This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88c59366-c1f5-3d4a-8066-48f56bdaa025.roa File: 88c59366-c1f5-3d4a-8066-48f56bdaa025.roa (raw, json) Hash identifier: mMvwK3QZ6ihOB52h4wXics7uIx18+8pThDavMMxL6XI= Subject key identifier: CD:87:15:09:E4:D6:F2:A5:7F:0B:E5:F3:05:91:AD:73:C0:02:67:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C391665C36393F614E9656700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88c59366-c1f5-3d4a-8066-48f56bdaa025.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.204.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:65:c3:63:93:f6:14:e9:65:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=343d77bc-da37-468d-9b17-1eb06d1ee245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:d3:cb:a5:9b:39:5d:c8:48:db:eb:48:3c: 4a:ce:f6:a4:0b:85:6d:25:fe:34:3b:9a:a1:68:97: 84:bb:c4:12:05:1a:d3:f4:07:8c:fc:1b:4a:97:b5: 3f:8d:ad:f1:c9:bd:90:55:0c:1d:7e:0f:0b:f7:59: e1:3a:f2:22:ff:06:0e:19:93:9a:70:f7:48:10:ed: 6b:65:d1:d0:ec:a8:7d:d9:02:07:36:a8:60:c3:73: 8c:0f:c1:ec:bc:bc:af:89:38:3e:31:e3:9e:ad:93: 36:c4:2c:de:2b:40:c9:d1:bb:60:08:01:5c:30:a8: 4f:de:31:d2:7e:a1:50:9b:2f:1c:b9:5b:e7:3f:4c: 84:51:27:3c:ed:ef:11:39:d0:0e:87:86:ec:5f:47: 6b:bd:f7:5a:51:ea:cb:91:b5:d3:e7:d5:56:ee:9d: 4a:fb:3c:6d:36:a5:1b:c4:2a:1d:07:88:f8:a4:5a: b6:e6:74:a9:21:90:e3:e1:62:86:de:f2:6a:3e:37: a4:cb:e3:72:fd:c3:89:f1:f5:79:27:65:89:85:bc: 3c:d3:42:19:40:71:52:4e:f2:df:89:b6:37:12:df: 71:bf:88:70:db:50:4e:af:0f:94:c1:0a:90:cc:8e: ea:8c:32:5b:11:b9:cd:76:50:cc:2b:e6:14:53:40: 84:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:87:15:09:E4:D6:F2:A5:7F:0B:E5:F3:05:91:AD:73:C0:02:67:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88c59366-c1f5-3d4a-8066-48f56bdaa025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:32:ad:99:48:e2:1e:3f:c8:11:f6:36:1b:b7:98:4f:06:52: 56:d1:cb:79:eb:2c:e0:bd:4b:76:b1:bb:96:8f:52:56:28:39: 0e:35:e6:10:e7:9a:20:65:6c:d3:fc:73:3e:39:1a:f5:23:b9: ed:18:fa:f0:65:a8:27:56:55:16:71:36:5e:6c:bd:63:68:70: da:63:f7:18:8c:6e:37:31:90:6c:cf:69:3d:eb:e4:88:16:06: 5d:80:06:81:73:1b:c6:d7:22:9d:6a:1d:7d:4d:20:c0:f4:3b: d9:21:23:25:ca:e5:4f:96:58:a7:f3:c8:02:af:06:73:ca:be: fa:c1:f3:ad:0d:8c:fc:b0:1b:97:bb:ec:8e:1f:6f:9a:23:5d: 7e:c6:27:06:2f:ca:24:0e:24:af:08:35:81:a0:07:9e:2c:3b: c4:7e:2b:a8:2a:b8:f3:2f:28:8a:6f:66:cb:ae:28:80:ac:5a: 3d:4f:1f:50:f7:2b:23:d0:30:4a:83:3b:5c:e6:d3:4f:f7:8b: c9:7b:73:46:16:9f:de:e6:6e:c5:89:55:92:8c:2d:59:d5:5f: 7e:38:14:b8:79:66:40:0a:ee:50:30:98:e3:02:19:eb:76:a2: a6:ea:43:9c:48:3c:d2:81:20:40:cf:e2:43:c7:31:21:87:47: 08:57:d6:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FmXDY5P2FOllZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk MzQzZDc3YmMtZGEzNy00NjhkLTliMTctMWViMDZkMWVlMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszTTy6WbOV3ISNvrSDxKzvakC4VtJf40O5qh aJeEu8QSBRrT9AeM/BtKl7U/ja3xyb2QVQwdfg8L91nhOvIi/wYOGZOacPdIEO1r ZdHQ7Kh92QIHNqhgw3OMD8HsvLyviTg+MeOerZM2xCzeK0DJ0btgCAFcMKhP3jHS fqFQmy8cuVvnP0yEUSc87e8ROdAOh4bsX0drvfdaUerLkbXT59VW7p1K+zxtNqUb xCodB4j4pFq25nSpIZDj4WKG3vJqPjeky+Ny/cOJ8fV5J2WJhbw800IZQHFSTvLf ibY3Et9xv4hw21BOrw+UwQqQzI7qjDJbEbnNdlDMK+YUU0CEswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2HFQnk1vKlfwvl8wWRrXPAAmd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhjNTkzNjYtYzFmNS0z ZDRhLTgwNjYtNDhmNTZiZGFhMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcyrZlI4h4/yBH2Nhu3mE8GUlbRy3nrLOC9S3axu5aPUlYoOQ415hDn miBlbNP8cz45GvUjue0Y+vBlqCdWVRZxNl5svWNocNpj9xiMbjcxkGzPaT3r5IgW Bl2ABoFzG8bXIp1qHX1NIMD0O9khIyXK5U+WWKfzyAKvBnPKvvrB860NjPywG5e7 7I4fb5ojXX7GJwYvyiQOJK8INYGgB54sO8R+K6gquPMvKIpvZsuuKICsWj1PH1D3 KyPQMEqDO1zm00/3i8l7c0YWn97mbsWJVZKMLVnVX344FLh5ZkAK7lAwmOMCGet2 oqbqQ5xIPNKBIEDP4kPHMSGHRwhX1mE= -----END CERTIFICATE-----Generated at Sun Jan 25 08:06:05 2026 by rpki-client