This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59d7baf7-9176-3963-8316-9206e458e448.roa File: 59d7baf7-9176-3963-8316-9206e458e448.roa (raw, json) Hash identifier: Qu7+OQjgDPfP3VHNUy6XRFH/zugL3WV2sonsZX2xly8= Subject key identifier: 62:07:8E:35:1C:D9:07:80:06:7D:F2:E5:E9:92:A9:62:B9:BE:52:4A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3BE126B27CA14C72185EDD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59d7baf7-9176-3963-8316-9206e458e448.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.213.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:26:b2:7c:a1:4c:72:18:5e:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=3d74ba35-5beb-4332-acf0-62c0e3c75b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:84:cf:b9:51:e4:c9:ff:57:36:6f:d2:12: 4a:2d:2d:32:70:09:88:16:bd:00:9e:76:d0:45:d8: f8:89:6f:25:69:ff:7f:ee:cd:bb:ab:82:5f:65:ab: 25:e6:b9:5a:72:80:ac:18:93:8b:18:e1:e5:9f:5f: 27:9b:e1:ea:5a:80:2e:43:fc:23:48:21:8e:01:9e: 40:92:a3:fd:1c:f5:f5:d5:70:86:41:a7:05:74:bf: fd:23:46:17:4e:4e:60:8f:fd:9d:2c:36:81:9c:03: ef:1f:e3:fa:fe:7b:b9:1b:8a:f9:47:f3:f3:f4:cb: 54:91:3f:8c:6f:83:04:04:da:d7:c0:96:9f:f4:f0: 0a:af:de:79:91:ff:f5:4d:68:27:95:e6:f3:6c:cc: 32:69:fd:f4:70:8b:55:a6:fb:14:43:4f:37:8f:3c: 1e:f4:7a:86:72:de:82:62:11:70:c9:ef:41:b2:e6: 32:3a:ab:8f:77:9d:00:85:41:b5:ce:64:01:69:59: 63:ff:c5:1a:b7:7b:c1:af:c7:99:fb:14:ea:52:b6: fd:53:93:5b:dc:f1:08:7c:ce:02:a4:56:5c:b7:72: 21:45:9d:78:cb:ff:5d:04:75:57:5b:05:75:7c:c2: 0d:20:6b:26:83:80:92:cd:6d:60:70:55:8f:6c:fe: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:07:8E:35:1C:D9:07:80:06:7D:F2:E5:E9:92:A9:62:B9:BE:52:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59d7baf7-9176-3963-8316-9206e458e448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1e:0c:25:23:ea:71:f7:59:e6:3d:77:a8:f1:84:31:1e:aa: f4:c1:a1:b0:02:81:57:8e:6f:18:50:bf:88:1e:b3:b9:84:bb: a2:16:99:bd:4d:1f:1b:d6:08:07:53:c9:89:4b:42:84:b1:fb: a3:c9:b9:ce:08:d0:04:d4:f1:89:3f:2b:76:09:aa:48:7c:c9: 23:73:96:a6:95:79:d2:17:47:91:85:d3:83:df:30:7c:b1:cc: 15:8f:60:12:08:c7:10:07:e4:bb:35:24:a0:d6:3f:a3:6d:8e: f2:92:69:41:72:a8:a4:18:f3:bf:05:f6:d1:40:a5:e0:76:d1: 87:e7:2b:6b:a0:69:36:7c:22:9d:b9:71:1a:ca:35:19:f6:b0: 2d:20:b8:ec:76:8c:6b:8b:04:ef:91:14:20:bc:e1:3e:de:c8: 32:a1:94:d1:40:e3:7c:a8:1a:3d:cf:2c:90:ed:32:dd:da:82: 02:31:c3:18:6b:27:7f:72:e6:2a:2c:62:d7:13:cc:03:ba:3d: 11:c8:24:4e:4e:89:94:b6:c2:a4:33:b9:60:bc:e2:bb:69:4b: 7b:49:ae:65:c2:c4:1c:18:c4:a0:7d:94:87:26:1f:a1:b3:12: 49:02:53:c4:33:2e:4f:19:d7:0c:e5:5d:e6:a2:ea:d2:f6:b7: a6:f8:2a:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74SayfKFMchhe3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk M2Q3NGJhMzUtNWJlYi00MzMyLWFjZjAtNjJjMGUzYzc1YjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrSEz7lR5Mn/VzZv0hJKLS0ycAmIFr0AnnbQ Rdj4iW8laf9/7s27q4JfZasl5rlacoCsGJOLGOHln18nm+HqWoAuQ/wjSCGOAZ5A kqP9HPX11XCGQacFdL/9I0YXTk5gj/2dLDaBnAPvH+P6/nu5G4r5R/Pz9MtUkT+M b4MEBNrXwJaf9PAKr955kf/1TWgnlebzbMwyaf30cItVpvsUQ083jzwe9HqGct6C YhFwye9BsuYyOquPd50AhUG1zmQBaVlj/8Uat3vBr8eZ+xTqUrb9U5Nb3PEIfM4C pFZct3IhRZ14y/9dBHVXWwV1fMINIGsmg4CSzW1gcFWPbP7DawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIHjjUc2QeABn3y5emSqWK5vlJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTlkN2JhZjctOTE3Ni0z OTYzLTgzMTYtOTIwNmU0NThlNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFseDCUj6nH3WeY9d6jxhDEeqvTBobACgVeObxhQv4ges7mEu6IWmb1N HxvWCAdTyYlLQoSx+6PJuc4I0ATU8Yk/K3YJqkh8ySNzlqaVedIXR5GF04PfMHyx zBWPYBIIxxAH5Ls1JKDWP6NtjvKSaUFyqKQY878F9tFApeB20YfnK2ugaTZ8Ip25 cRrKNRn2sC0guOx2jGuLBO+RFCC84T7eyDKhlNFA43yoGj3PLJDtMt3aggIxwxhr J39y5iosYtcTzAO6PRHIJE5OiZS2wqQzuWC84rtpS3tJrmXCxBwYxKB9lIcmH6Gz EkkCU8QzLk8Z1wzlXeai6tL2t6b4Ko8= -----END CERTIFICATE-----Generated at Fri Dec 19 13:35:02 2025 by rpki-client