This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42f72047-3538-37a5-96d5-758f45ada1a1.roa File: 42f72047-3538-37a5-96d5-758f45ada1a1.roa (raw, json) Hash identifier: S2CeASDsT8zIzT09i8GHVzM+uHU8/iJOn9uE9miWZBM= Subject key identifier: E2:5A:67:A6:4E:7F:AE:D2:E4:D5:8E:6D:43:A8:21:B7:BA:98:35:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BEF1B3C8B45E15B22F335B200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42f72047-3538-37a5-96d5-758f45ada1a1.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 20940 IP address blocks: 23.33.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:3c:8b:45:e1:5b:22:f3:35:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=aa53b93d-a6f4-4395-b571-48cc2cad7b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:63:da:03:19:fc:9c:0b:09:41:2f:63:6a:e9: 03:8b:22:5e:44:f8:81:0f:2c:3d:3b:f4:ea:3f:4c: cf:90:18:b2:10:ff:8d:d5:4d:95:19:f7:ba:f7:f2: 4d:36:f7:25:cc:cd:43:c7:14:61:d5:43:79:84:41: 55:1e:36:df:6f:a9:be:71:5c:e5:25:99:e9:cd:8f: b3:1b:87:a4:44:93:f8:45:94:be:ab:10:9f:a4:c5: 8b:aa:b2:8b:20:54:d8:f0:e0:ee:af:93:34:a0:12: 52:e6:03:af:0e:1c:fc:e9:ca:d3:2c:bb:64:39:b8: 76:1d:23:78:fb:01:e5:0c:30:01:b6:25:3e:ab:05: cd:11:68:7f:ff:56:6b:2e:41:45:87:f3:bf:ad:0c: e7:0e:2f:fb:09:ab:cc:a5:e7:7d:ae:c2:c3:c9:c0: 4e:c7:9d:09:ba:bf:0d:59:10:61:28:29:54:e1:f8: e8:f5:34:01:cb:b5:af:f5:1b:a6:9c:c5:71:b0:3b: 4d:e4:ff:f3:40:8f:51:18:1a:f8:c8:35:65:ba:7c: 72:84:e9:80:7f:a5:41:ac:c1:ec:b3:8a:db:cb:8a: 6d:69:93:b6:af:de:e2:0c:a9:63:46:fb:4e:6e:74: a4:98:c7:d3:ec:97:55:b9:ba:c6:c4:3d:94:2b:65: 20:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5A:67:A6:4E:7F:AE:D2:E4:D5:8E:6D:43:A8:21:B7:BA:98:35:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42f72047-3538-37a5-96d5-758f45ada1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c7:f1:1a:11:8c:39:0d:5f:65:e1:17:73:cf:38:66:c3:52: e2:8f:09:1f:32:95:b2:14:dd:5e:09:f0:67:1a:af:be:eb:c8: fa:e6:88:ac:9a:a8:c9:06:c1:02:ed:ec:42:3e:c8:31:b0:44: c2:ec:16:54:97:d4:b3:ef:c4:92:bb:1c:e8:d2:a2:24:b2:cf: 32:60:68:5b:26:2c:32:76:87:e1:93:7f:15:40:92:b1:40:ca: 14:80:e6:c2:21:8e:55:1c:67:bf:d5:6b:43:a8:b2:83:ce:50: fb:45:cd:19:1e:36:c8:e2:c1:81:d1:08:a1:7d:2a:b8:5e:36: 14:e9:c1:22:75:63:8c:6d:17:a3:6a:ad:b0:0c:bd:b3:99:15: c0:9f:01:47:75:77:d9:c9:07:44:81:dd:d8:d5:4d:49:de:c5: 75:8f:4b:66:00:e8:ae:67:58:fb:90:2f:93:be:f2:f2:bb:76: b7:77:1e:c7:81:10:3b:bd:a3:e5:e3:1e:af:b1:b7:73:b5:b8: 4b:73:3b:b3:7e:28:aa:76:58:80:92:46:14:9c:96:3d:89:13: 64:53:7c:3f:ef:9a:be:5b:ec:e9:a4:7c:34:c8:23:01:ed:e8: eb:e5:09:56:29:19:d7:36:79:d5:10:93:8b:8c:0f:5a:a9:5e: c8:46:00:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvGzyLReFbIvM1sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk YWE1M2I5M2QtYTZmNC00Mzk1LWI1NzEtNDhjYzJjYWQ3YjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WPaAxn8nAsJQS9jaukDiyJeRPiBDyw9O/Tq P0zPkBiyEP+N1U2VGfe69/JNNvclzM1DxxRh1UN5hEFVHjbfb6m+cVzlJZnpzY+z G4ekRJP4RZS+qxCfpMWLqrKLIFTY8ODur5M0oBJS5gOvDhz86crTLLtkObh2HSN4 +wHlDDABtiU+qwXNEWh//1ZrLkFFh/O/rQznDi/7CavMped9rsLDycBOx50Jur8N WRBhKClU4fjo9TQBy7Wv9RumnMVxsDtN5P/zQI9RGBr4yDVlunxyhOmAf6VBrMHs s4rby4ptaZO2r97iDKljRvtObnSkmMfT7JdVubrGxD2UK2UgWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJaZ6ZOf67S5NWObUOoIbe6mDUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDJmNzIwNDctMzUzOC0z N2E1LTk2ZDUtNzU4ZjQ1YWRhMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjH8RoRjDkNX2XhF3PPOGbDUuKPCR8ylbIU3V4J8Gcar77ryPrmiKya qMkGwQLt7EI+yDGwRMLsFlSX1LPvxJK7HOjSoiSyzzJgaFsmLDJ2h+GTfxVAkrFA yhSA5sIhjlUcZ7/Va0OosoPOUPtFzRkeNsjiwYHRCKF9KrheNhTpwSJ1Y4xtF6Nq rbAMvbOZFcCfAUd1d9nJB0SB3djVTUnexXWPS2YA6K5nWPuQL5O+8vK7drd3HseB EDu9o+XjHq+xt3O1uEtzO7N+KKp2WICSRhSclj2JE2RTfD/vmr5b7OmkfDTIIwHt 6OvlCVYpGdc2edUQk4uMD1qpXshGAF8= -----END CERTIFICATE-----Generated at Tue Dec 9 08:54:01 2025 by rpki-client