This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ac27858-388a-3d35-be99-292c759ab34a.roa File: 2ac27858-388a-3d35-be99-292c759ab34a.roa (raw, json) Hash identifier: B6Ee7flmASpUm1AioiN5MfsM1oC6bqqz26epNlkqTdU= Subject key identifier: 43:B7:68:B0:D5:3B:58:D9:A0:35:FF:95:D9:2A:15:F4:65:65:E7:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C109B8F2ED05598677AB0B880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ac27858-388a-3d35-be99-292c759ab34a.roa Signing time: Wed 03 Dec 2025 14:00:38 +0000 ROA not before: Wed 03 Dec 2025 14:00:38 +0000 ROA not after: Tue 03 Mar 2026 14:00:38 +0000 asID: 20940 IP address blocks: 23.197.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:9b:8f:2e:d0:55:98:67:7a:b0:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 3 14:00:38 2025 GMT Not After : Mar 3 14:00:38 2026 GMT Subject: CN=9730ab8d-0b34-4274-bce6-c739a7083806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:da:dc:66:75:90:72:df:e1:50:36:a8:dd: 43:ad:05:1d:14:28:a1:2c:1f:a5:7f:6b:8c:f3:e9: b5:9c:bd:ba:88:e4:3b:b4:31:3e:e6:69:9a:f8:d4: 23:f7:01:50:97:b4:75:ca:c0:c4:f0:ba:e2:22:6e: cd:fc:fd:65:38:a0:49:50:03:f1:ca:6e:b5:ab:3c: 3f:27:96:cc:d9:8b:ff:e2:6e:db:f0:c4:71:2f:30: 49:d3:9d:f2:da:e9:3e:73:01:7a:c6:fd:78:6b:05: 7f:06:72:87:70:d0:a1:58:46:75:70:d8:15:41:a9: 84:70:43:e2:5f:90:3c:1a:31:9b:93:d9:c8:c8:29: 43:fd:d4:d5:a6:f8:3c:56:25:84:cd:84:be:7e:2d: 5e:54:39:47:1e:31:13:10:a4:7e:4f:68:9b:c3:d2: 58:6f:1c:2a:e4:52:46:df:00:21:14:c0:40:f6:12: f3:56:9d:c1:5e:20:0a:e3:09:59:87:ef:d9:00:3e: 9f:e0:cd:58:55:b5:23:53:63:5a:57:fb:55:ed:0c: cf:71:78:bf:0c:e2:5e:24:d0:99:f1:73:1a:3a:e7: 5c:e8:69:5c:c1:30:e6:41:85:73:e3:82:1e:7b:53: 3b:92:11:4b:e4:78:c3:84:e5:80:ec:82:d9:c9:1b: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B7:68:B0:D5:3B:58:D9:A0:35:FF:95:D9:2A:15:F4:65:65:E7:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ac27858-388a-3d35-be99-292c759ab34a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:67:c6:66:c0:ce:56:75:76:0b:27:61:6d:7f:33:7e:01:40: cb:93:31:12:d9:64:5d:83:5f:24:35:29:98:dd:a5:43:98:0e: a7:24:ec:80:7f:ab:4f:60:74:ca:ce:08:e3:22:03:5b:e9:2a: d7:bd:49:b5:a9:1d:37:cf:df:50:d3:11:fe:29:b2:ad:6a:28: 37:dc:98:9e:2c:28:84:43:7f:93:42:b2:fb:88:e0:c9:03:d3: c0:47:53:a2:35:12:4d:d7:55:c7:56:53:03:e3:8f:df:d8:e7: 28:53:23:83:e9:1c:80:1d:95:1b:27:13:21:71:9e:c9:17:a8: 63:36:35:f7:b5:07:d4:e6:c0:01:84:9b:b9:7f:c4:3a:6d:8e: b7:1b:18:bd:f9:74:8d:09:ac:79:70:48:9d:a3:cf:95:bb:4c: 08:30:87:60:df:e1:f1:14:06:88:03:0e:a7:40:49:f3:b1:81: 63:e1:27:0f:f6:0d:65:f2:ec:10:6e:74:54:d8:f0:7e:4a:43: bb:d4:2d:29:9f:57:db:20:38:c8:7f:e2:98:42:b4:da:ca:65: 35:f6:3f:06:0e:0f:05:52:37:d5:b0:7e:ac:2c:9f:90:ff:07: 12:c8:b3:84:ac:a0:76:de:b4:ca:db:c4:3a:99:f0:36:11:7d: b4:ac:ae:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwQm48u0FWYZ3qwuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwMzE0MDAzOFoXDTI2MDMwMzE0MDAzOFowLzEtMCsGA1UEAxMk OTczMGFiOGQtMGIzNC00Mjc0LWJjZTYtYzczOWE3MDgzODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu7a3GZ1kHLf4VA2qN1DrQUdFCihLB+lf2uM 8+m1nL26iOQ7tDE+5mma+NQj9wFQl7R1ysDE8LriIm7N/P1lOKBJUAPxym61qzw/ J5bM2Yv/4m7b8MRxLzBJ053y2uk+cwF6xv14awV/BnKHcNChWEZ1cNgVQamEcEPi X5A8GjGbk9nIyClD/dTVpvg8ViWEzYS+fi1eVDlHHjETEKR+T2ibw9JYbxwq5FJG 3wAhFMBA9hLzVp3BXiAK4wlZh+/ZAD6f4M1YVbUjU2NaV/tV7QzPcXi/DOJeJNCZ 8XMaOudc6GlcwTDmQYVz44Iee1M7khFL5HjDhOWA7ILZyRtkHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO3aLDVO1jZoDX/ldkqFfRlZedoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmFjMjc4NTgtMzg4YS0z ZDM1LWJlOTktMjkyYzc1OWFiMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8VHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBnxmbAzlZ1dgsnYW1/M34BQMuTMRLZZF2DXyQ1KZjdpUOYDqck7IB/ q09gdMrOCOMiA1vpKte9SbWpHTfP31DTEf4psq1qKDfcmJ4sKIRDf5NCsvuI4MkD 08BHU6I1Ek3XVcdWUwPjj9/Y5yhTI4PpHIAdlRsnEyFxnskXqGM2Nfe1B9TmwAGE m7l/xDptjrcbGL35dI0JrHlwSJ2jz5W7TAgwh2Df4fEUBogDDqdASfOxgWPhJw/2 DWXy7BBudFTY8H5KQ7vULSmfV9sgOMh/4phCtNrKZTX2PwYODwVSN9Wwfqwsn5D/ BxLIs4SsoHbetMrbxDqZ8DYRfbSsrqg= -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:17 2025 by rpki-client