This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ef6277c-a8f5-30ec-9f74-baf8d282f6da.roa File: 3ef6277c-a8f5-30ec-9f74-baf8d282f6da.roa (raw, json) Hash identifier: bP0L4kYhRiAYGzpeIbcups4s6qbxdTuExvx2JlYC6Xg= Subject key identifier: 69:1A:8E:EE:A3:3B:B3:C9:C3:F4:0F:6E:24:93:EA:76:09:85:4F:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C136626622FF114947DAF8D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ef6277c-a8f5-30ec-9f74-baf8d282f6da.roa Signing time: Thu 04 Dec 2025 14:00:39 +0000 ROA not before: Thu 04 Dec 2025 14:00:39 +0000 ROA not after: Wed 04 Mar 2026 14:00:39 +0000 asID: 32787 IP address blocks: 23.32.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:13:66:26:62:2f:f1:14:94:7d:af:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 4 14:00:39 2025 GMT Not After : Mar 4 14:00:39 2026 GMT Subject: CN=98221d3c-fae9-464a-9dad-77c125fd2368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9a:9c:4c:02:36:5a:a8:d5:5c:fc:f2:0b:af: 68:e2:8c:a0:1e:d9:3a:28:45:fe:15:f9:52:f8:4c: f9:6e:62:59:e5:ab:81:15:3b:be:30:d2:60:da:a4: c0:1c:74:36:82:e8:b6:ca:58:6e:e2:1c:03:5b:c7: d1:c3:2a:31:39:b4:21:61:1b:72:b6:60:ec:a2:5c: 50:be:64:d0:f6:bc:55:75:4c:51:88:ea:72:c8:72: b5:be:98:f2:c2:a6:5b:93:65:06:23:92:34:1f:e4: 2a:94:b7:b0:43:7f:5b:23:21:be:7a:32:9b:06:3b: 9d:69:57:e5:ef:92:be:2e:6b:f1:d1:78:a5:9a:0c: ee:30:7e:94:46:17:89:a6:61:a2:0a:ad:4d:a4:c5: 5a:87:0f:9b:d6:d8:42:99:46:31:0a:77:67:c9:72: be:ac:0e:2b:8c:24:ca:82:31:72:7e:4c:88:6f:95: fd:7f:e3:a4:89:a3:48:c9:46:16:d3:e0:98:48:09: 53:b2:7b:6c:7c:16:66:a3:ee:ba:cc:63:3b:21:08: 73:2a:0b:eb:87:1e:48:93:5b:7b:4b:e8:95:49:51: 37:f6:02:7d:b1:af:e8:cc:4e:c4:f5:db:a2:12:d2: 5e:bf:d1:af:42:73:16:fe:23:71:32:72:4f:3a:67: 6b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1A:8E:EE:A3:3B:B3:C9:C3:F4:0F:6E:24:93:EA:76:09:85:4F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ef6277c-a8f5-30ec-9f74-baf8d282f6da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:6d:b0:e1:41:e4:a0:6c:7f:43:35:bd:d2:fd:d6:39:63:00: bb:7d:9c:62:c9:6a:a0:e2:81:2b:01:94:73:b7:64:db:89:89: ab:d3:ee:e4:43:6f:78:86:ac:54:3e:21:ce:fc:4c:87:a7:fb: 4a:d9:58:42:e0:bd:e5:8a:b0:08:cc:a8:d0:4e:76:92:85:47: 68:e9:51:d7:39:31:41:74:a5:13:42:e3:ce:3a:b3:5f:6f:cd: 09:8f:b4:04:e0:21:ed:05:24:91:cf:61:2a:0e:37:33:b9:96: 18:78:9a:2a:d4:d8:c8:57:1a:95:a5:0b:86:61:ba:d9:a5:35: dd:d3:2e:d5:df:68:66:0a:2f:51:83:65:e4:b1:35:03:89:0c: 35:67:86:d7:5b:ac:0d:2b:a1:ce:2b:37:f4:be:b4:06:d5:65: fe:9f:31:31:0b:06:9c:e2:5e:d7:a1:ae:e0:c1:95:97:86:52: c3:85:f7:a4:51:e9:82:6f:b8:92:95:70:5d:a8:1a:14:5a:2a: 70:aa:24:e8:50:04:c8:9b:bd:cc:90:aa:15:bc:34:70:de:fc: 09:2e:7e:a8:0e:a9:7f:5d:ea:59:dc:5c:c9:b5:79:53:43:06: 03:55:f1:6e:b8:13:90:a4:56:c5:8c:7d:ca:9f:8e:ce:38:05: da:13:81:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwTZiZiL/EUlH2vjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwNDE0MDAzOVoXDTI2MDMwNDE0MDAzOVowLzEtMCsGA1UEAxMk OTgyMjFkM2MtZmFlOS00NjRhLTlkYWQtNzdjMTI1ZmQyMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpqcTAI2WqjVXPzyC69o4oygHtk6KEX+FflS +Ez5bmJZ5auBFTu+MNJg2qTAHHQ2gui2ylhu4hwDW8fRwyoxObQhYRtytmDsolxQ vmTQ9rxVdUxRiOpyyHK1vpjywqZbk2UGI5I0H+QqlLewQ39bIyG+ejKbBjudaVfl 75K+Lmvx0XilmgzuMH6URheJpmGiCq1NpMVahw+b1thCmUYxCndnyXK+rA4rjCTK gjFyfkyIb5X9f+OkiaNIyUYW0+CYSAlTsntsfBZmo+66zGM7IQhzKgvrhx5Ik1t7 S+iVSVE39gJ9sa/ozE7E9duiEtJev9GvQnMW/iNxMnJPOmdr8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkaju6jO7PJw/QPbiST6nYJhU+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2VmNjI3N2MtYThmNS0z MGVjLTlmNzQtYmFmOGQyODJmNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyBHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9tsOFB5KBsf0M1vdL91jljALt9nGLJaqDigSsBlHO3ZNuJiavT7uRD b3iGrFQ+Ic78TIen+0rZWELgveWKsAjMqNBOdpKFR2jpUdc5MUF0pRNC4846s19v zQmPtATgIe0FJJHPYSoONzO5lhh4mirU2MhXGpWlC4ZhutmlNd3TLtXfaGYKL1GD ZeSxNQOJDDVnhtdbrA0roc4rN/S+tAbVZf6fMTELBpziXtehruDBlZeGUsOF96RR 6YJvuJKVcF2oGhRaKnCqJOhQBMibvcyQqhW8NHDe/AkufqgOqX9d6lncXMm1eVND BgNV8W64E5CkVsWMfcqfjs44BdoTgew= -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:49 2025 by rpki-client