This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811df8d9-830b-37d6-bc85-2b6ea1514864.roa File: 811df8d9-830b-37d6-bc85-2b6ea1514864.roa (raw, json) Hash identifier: Nf2sn5G9h94m81u9T5RNx+D79Y8RmHZxRv661N2c7BQ= Subject key identifier: 28:A0:7C:3C:1B:3E:AF:92:1E:18:85:34:2C:EE:55:68:00:64:93:FE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BFFDBBFF4BA93D2621C5EDB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811df8d9-830b-37d6-bc85-2b6ea1514864.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.48.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:bf:f4:ba:93:d2:62:1c:5e:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=2c7b4fe7-155d-47c9-b1f1-7e9495c72530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ad:d3:92:39:7c:b0:c2:a1:b3:f9:e4:b0:c3: bd:40:fa:12:1c:97:7b:f0:c5:c2:02:58:8c:4b:c1: c8:da:29:07:69:7b:28:8c:ec:b0:5f:21:40:9a:58: d5:3b:c1:21:ea:c3:16:74:23:26:1b:3c:b6:bb:0a: 46:ff:72:32:a4:8f:82:95:10:37:a8:14:64:6a:2a: f6:a9:e1:9a:fe:a7:a5:c5:de:9d:36:0e:c0:1b:de: 16:4d:0e:76:16:c0:f0:07:27:36:6c:7a:d1:3a:94: 6f:2d:29:1c:9c:21:99:bf:1c:2d:30:c8:cd:06:43: eb:20:8b:4d:67:9a:fd:47:3a:56:58:26:58:a6:cd: a6:cd:a4:55:70:f0:d6:0a:77:20:76:4c:7e:44:13: 9a:c1:2f:6e:c2:6b:5e:6e:85:ae:00:f0:9a:34:09: 19:d7:10:68:38:32:67:22:e3:8e:8e:4e:77:8c:70: 8f:25:cc:61:23:f7:62:25:a0:c6:07:ea:4a:61:df: 82:2c:1c:60:48:5c:40:1c:f3:30:fa:6d:6a:fb:a5: e8:49:4c:9a:a3:6c:2e:3a:e9:f4:a3:c6:b9:a8:50: 2c:0a:80:09:1e:b8:02:aa:da:8a:d4:e7:84:9b:25: 36:d2:54:1b:c2:ff:29:df:ac:98:d7:54:97:09:60: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A0:7C:3C:1B:3E:AF:92:1E:18:85:34:2C:EE:55:68:00:64:93:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811df8d9-830b-37d6-bc85-2b6ea1514864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:73:cc:af:df:ea:38:24:09:7f:e6:d2:03:90:ea:6b:fc:1a: b9:4a:04:f9:61:12:47:08:78:95:e7:74:d1:cf:ee:e0:67:49: 3a:55:52:77:28:c1:0a:06:01:12:a4:73:4d:ae:8c:83:a2:1a: 82:99:38:bd:52:1a:a2:5f:97:46:19:a6:6c:21:f9:cb:4f:cd: 9a:36:0d:ed:50:a4:12:01:dc:d5:90:c3:d9:80:5a:44:ac:27: 9b:fd:ac:7c:63:62:78:9c:8b:ec:9b:d2:8e:f3:3c:2c:d0:fb: c6:f3:40:23:08:b8:31:6f:05:56:84:38:bb:a1:7e:28:70:00: 81:41:52:85:ed:c3:31:74:f4:4d:a4:4e:1b:00:f5:69:1f:4d: 94:df:f4:0c:1c:09:1a:3b:10:bd:99:10:92:ba:55:f2:ec:b4: 39:3a:a2:d5:fc:8d:00:a1:e0:3f:c4:11:fe:2e:7b:03:74:15: 82:41:ad:c7:00:d8:db:1c:be:a4:6d:55:2d:e4:e1:54:e4:e7: e2:b9:0a:1c:32:1f:91:1a:cc:d8:b4:f3:ef:05:52:76:e7:b2: 9a:46:a7:9d:03:b2:84:88:a8:d9:40:c9:34:1e:91:fe:22:34: f3:29:19:4a:c0:1d:4d:aa:ed:bf:e2:ed:e5:35:1e:4d:2f:3a: 60:84:9e:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/27/0upPSYhxe2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MmM3YjRmZTctMTU1ZC00N2M5LWIxZjEtN2U5NDk1YzcyNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a3Tkjl8sMKhs/nksMO9QPoSHJd78MXCAliM S8HI2ikHaXsojOywXyFAmljVO8Eh6sMWdCMmGzy2uwpG/3IypI+ClRA3qBRkair2 qeGa/qelxd6dNg7AG94WTQ52FsDwByc2bHrROpRvLSkcnCGZvxwtMMjNBkPrIItN Z5r9RzpWWCZYps2mzaRVcPDWCncgdkx+RBOawS9uwmteboWuAPCaNAkZ1xBoODJn IuOOjk53jHCPJcxhI/diJaDGB+pKYd+CLBxgSFxAHPMw+m1q+6XoSUyao2wuOun0 o8a5qFAsCoAJHrgCqtqK1OeEmyU20lQbwv8p36yY11SXCWCXvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCigfDwbPq+SHhiFNCzuVWgAZJP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODExZGY4ZDktODMwYi0z N2Q2LWJjODUtMmI2ZWExNTE0ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFzzK/f6jgkCX/m0gOQ6mv8GrlKBPlhEkcIeJXndNHP7uBnSTpVUnco wQoGARKkc02ujIOiGoKZOL1SGqJfl0YZpmwh+ctPzZo2De1QpBIB3NWQw9mAWkSs J5v9rHxjYnici+yb0o7zPCzQ+8bzQCMIuDFvBVaEOLuhfihwAIFBUoXtwzF09E2k ThsA9WkfTZTf9AwcCRo7EL2ZEJK6VfLstDk6otX8jQCh4D/EEf4uewN0FYJBrccA 2NscvqRtVS3k4VTk5+K5ChwyH5EazNi08+8FUnbnsppGp50DsoSIqNlAyTQekf4i NPMpGUrAHU2q7b/i7eU1Hk0vOmCEnmI= -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:43 2025 by rpki-client