This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/398fcc33-76c6-3a08-ad4d-2ad80ccf7b03.roa File: 398fcc33-76c6-3a08-ad4d-2ad80ccf7b03.roa (raw, json) Hash identifier: SO92heBPT2nDgrnWsxkgOmehhT9tIiG0IL3bmmi2f3I= Subject key identifier: 70:26:23:AD:1F:2A:CF:72:03:E5:C2:D4:8C:57:47:61:A8:24:7C:28 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BFD10D2549805C60076947C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/398fcc33-76c6-3a08-ad4d-2ad80ccf7b03.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.43.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:d2:54:98:05:c6:00:76:94:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=d99b382b-5d43-4593-a66d-6ba9f6e39629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:09:cf:50:74:92:af:1a:af:1f:fe:c5:37: b3:af:52:a8:c1:56:dd:3e:80:dd:be:89:5d:c8:39: c4:32:07:37:e3:8c:1b:2f:6f:48:27:7a:b7:46:e3: 39:cf:9e:a2:cd:b8:b2:ae:05:cc:3a:a8:6e:0f:e7: 34:a7:eb:5d:06:dd:71:78:86:a6:de:87:83:05:67: a8:80:ba:96:1e:75:c7:e3:04:a2:c9:5c:ab:4f:15: 77:46:b1:43:87:f3:3b:17:71:46:5d:c0:08:a1:a0: d9:8d:06:d3:00:05:45:c2:93:ed:60:54:41:82:33: 3c:5f:5b:14:b1:01:01:fb:7c:c5:22:37:68:16:4a: f4:7d:83:6b:8d:66:3c:0f:7b:53:82:99:fc:bc:2f: 4c:49:3f:2f:5e:0f:8c:9a:05:43:da:41:3b:27:21: d6:6f:37:5d:1d:02:01:4e:1b:a6:ba:37:13:84:f2: 04:d5:88:f2:76:3b:c6:ac:4f:50:e9:23:ac:04:60: f9:3c:cc:e0:60:38:16:c9:53:5b:26:f5:43:2b:b7: 76:a8:85:ce:ba:52:61:eb:e1:35:1c:b6:3e:fe:f4: 59:50:76:6e:c4:30:2f:4f:95:c9:76:e4:a0:27:ab: 0e:22:2e:62:f3:da:92:4e:f8:b1:1e:7e:0e:31:3d: 46:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:26:23:AD:1F:2A:CF:72:03:E5:C2:D4:8C:57:47:61:A8:24:7C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/398fcc33-76c6-3a08-ad4d-2ad80ccf7b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:37:f8:98:7f:ac:36:53:f0:74:e6:12:41:cb:95:59:1c:de: d9:00:03:85:e8:18:6c:94:b4:31:49:04:4a:fb:c5:34:5c:01: 05:d8:ed:f5:66:1c:ea:15:1d:61:5a:cf:cc:f4:b5:9f:5d:19: 82:1a:e4:07:52:94:3c:cc:75:ca:63:1d:47:40:b5:fe:fe:8c: 09:cb:de:a8:dc:0f:44:c3:4e:f0:66:e7:a7:4e:da:78:11:a5: 15:16:2e:78:f4:11:4a:cf:69:28:e7:5a:4a:34:1f:3a:bf:9b: 99:9d:d7:bf:71:d0:b6:7a:99:92:5b:c2:11:5f:f3:c0:8f:24: 32:28:e7:21:87:53:27:60:2e:7d:96:2a:d5:dd:ce:fd:c4:a1: 7a:82:af:fd:b5:5e:83:26:df:68:8d:7c:58:85:74:55:f7:be: 7c:0a:31:ce:35:a3:3b:88:7e:6b:d3:dc:c7:64:07:73:22:41: 69:d5:6c:a2:57:4f:1b:85:b5:1d:6f:93:cc:71:ac:79:85:01: 16:79:23:b8:2c:5a:2a:4a:5d:a7:85:76:59:5d:4c:4d:2d:98: 28:e5:9a:a3:82:a3:cb:5c:0e:0c:e4:12:6c:9c:e2:f6:79:e5: a9:23:79:b6:86:77:b2:1b:7b:47:c6:e9:0b:06:9a:4f:b2:b3: c8:59:9c:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9ENJUmAXGAHaUfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk ZDk5YjM4MmItNWQ0My00NTkzLWE2NmQtNmJhOWY2ZTM5NjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0YJz1B0kq8arx/+xTezr1KowVbdPoDdvold yDnEMgc344wbL29IJ3q3RuM5z56izbiyrgXMOqhuD+c0p+tdBt1xeIam3oeDBWeo gLqWHnXH4wSiyVyrTxV3RrFDh/M7F3FGXcAIoaDZjQbTAAVFwpPtYFRBgjM8X1sU sQEB+3zFIjdoFkr0fYNrjWY8D3tTgpn8vC9MST8vXg+MmgVD2kE7JyHWbzddHQIB ThumujcThPIE1YjydjvGrE9Q6SOsBGD5PMzgYDgWyVNbJvVDK7d2qIXOulJh6+E1 HLY+/vRZUHZuxDAvT5XJduSgJ6sOIi5i89qSTvixHn4OMT1GnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAmI60fKs9yA+XC1IxXR2GoJHwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzk4ZmNjMzMtNzZjNi0z YTA4LWFkNGQtMmFkODBjY2Y3YjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFytVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY3+Jh/rDZT8HTmEkHLlVkc3tkAA4XoGGyUtDFJBEr7xTRcAQXY7fVm HOoVHWFaz8z0tZ9dGYIa5AdSlDzMdcpjHUdAtf7+jAnL3qjcD0TDTvBm56dO2ngR pRUWLnj0EUrPaSjnWko0Hzq/m5md179x0LZ6mZJbwhFf88CPJDIo5yGHUydgLn2W KtXdzv3EoXqCr/21XoMm32iNfFiFdFX3vnwKMc41ozuIfmvT3MdkB3MiQWnVbKJX TxuFtR1vk8xxrHmFARZ5I7gsWipKXaeFdlldTE0tmCjlmqOCo8tcDgzkEmyc4vZ5 5akjebaGd7Ibe0fG6QsGmk+ys8hZnBw= -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:25 2025 by rpki-client