This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa File: 87929612-bcbe-3cd7-b635-f1d289884be4.roa (raw, json) Hash identifier: D+vwR7azTvJAfCsrWlLEasO7psy1cogs21KBpdbN15U= Subject key identifier: CD:3A:DD:36:5C:1F:F3:21:0D:97:16:C8:F0:DF:87:03:2A:B7:77:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C1630DCA738AE7CF04A7E1A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 20940 IP address blocks: 23.223.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:dc:a7:38:ae:7c:f0:4a:7e:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=d04d79e5-9c3e-44e9-b554-69cea4c26bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:5f:b8:40:5f:37:a4:22:0a:87:91:48:33: 22:4b:1a:d1:77:05:e9:3b:01:3d:c2:e3:d8:98:d2: 78:07:d3:a6:60:2a:6a:2e:e6:16:13:69:d2:05:8f: a6:66:02:16:86:a8:2c:12:3c:4a:0f:b4:1f:d2:f2: 7f:a7:30:e5:7f:f9:f9:43:f8:df:79:ad:96:e2:32: 2a:1d:1c:40:d9:e6:ef:5b:83:78:95:51:7f:af:87: 6f:38:79:ca:1b:af:aa:87:9f:77:db:30:54:b0:0b: 39:de:7a:63:ab:5c:64:e7:ca:4e:ba:5a:d6:1d:ac: 8e:d4:a5:5b:28:ed:33:e9:bd:c4:a6:fd:99:23:78: 65:02:aa:be:d7:8f:b7:e9:c3:c3:4b:5c:e3:f4:47: 34:99:d7:43:5b:24:68:09:f1:ad:49:84:94:30:aa: aa:36:db:88:91:ad:d2:47:3f:f0:a4:75:f5:06:2c: 8a:01:fa:41:e6:51:f8:7b:95:47:63:91:c1:65:aa: 20:54:2b:3b:64:ff:1f:3d:1d:19:e4:93:d7:bd:74: 6a:9a:bb:01:65:b5:d3:db:01:1e:65:bc:ae:ea:a9: 1b:ef:88:98:36:5f:aa:0b:ac:96:f1:82:04:75:7e: c4:a7:ac:fd:05:89:9b:87:54:58:07:0e:c0:67:54: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3A:DD:36:5C:1F:F3:21:0D:97:16:C8:F0:DF:87:03:2A:B7:77:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d9:23:2b:3b:20:c3:b6:c4:4d:fa:73:0a:d9:82:ca:bf:b0: d9:82:4a:01:a8:a3:6c:a8:e4:6c:c3:58:c3:70:96:39:97:1d: 62:3b:c0:03:98:10:41:72:b9:03:98:57:f8:6e:69:25:80:4f: 26:fe:4c:be:93:9c:e0:a9:08:d5:82:ab:43:4a:29:f4:a1:d8: 3f:40:19:a9:c9:f6:47:8a:1f:77:91:14:47:24:19:22:83:19: 6e:37:e0:ba:43:93:48:3c:9d:c3:80:35:d7:8f:95:75:36:bf: 71:21:e7:28:37:b4:77:10:cb:3c:b5:ac:cd:55:a2:e4:2c:a2: 7b:be:a3:03:4e:f8:2a:23:93:7d:8d:72:0e:17:41:d7:70:e0: 63:ea:9d:3b:17:a3:26:70:f5:6d:0d:7a:69:06:16:3c:91:ab: 5a:af:47:4c:57:c4:10:19:e4:3a:d4:25:be:ff:ca:85:96:6b: 8f:f5:bb:73:5b:be:1a:1d:58:de:e8:06:68:c1:d9:84:70:39: 48:10:3f:46:f2:0b:40:ba:2c:c8:58:b0:01:17:53:4c:b6:7f: e9:ae:55:90:fa:89:0d:bc:86:28:08:ef:b8:72:01:e4:af:4d: f8:8c:11:32:0d:e6:a0:de:2b:37:07:4b:3a:ed:79:46:52:92: e9:e6:95:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMNynOK588Ep+GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk ZDA0ZDc5ZTUtOWMzZS00NGU5LWI1NTQtNjljZWE0YzI2YmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss1fuEBfN6QiCoeRSDMiSxrRdwXpOwE9wuPY mNJ4B9OmYCpqLuYWE2nSBY+mZgIWhqgsEjxKD7Qf0vJ/pzDlf/n5Q/jfea2W4jIq HRxA2ebvW4N4lVF/r4dvOHnKG6+qh5932zBUsAs53npjq1xk58pOulrWHayO1KVb KO0z6b3Epv2ZI3hlAqq+14+36cPDS1zj9Ec0mddDWyRoCfGtSYSUMKqqNtuIka3S Rz/wpHX1BiyKAfpB5lH4e5VHY5HBZaogVCs7ZP8fPR0Z5JPXvXRqmrsBZbXT2wEe Zbyu6qkb74iYNl+qC6yW8YIEdX7Ep6z9BYmbh1RYBw7AZ1S8EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM063TZcH/MhDZcWyPDfhwMqt3cpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODc5Mjk2MTItYmNiZS0z Y2Q3LWI2MzUtZjFkMjg5ODg0YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3ZIys7IMO2xE36cwrZgsq/sNmCSgGoo2yo5GzDWMNwljmXHWI7wAOY EEFyuQOYV/huaSWATyb+TL6TnOCpCNWCq0NKKfSh2D9AGanJ9keKH3eRFEckGSKD GW434LpDk0g8ncOANdePlXU2v3Eh5yg3tHcQyzy1rM1VouQsonu+owNO+Cojk32N cg4XQddw4GPqnTsXoyZw9W0NemkGFjyRq1qvR0xXxBAZ5DrUJb7/yoWWa4/1u3Nb vhodWN7oBmjB2YRwOUgQP0byC0C6LMhYsAEXU0y2f+muVZD6iQ28higI77hyAeSv TfiMETIN5qDeKzcHSzrteUZSkunmlfQ= -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:05 2025 by rpki-client