This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d33ff60-315e-3c7a-9698-7690422dad3c.roa File: 7d33ff60-315e-3c7a-9698-7690422dad3c.roa (raw, json) Hash identifier: yPE0BoIr6J4yFC1jRvoZZvKfF07riFlHSUb/wp6zgOw= Subject key identifier: 02:F8:C3:B0:9D:4E:84:B0:F4:A7:CE:D1:9D:0D:5A:80:06:DD:F4:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BCAD061AF2698AE8860B09060 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d33ff60-315e-3c7a-9698-7690422dad3c.roa Signing time: Sat 08 Nov 2025 14:00:39 +0000 ROA not before: Sat 08 Nov 2025 14:00:39 +0000 ROA not after: Fri 06 Feb 2026 14:00:39 +0000 asID: 16625 IP address blocks: 23.221.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ca:d0:61:af:26:98:ae:88:60:b0:90:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 8 14:00:39 2025 GMT Not After : Feb 6 14:00:39 2026 GMT Subject: CN=16b223cf-d4f6-4255-ab44-f0585d7b8514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:84:2a:18:61:fc:ba:90:32:80:c1:63:86: 51:d7:7e:47:41:a2:68:48:c7:1c:fb:1d:86:de:56: de:a3:0f:78:7c:f7:d4:0c:5b:aa:ab:df:dd:68:d1: 8b:a2:22:c1:af:21:51:4d:b7:58:b0:d8:64:76:39: fc:d6:82:6f:b8:7d:4a:6d:ec:aa:26:e9:c6:76:73: 58:06:51:8d:ed:06:c5:da:90:31:24:83:70:94:c4: 4b:c9:ae:57:d2:cd:01:8b:ca:88:a1:02:9a:16:9f: 33:5a:47:2b:6e:78:3a:4a:c7:1f:38:ec:03:83:bb: 8a:c7:21:47:42:db:a8:f7:e8:32:ba:5a:fb:08:2b: 21:e9:58:10:31:ec:b7:66:de:5d:8c:b8:10:68:98: 23:4a:f4:5b:9e:30:5c:d5:43:91:13:94:32:14:bf: d0:f6:08:72:23:68:63:8d:ca:08:ab:df:3b:cf:9f: 95:43:92:16:75:c3:f7:30:5e:c6:71:d5:04:88:e8: 1b:08:a4:cc:3a:82:25:9b:64:96:5a:44:a4:10:b0: de:70:86:0c:dd:c6:85:a9:51:17:8b:f6:13:24:5a: 75:0f:0a:1a:d8:0b:77:09:7a:fa:de:e7:61:2c:e8: e7:ea:c4:9d:25:a2:34:77:d1:4e:bb:78:8b:fa:97: 0a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F8:C3:B0:9D:4E:84:B0:F4:A7:CE:D1:9D:0D:5A:80:06:DD:F4:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d33ff60-315e-3c7a-9698-7690422dad3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e2:91:27:fb:d8:b1:f4:f2:e5:5d:23:c0:8f:de:89:c6:bc: 4f:79:f4:73:8e:3c:f9:3f:c8:0d:4f:b1:ee:c0:41:e2:f9:60: 25:74:1a:21:8e:99:54:73:82:ee:0f:59:70:b8:17:20:66:82: 31:5a:73:8a:b6:4b:87:76:26:44:0f:e5:9a:86:72:e2:e9:94: 73:ab:c4:b1:20:26:d6:b4:c1:04:37:2a:57:81:56:9e:5d:2b: a0:74:64:1f:43:da:19:70:e5:30:54:56:61:a6:dc:bf:84:9d: f6:db:7c:a0:42:02:ac:b1:3a:4c:08:ea:fb:4f:07:d9:36:9c: 5e:ea:15:6f:a7:04:1e:56:b5:95:b4:41:ed:0f:9d:ab:3b:0b: 38:9d:29:32:95:df:af:fe:7a:41:ed:37:b2:45:e8:8e:1f:62: 70:8a:79:2c:d8:6e:14:9f:e3:86:b6:04:cc:fd:64:f2:2b:8c: 5d:d5:25:84:29:8c:1d:18:39:f2:c2:43:c5:4f:51:3d:2e:91: f6:19:17:5c:09:d5:75:9b:43:a2:d1:36:5a:00:c3:77:05:d5: 2a:81:55:cc:03:9e:ed:e3:c1:d7:80:1f:65:4e:d0:17:e0:88: 41:c5:b9:59:d0:79:d3:71:3f:3b:d2:89:80:12:7b:fe:f3:57: 2e:73:61:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvK0GGvJpiuiGCwkGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwODE0MDAzOVoXDTI2MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk MTZiMjIzY2YtZDRmNi00MjU1LWFiNDQtZjA1ODVkN2I4NTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgKEKhhh/LqQMoDBY4ZR135HQaJoSMcc+x2G 3lbeow94fPfUDFuqq9/daNGLoiLBryFRTbdYsNhkdjn81oJvuH1KbeyqJunGdnNY BlGN7QbF2pAxJINwlMRLya5X0s0Bi8qIoQKaFp8zWkcrbng6SscfOOwDg7uKxyFH Qtuo9+gyulr7CCsh6VgQMey3Zt5djLgQaJgjSvRbnjBc1UORE5QyFL/Q9ghyI2hj jcoIq987z5+VQ5IWdcP3MF7GcdUEiOgbCKTMOoIlm2SWWkSkELDecIYM3caFqVEX i/YTJFp1Dwoa2At3CXr63udhLOjn6sSdJaI0d9FOu3iL+pcKGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAL4w7CdToSw9KfO0Z0NWoAG3fRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2QzM2ZmNjAtMzE1ZS0z YzdhLTk2OTgtNzY5MDQyMmRhZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF92EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnikSf72LH08uVdI8CP3onGvE959HOOPPk/yA1Pse7AQeL5YCV0GiGO mVRzgu4PWXC4FyBmgjFac4q2S4d2JkQP5ZqGcuLplHOrxLEgJta0wQQ3KleBVp5d K6B0ZB9D2hlw5TBUVmGm3L+EnfbbfKBCAqyxOkwI6vtPB9k2nF7qFW+nBB5WtZW0 Qe0Pnas7CzidKTKV36/+ekHtN7JF6I4fYnCKeSzYbhSf44a2BMz9ZPIrjF3VJYQp jB0YOfLCQ8VPUT0ukfYZF1wJ1XWbQ6LRNloAw3cF1SqBVcwDnu3jwdeAH2VO0Bfg iEHFuVnQedNxPzvSiYASe/7zVy5zYT8= -----END CERTIFICATE-----Generated at Sat Dec 6 10:19:38 2025 by rpki-client