This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f59f28a-b976-3a47-be82-92735952419c.roa File: 7f59f28a-b976-3a47-be82-92735952419c.roa (raw, json) Hash identifier: b9QrQawEPFPtfbtJrg87olO4BcJqL/4e65AG8oHBn5Y= Subject key identifier: 04:04:7C:36:70:A1:C2:10:0F:E0:75:9B:49:1C:10:E8:86:FA:C7:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C1630DBBD9717059958358D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f59f28a-b976-3a47-be82-92735952419c.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 4788 IP address blocks: 23.220.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:db:bd:97:17:05:99:58:35:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=89ed0a7f-297e-4843-9aca-aaae3e1147ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5f:a9:33:6f:76:4a:4e:c5:f5:d3:61:e4:da: 79:7b:ac:25:f0:c1:e2:51:1a:97:4a:b1:3a:c3:e5: 05:19:63:7c:5b:d4:14:92:19:ba:33:99:44:c8:6b: 02:47:d9:ca:2f:98:ef:cb:7f:b9:3a:d6:c8:72:d5: 79:e2:97:c0:4b:3d:43:78:e2:4b:a4:d9:fd:f9:63: 0c:53:52:22:c2:f2:d0:bf:2c:e2:a5:80:1d:c2:da: 70:12:33:a3:c6:b7:45:b9:9e:87:d6:e1:f3:ad:c6: 07:47:20:54:55:53:f6:d7:21:cf:6b:84:57:94:ad: cd:ab:9a:3a:3b:e7:52:2e:12:6f:37:62:af:fe:6e: a4:d2:34:ff:ef:28:d2:78:7b:1c:38:5e:eb:5d:10: 53:c7:ae:ab:87:85:be:fa:c3:67:92:7b:6f:cf:e4: fd:61:91:d3:7c:46:81:98:e3:34:b3:d9:78:f4:a1: 94:7f:46:44:ac:8a:9b:7b:2f:d1:45:3f:3c:2f:0a: 83:cd:f1:3c:06:d9:d5:10:67:a9:54:28:46:52:68: 8b:04:e5:7d:ec:82:63:e8:80:df:e2:4d:77:72:d1: 97:db:a0:aa:38:48:ab:c3:0d:9f:0f:cf:02:85:85: 9d:9e:ec:93:53:be:1e:99:f1:77:e5:66:3d:63:a2: ea:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:04:7C:36:70:A1:C2:10:0F:E0:75:9B:49:1C:10:E8:86:FA:C7:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f59f28a-b976-3a47-be82-92735952419c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c1:8f:fb:0f:7a:1c:7a:45:da:37:81:7b:da:5c:fd:4d:89: 51:80:35:8d:ea:d9:55:2e:62:ed:9f:2b:25:96:96:b5:8a:d0: 7a:93:ff:b8:06:a9:b0:77:86:87:02:54:d7:0a:6c:48:f4:ce: 23:04:f9:44:56:c7:75:33:26:25:d0:d4:8f:b5:c0:72:18:0b: 95:85:25:39:ea:a7:d3:2a:cf:0c:b8:94:f1:88:32:ba:47:8e: dd:a5:e2:83:fd:76:12:c8:ee:3b:09:c2:8a:d0:f6:10:d9:f7: 42:5f:d3:95:32:76:78:0a:68:b8:f8:4d:04:5a:18:45:d3:60: 26:ca:f1:bb:01:9d:ac:28:7a:ce:d6:44:e8:91:9e:8e:7b:b1: b8:d4:36:3b:b5:f1:eb:8c:82:aa:80:56:1d:a5:98:8c:87:01: 70:ea:ad:26:c2:15:81:bf:f8:78:0a:11:ff:8f:c1:84:a1:c8: 70:6c:ac:90:9d:71:43:f4:a8:c9:bc:0a:38:91:fa:bc:56:c5: 35:0a:ed:87:19:34:43:0c:a3:5b:7a:31:2b:43:b1:45:4c:b5: 77:0a:fe:aa:07:2c:93:b1:fb:54:e7:d7:a9:a3:fb:79:e6:96: 60:85:9c:70:a6:39:a2:94:c5:fa:4f:f8:80:5e:84:52:a2:67: c4:33:49:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMNu9lxcFmVg1jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk ODllZDBhN2YtMjk3ZS00ODQzLTlhY2EtYWFhZTNlMTE0N2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll+pM292Sk7F9dNh5Np5e6wl8MHiURqXSrE6 w+UFGWN8W9QUkhm6M5lEyGsCR9nKL5jvy3+5OtbIctV54pfASz1DeOJLpNn9+WMM U1IiwvLQvyzipYAdwtpwEjOjxrdFuZ6H1uHzrcYHRyBUVVP21yHPa4RXlK3Nq5o6 O+dSLhJvN2Kv/m6k0jT/7yjSeHscOF7rXRBTx66rh4W++sNnkntvz+T9YZHTfEaB mOM0s9l49KGUf0ZErIqbey/RRT88LwqDzfE8BtnVEGepVChGUmiLBOV97IJj6IDf 4k13ctGX26CqOEirww2fD88ChYWdnuyTU74emfF35WY9Y6LqwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQEfDZwocIQD+B1m0kcEOiG+sf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2Y1OWYyOGEtYjk3Ni0z YTQ3LWJlODItOTI3MzU5NTI0MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjBj/sPehx6Rdo3gXvaXP1NiVGANY3q2VUuYu2fKyWWlrWK0HqT/7gG qbB3hocCVNcKbEj0ziME+URWx3UzJiXQ1I+1wHIYC5WFJTnqp9Mqzwy4lPGIMrpH jt2l4oP9dhLI7jsJworQ9hDZ90Jf05UydngKaLj4TQRaGEXTYCbK8bsBnawoes7W ROiRno57sbjUNju18euMgqqAVh2lmIyHAXDqrSbCFYG/+HgKEf+PwYShyHBsrJCd cUP0qMm8CjiR+rxWxTUK7YcZNEMMo1t6MStDsUVMtXcK/qoHLJOx+1Tn16mj+3nm lmCFnHCmOaKUxfpP+IBehFKiZ8QzSVc= -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:29 2025 by rpki-client