This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa File: 32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa (raw, json) Hash identifier: GqVR2ynZqgt23PXGllOtGcS6LmhTNJKCzAhuejGNFDs= Subject key identifier: 7A:15:8B:CC:0D:04:42:5B:96:EA:4D:75:51:CC:8C:CD:B4:C6:90:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C0DD0D8E4DA7460DE8D35DB40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 35994 IP address blocks: 23.58.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:d8:e4:da:74:60:de:8d:35:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=6d5236fd-0342-4bf5-8716-3f4a1e6285e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:de:bf:44:ba:ad:24:64:02:ca:45:7c:9e:b6: b4:e4:0b:6e:a7:ba:aa:86:01:81:6e:f3:94:0f:ed: 73:12:4a:63:e5:a4:33:38:e7:c1:b7:58:49:e2:a8: cd:30:0a:6c:ec:fc:c5:60:de:13:61:b4:c0:35:b5: aa:9f:4a:af:ad:3a:41:8a:64:09:71:53:42:93:63: d1:44:c5:0f:17:b5:b1:6d:92:6d:92:4b:58:69:0c: 94:5a:64:fb:8b:18:46:f4:94:18:1e:27:3f:38:e5: 46:67:24:58:09:da:fd:f0:a0:0b:3e:8d:0d:0b:af: 46:3b:20:16:27:78:03:e6:fb:0d:a5:ae:5b:29:b1: 1f:33:a4:04:97:a5:0a:b4:5c:f8:c1:48:77:e8:5b: 74:8f:e7:11:2e:3b:3b:16:b9:82:a3:c8:02:4a:2a: 5a:2f:fb:3d:d9:30:da:e5:3b:85:b6:28:1f:24:6d: bd:6e:2b:73:48:dd:c4:2a:c8:b0:07:43:0f:9d:75: 69:93:81:a6:3b:14:03:33:c5:4d:8d:41:3d:13:8b: c7:29:96:46:bd:06:ec:4b:99:39:6f:49:68:b7:31: 07:17:65:ba:38:8d:e9:42:c4:8d:ac:37:86:84:ce: 8c:ec:f9:6c:e2:f8:22:a4:6b:17:4a:7c:e1:ad:56: 13:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:15:8B:CC:0D:04:42:5B:96:EA:4D:75:51:CC:8C:CD:B4:C6:90:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32cdbca4-5b9c-38aa-b890-8e62d4d357b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:12:2d:11:65:7f:94:a4:9c:51:13:a1:95:6b:8c:d5:ce:b5: 74:1d:cd:26:18:54:72:a7:19:ca:a8:d0:dd:f1:32:b8:bd:b0: 45:cb:82:7f:c9:25:ce:34:de:95:2e:a0:c0:ca:74:be:c8:e0: 7d:c8:91:de:b0:52:1d:fc:88:4d:fe:7c:bb:6c:a7:5b:8b:c2: 5b:61:6e:3e:80:e2:c6:89:40:65:fc:4b:ac:27:83:55:dd:8c: 69:81:5c:08:42:77:a4:dc:f0:90:90:b4:45:b0:a4:68:09:93: 36:d7:1e:21:c1:e8:13:29:17:56:3b:c0:4c:05:19:a0:40:94: 2c:d3:12:ff:59:f6:1b:66:86:c2:40:13:d4:be:0b:13:e2:29: 14:7b:c7:07:8b:90:94:31:f8:39:91:1a:3c:2a:00:34:83:12: e7:91:42:f7:f6:79:5f:d5:63:c7:74:6b:f2:8e:f7:4e:31:fe: 29:dc:e5:2f:b8:0d:d7:eb:84:23:3f:07:8a:fd:9b:d5:33:21: 4d:7d:15:91:1d:7e:14:c7:0e:2a:40:92:04:9d:b1:d2:28:93: 5e:e2:ba:e1:06:11:57:a8:97:b8:0a:26:28:2f:7c:94:62:f4: b0:ff:32:8a:23:b7:ed:fa:4c:c6:3b:97:1b:f4:fa:eb:c2:22: a0:a2:db:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0Njk2nRg3o0120AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk NmQ1MjM2ZmQtMDM0Mi00YmY1LTg3MTYtM2Y0YTFlNjI4NWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd6/RLqtJGQCykV8nra05Atup7qqhgGBbvOU D+1zEkpj5aQzOOfBt1hJ4qjNMAps7PzFYN4TYbTANbWqn0qvrTpBimQJcVNCk2PR RMUPF7WxbZJtkktYaQyUWmT7ixhG9JQYHic/OOVGZyRYCdr98KALPo0NC69GOyAW J3gD5vsNpa5bKbEfM6QEl6UKtFz4wUh36Ft0j+cRLjs7FrmCo8gCSipaL/s92TDa 5TuFtigfJG29bitzSN3EKsiwB0MPnXVpk4GmOxQDM8VNjUE9E4vHKZZGvQbsS5k5 b0lotzEHF2W6OI3pQsSNrDeGhM6M7Pls4vgipGsXSnzhrVYTuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoVi8wNBEJblupNdVHMjM20xpAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJjZGJjYTQtNWI5Yy0z OGFhLWI4OTAtOGU2MmQ0ZDM1N2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0SLRFlf5SknFEToZVrjNXOtXQdzSYYVHKnGcqo0N3xMri9sEXLgn/J Jc403pUuoMDKdL7I4H3Ikd6wUh38iE3+fLtsp1uLwlthbj6A4saJQGX8S6wng1Xd jGmBXAhCd6Tc8JCQtEWwpGgJkzbXHiHB6BMpF1Y7wEwFGaBAlCzTEv9Z9htmhsJA E9S+CxPiKRR7xweLkJQx+DmRGjwqADSDEueRQvf2eV/VY8d0a/KO904x/inc5S+4 DdfrhCM/B4r9m9UzIU19FZEdfhTHDipAkgSdsdIok17iuuEGEVeol7gKJigvfJRi 9LD/Moojt+36TMY7lxv0+uvCIqCi21M= -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:18 2025 by rpki-client