This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56dbd524-ee09-35f3-8f7d-a0dc8cd09377.roa File: 56dbd524-ee09-35f3-8f7d-a0dc8cd09377.roa (raw, json) Hash identifier: ZIzZ9SxilVBb5/MwEAJOx+X/Sb0Sfbh6xfgiGSBQsck= Subject key identifier: CA:48:AA:5F:77:D3:83:78:A6:A9:73:22:02:AC:B0:20:1F:54:01:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C0DD0DCA45D03DEE4EAEFC500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56dbd524-ee09-35f3-8f7d-a0dc8cd09377.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.60.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:dc:a4:5d:03:de:e4:ea:ef:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=565d2441-4eb9-4804-9fa7-c7057905ace5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d1:58:06:ae:74:0d:8c:64:90:ae:dc:07:65: 03:d2:85:44:23:1f:24:a8:d2:20:ae:1b:87:50:3d: 2a:a5:0b:d6:de:6f:d2:31:87:b4:e9:42:72:1b:b2: 30:da:7e:75:d1:51:c3:b3:51:e6:1c:15:0a:29:e1: 70:f9:a0:a7:6d:7a:22:d6:67:3b:af:06:cd:d5:0f: 0a:91:1f:06:cc:d0:b9:67:b8:31:d4:be:58:a5:59: c3:1b:7e:83:2a:07:1e:cc:e1:2e:5e:7b:38:0d:03: 31:ab:82:8e:c2:93:30:64:67:06:c5:1c:26:eb:42: c9:73:3a:57:bd:d5:88:e5:56:51:61:fe:1a:72:0a: 26:63:44:4d:ef:02:f5:aa:4d:f5:3b:97:34:af:ff: e5:a6:64:6f:36:d9:8c:3f:71:cb:15:a3:94:53:f2: a7:60:03:cd:d3:f5:b7:20:3d:28:ed:27:7d:b5:1b: c0:5a:31:af:a3:39:61:d0:e1:1a:23:78:01:3f:a3: fc:1a:1c:65:2b:92:c3:6c:c0:f1:f6:ef:d6:d6:3f: a3:2e:fb:ef:86:d1:ba:9e:48:70:0a:ff:7b:a8:74: d2:42:be:04:c3:c9:f5:ac:1a:c1:f0:fe:a6:84:d6: c6:93:c6:81:b5:8a:86:41:01:7b:0d:6a:36:02:c6: 54:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:48:AA:5F:77:D3:83:78:A6:A9:73:22:02:AC:B0:20:1F:54:01:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56dbd524-ee09-35f3-8f7d-a0dc8cd09377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c9:dd:c7:64:6d:89:69:85:41:a3:cc:89:3c:0d:a2:a5:fe: a1:3e:8d:0e:f2:e8:81:3d:85:14:53:e8:66:aa:67:55:bc:f4: e7:75:25:9c:6b:b8:bf:ea:50:a2:8f:93:c9:a7:86:48:37:c9: 48:f9:5d:f3:1b:ee:e7:4a:fa:cb:34:37:a6:a2:93:83:5a:b9: aa:3c:ad:3b:77:ea:c5:21:dc:58:3c:28:52:af:83:6c:83:05: 73:5c:9e:79:f9:c9:ad:9b:34:6a:bc:23:60:3e:cd:93:3f:cc: 7a:a1:7a:e8:00:51:2a:b1:be:1d:4c:fa:ea:28:37:e8:ed:6b: f5:0b:68:90:7d:39:20:f2:5e:37:69:25:45:7e:b9:68:a3:99: ee:9d:2c:c2:ba:16:d2:4f:45:e7:23:84:01:00:9b:b2:18:89: f7:72:f2:b1:72:30:50:f7:45:ab:b7:56:54:1b:27:8c:73:54: 55:cd:66:3b:2b:76:44:b8:cd:ad:bf:36:11:c7:4d:63:17:9b: 93:08:25:ef:5d:9e:da:27:14:80:c2:43:3e:d7:2d:76:e5:95: b5:9e:99:34:87:d5:74:a1:d5:15:d7:48:ba:e0:92:e9:61:c3: c3:6f:33:18:fc:a9:5d:a7:e2:2b:d3:c4:86:81:9e:e5:3f:5e: 71:fa:a4:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0NykXQPe5OrvxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk NTY1ZDI0NDEtNGViOS00ODA0LTlmYTctYzcwNTc5MDVhY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtFYBq50DYxkkK7cB2UD0oVEIx8kqNIgrhuH UD0qpQvW3m/SMYe06UJyG7Iw2n510VHDs1HmHBUKKeFw+aCnbXoi1mc7rwbN1Q8K kR8GzNC5Z7gx1L5YpVnDG36DKgcezOEuXns4DQMxq4KOwpMwZGcGxRwm60LJczpX vdWI5VZRYf4acgomY0RN7wL1qk31O5c0r//lpmRvNtmMP3HLFaOUU/KnYAPN0/W3 ID0o7Sd9tRvAWjGvozlh0OEaI3gBP6P8GhxlK5LDbMDx9u/W1j+jLvvvhtG6nkhw Cv97qHTSQr4Ew8n1rBrB8P6mhNbGk8aBtYqGQQF7DWo2AsZU8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpIql9304N4pqlzIgKssCAfVAEGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTZkYmQ1MjQtZWUwOS0z NWYzLThmN2QtYTBkYzhjZDA5Mzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzyeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATJ3cdkbYlphUGjzIk8DaKl/qE+jQ7y6IE9hRRT6GaqZ1W89Od1JZxr uL/qUKKPk8mnhkg3yUj5XfMb7udK+ss0N6aik4Nauao8rTt36sUh3Fg8KFKvg2yD BXNcnnn5ya2bNGq8I2A+zZM/zHqheugAUSqxvh1M+uooN+jta/ULaJB9OSDyXjdp JUV+uWijme6dLMK6FtJPRecjhAEAm7IYifdy8rFyMFD3Rau3VlQbJ4xzVFXNZjsr dkS4za2/NhHHTWMXm5MIJe9dntonFIDCQz7XLXbllbWemTSH1XSh1RXXSLrgkulh w8NvMxj8qV2n4ivTxIaBnuU/XnH6pKo= -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:02 2025 by rpki-client