This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60904298-0dba-3a79-a730-790a142b5530.roa File: 60904298-0dba-3a79-a730-790a142b5530.roa (raw, json) Hash identifier: tZzZ36bGEiRFGx5hHlADtSRfIj1tjkv3UiE00hjPC60= Subject key identifier: 3B:19:C5:38:A5:D3:47:53:A9:C0:63:C3:FE:50:E2:83:F1:05:26:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BEF1B405C1FF9DE675965DD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60904298-0dba-3a79-a730-790a142b5530.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 16625 IP address blocks: 23.35.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:40:5c:1f:f9:de:67:59:65:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=b5bb7afa-b075-450d-a230-9896229f2805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f6:9c:24:10:6c:ac:ca:83:42:bc:91:26:0e: 8a:06:42:b3:da:d9:e0:79:58:71:13:71:d4:ea:96: 35:af:fd:44:62:af:37:e5:55:58:da:4e:43:17:ea: 6a:8c:a9:bf:b6:be:ee:d7:b7:a7:b8:cc:e0:c0:eb: 88:0e:ea:a8:30:11:02:f7:f4:7f:ff:c3:00:c9:1d: 31:df:33:89:ca:e0:d2:13:b2:e3:02:1f:39:04:5e: de:ae:64:6e:9e:70:06:2d:9b:4e:62:3c:70:44:90: fd:ea:fd:bc:6e:08:91:b6:31:1b:30:e2:57:42:74: 16:2f:3e:96:f2:81:96:ad:c2:eb:44:4c:9f:f1:6b: af:06:20:d7:b3:71:94:81:a0:e4:c4:bd:45:4a:7f: a0:60:8f:d3:c0:bb:ed:d8:2b:2e:a4:09:85:58:ed: 9f:29:73:46:2e:de:f9:be:fa:a8:54:b9:bd:f9:1e: f9:a0:87:75:8f:e5:28:25:d4:db:25:d3:6f:e4:31: 17:28:ba:f4:55:aa:f1:93:92:b9:ca:cf:d7:ca:e2: b3:72:78:a1:6b:5f:42:9b:ce:2a:4d:62:1e:42:4b: ed:b2:f9:63:72:7e:bd:09:e0:d3:d3:17:8f:47:8b: 28:9b:68:4f:fe:78:d9:a7:82:45:61:ae:49:59:84: c8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:19:C5:38:A5:D3:47:53:A9:C0:63:C3:FE:50:E2:83:F1:05:26:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60904298-0dba-3a79-a730-790a142b5530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:95:85:37:a1:6f:2f:7f:97:2a:04:4e:ac:2d:8c:99:28:8c: 47:d1:89:a0:53:42:c1:4c:9c:07:c6:f4:2b:3d:9c:46:f8:d5: 3b:a2:6e:1b:ae:54:07:b3:b2:49:62:06:28:12:f2:9b:b1:ab: de:e1:84:42:57:2a:a8:1d:9b:57:9c:68:01:8d:33:6f:46:fa: 9e:90:ad:46:23:cd:a1:0e:d2:c3:60:be:1d:58:71:34:23:6f: eb:33:e0:31:c0:ed:21:db:20:91:a7:51:ab:3d:f0:3f:6a:b7: aa:d5:9b:0b:c5:20:7d:65:81:02:2c:97:14:0b:99:cd:22:59: 42:73:6c:88:51:0a:9d:10:2d:7e:eb:07:41:31:4e:6c:f7:3f: 94:75:0a:26:2b:83:ed:6f:50:30:fd:cf:ba:8e:69:21:1e:c1: 5b:df:32:af:79:b9:af:bd:ae:7a:ed:8f:4d:b9:05:6f:e0:28: 09:8c:82:dd:ca:00:77:36:99:97:c7:b5:86:c9:2f:59:7a:5f: e1:62:c4:bd:1f:64:93:72:37:b7:b7:c4:c8:81:80:09:74:5e: 99:69:88:74:0c:e4:e1:df:7d:fe:75:33:d2:6b:8d:9b:5f:0f: 2a:33:25:fa:43:e8:fa:1d:a0:56:0d:17:d1:4d:90:98:72:7a: 24:e4:3c:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvG0BcH/neZ1ll3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk YjViYjdhZmEtYjA3NS00NTBkLWEyMzAtOTg5NjIyOWYyODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvacJBBsrMqDQryRJg6KBkKz2tngeVhxE3HU 6pY1r/1EYq835VVY2k5DF+pqjKm/tr7u17enuMzgwOuIDuqoMBEC9/R//8MAyR0x 3zOJyuDSE7LjAh85BF7ermRunnAGLZtOYjxwRJD96v28bgiRtjEbMOJXQnQWLz6W 8oGWrcLrREyf8WuvBiDXs3GUgaDkxL1FSn+gYI/TwLvt2CsupAmFWO2fKXNGLt75 vvqoVLm9+R75oId1j+UoJdTbJdNv5DEXKLr0Varxk5K5ys/XyuKzcniha19Cm84q TWIeQkvtsvljcn69CeDT0xePR4som2hP/njZp4JFYa5JWYTIbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsZxTil00dTqcBjw/5Q4oPxBSa2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjA5MDQyOTgtMGRiYS0z YTc5LWE3MzAtNzkwYTE0MmI1NTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmVhTehby9/lyoETqwtjJkojEfRiaBTQsFMnAfG9Cs9nEb41Tuibhuu VAezskliBigS8puxq97hhEJXKqgdm1ecaAGNM29G+p6QrUYjzaEO0sNgvh1YcTQj b+sz4DHA7SHbIJGnUas98D9qt6rVmwvFIH1lgQIslxQLmc0iWUJzbIhRCp0QLX7r B0ExTmz3P5R1CiYrg+1vUDD9z7qOaSEewVvfMq95ua+9rnrtj025BW/gKAmMgt3K AHc2mZfHtYbJL1l6X+FixL0fZJNyN7e3xMiBgAl0XplpiHQM5OHfff51M9JrjZtf DyozJfpD6PodoFYNF9FNkJhyeiTkPEw= -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:03 2025 by rpki-client