ef:65: 09:17:0a:95:29:81:78:06:12:83:89:76:53:59:fb: 06:5d:b7:d0:66:d8:bd:e5:8e:da:44:4b:c5:dc:1b: 3b:34:bf:f1:38:61:ae:da:99:24:c0:38:1f:5c:e2: c3:cb:5a:68:ad:86:f4:fe:47:f8:37:89:b2:ec:b1: 9c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8E:1F:E7:3A:98:32:D0:75:27:E6:AB:B1:A4:09:BC:35:BA:94:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29d89bdd-91a3-3b50-a2a1-064367986503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:53:ea:06:18:85:7f:28:fc:42:b6:0d:a6:c0:38:4c:93:97: 95:e5:a8:d0:63:0a:cf:ec:4a:14:1e:18:48:f8:b0:d6:7f:54: d9:6b:95:6d:ef:f4:93:37:46:ef:78:96:8b:25:69:49:0d:14: 2b:9a:97:e0:60:b5:71:a6:29:d7:91:e1:74:e6:ce:f3:5e:83: cb:43:c2:9b:b8:8f:c1:d9:b9:c5:b2:97:75:ba:02:3a:2a:4f: f5:ca:c0:d0:18:f6:e1:dd:19:8a:c8:03:58:bd:e4:a7:f5:79: 5d:72:94:53:6c:da:7e:8d:ec:91:d5:23:22:1c:99:78:84:2b: 86:7c:7c:c3:97:7a:09:4d:49:83:ea:70:41:9e:ff:2a:b3:db: cd:97:6a:49:94:91:01:63:3c:dc:df:06:41:30:f1:5b:29:97: 77:46:06:19:55:93:f5:e2:03:69:69:b5:93:ce:b5:e9:97:3e: f7:37:ce:54:b1:d0:cd:43:4a:ea:06:41:58:c9:18:97:3e:6a: 3d:f9:1f:a2:1a:27:f7:65:31:44:9d:9a:1e:88:48:76:ee:63: 6a:40:e4:d1:22:6d:98:73:2d:00:60:ff:12:82:2a:27:21:d9: 54:6e:09:79:13:f1:c6:d6:f5:85:44:f8:d0:f2:90:da:dd:bc: 52:92:7c:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7q2hEP95qkQbXJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk ZDQyN2JhNTUtOWFjOC00YWM3LWIzOTctYmMwMjRlNGM2YTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsVHW2H6wG9ncAbqTwvsnpGo5H34bhUysUg3 PAhI0YU/2uEfpQsXaDxsqVmxEu7jOw/9al0A/WWx+2P1dtziNVUA69zqZcZl68YB 6EbOUfYeyyvNA+4a9nZUsX98Y7HBYg0I0ypUWoOA5diLArNzWGChUnoQQS/EmxZf gzAl2q58WHasmDswGRjq3e8LcYqflp03V9DwzyVjBMU/PMWCj14KUjt2DjlJmTaf LmB3K+lpaXmq8C38PLXcC3SdF5FQ72UJFwqVKYF4BhKDiXZTWfsGXbfQZti95Y7a REvF3Bs7NL/xOGGu2pkkwDgfXOLDy1porYb0/kf4N4my7LGc4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeOH+c6mDLQdSfmq7GkCbw1upRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjlkODliZGQtOTFhMy0z YjUwLWEyYTEtMDY0MzY3OTg2NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyRMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9T6gYYhX8o/EK2DabAOEyTl5XlqNBjCs/sShQeGEj4sNZ/VNlrlW3v 9JM3Ru94loslaUkNFCual+BgtXGmKdeR4XTmzvNeg8tDwpu4j8HZucWyl3W6Ajoq T/XKwNAY9uHdGYrIA1i95Kf1eV1ylFNs2n6N7JHVIyIcmXiEK4Z8fMOXeglNSYPq cEGe/yqz282XakmUkQFjPNzfBkEw8Vspl3dGBhlVk/XiA2lptZPOtemXPvc3zlSx 0M1DSuoGQVjJGJc+aj35H6IaJ/dlMUSdmh6ISHbuY2pA5NEibZhzLQBg/xKCKich 2VRuCXkT8cbW9YVE+NDykNrdvFKSfHk= -----END CERTIFICATE-----Generated at Tue Dec 9 08:52:43 2025 by rpki-client