This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bfc88d0-f3a4-33d1-a544-f6989f71abba.roa File: 8bfc88d0-f3a4-33d1-a544-f6989f71abba.roa (raw, json) Hash identifier: boim7v+T3jzfMbNmOqJa8l6ta9uzE3G85LQNvl3wBLs= Subject key identifier: C9:F1:8F:98:53:00:91:EB:40:09:8F:E5:72:57:DA:04:89:15:B6:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C29BBEB9295620C510F4506C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bfc88d0-f3a4-33d1-a544-f6989f71abba.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 16625 IP address blocks: 23.203.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:eb:92:95:62:0c:51:0f:45:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=2417455a-db43-4c95-8b40-c99d8322d7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:57:d5:f6:26:ae:2d:0f:01:3b:d8:04:18:ee: 35:3b:03:ad:7a:3e:c6:9f:30:29:f5:56:83:f1:82: 81:c2:f0:83:c6:41:ab:24:d2:3d:c1:2d:7e:29:a7: 04:24:05:10:2d:e2:c1:b1:29:91:18:3c:5a:0f:97: 21:27:a4:74:72:8b:ef:88:25:5a:53:ee:6f:d9:17: e2:40:53:a6:c4:59:f4:fe:6b:19:01:19:6b:16:2b: b7:fe:fb:ca:9b:ed:18:ce:c1:4b:cd:e2:a4:3f:da: 57:32:68:b1:88:84:bc:6d:c6:c5:ca:49:40:d3:0a: 1b:7a:d4:56:b4:95:37:5a:9d:94:bf:99:ac:5b:a7: 97:36:2e:84:2f:7c:12:2a:0b:0b:46:c5:01:b5:16: 8a:41:76:84:f8:81:9b:05:bc:fb:08:b2:5d:6a:49: 22:d4:e4:2a:89:58:ea:e1:cf:a4:f3:1d:18:a9:40: 17:c9:46:44:49:72:78:56:25:ff:58:ce:cf:a4:6d: 08:4f:59:b1:1b:ce:3e:30:c8:90:d9:fa:6f:89:01: bd:49:b7:9c:e3:53:74:63:aa:ca:e2:cd:c3:d5:28: 85:12:cd:b8:54:6d:84:6d:01:15:b7:a3:8d:17:fe: 9f:4a:48:3e:1d:df:06:eb:39:3c:d9:32:bb:f6:d4: 8b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F1:8F:98:53:00:91:EB:40:09:8F:E5:72:57:DA:04:89:15:B6:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bfc88d0-f3a4-33d1-a544-f6989f71abba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:29:29:ed:c3:e2:fc:0b:f7:a4:9b:c4:82:b2:28:85:2c:f0: 0e:58:04:d8:2e:85:6a:e8:a4:c6:dd:9b:22:77:38:0e:b9:16: da:cf:29:94:0c:bb:ee:ea:72:a5:0c:91:96:b5:c6:bf:54:e4: 89:ab:ae:7e:9f:b3:e9:a7:11:a4:6b:7f:3e:96:c3:32:4a:ec: 3e:b6:a1:c4:83:02:8a:6d:36:04:41:10:30:aa:e9:ed:d7:cd: 66:ac:f6:d8:e1:d9:38:53:44:6a:37:23:e2:59:a3:ce:e0:cd: db:59:58:ce:d3:7e:7e:63:ad:95:99:97:7c:e9:a0:8b:3a:aa: 38:2d:c8:8a:97:ea:f8:89:f7:68:f4:4b:68:b6:82:13:94:c5: 70:06:7d:cf:fa:30:62:9e:5c:69:50:52:82:46:bb:0a:cc:8d: 62:bf:39:93:16:3f:2c:9c:ec:3e:6b:32:60:f9:e3:5c:26:62: c2:55:a4:e2:b1:cf:29:56:1a:fa:12:d4:3d:04:48:db:0a:f1: a4:2f:c4:ab:8e:5f:95:c3:cb:3a:60:1c:60:9e:e0:0b:4b:b2: 9a:fc:e9:5b:a4:b9:68:0d:35:23:e1:b6:fb:c8:d3:6e:17:83: f7:05:61:f1:dd:ef:8c:7e:bc:ee:ce:45:43:1b:2e:4d:64:4b: e8:91:3d:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwpu+uSlWIMUQ9FBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk MjQxNzQ1NWEtZGI0My00Yzk1LThiNDAtYzk5ZDgzMjJkN2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFfV9iauLQ8BO9gEGO41OwOtej7GnzAp9VaD 8YKBwvCDxkGrJNI9wS1+KacEJAUQLeLBsSmRGDxaD5chJ6R0covviCVaU+5v2Rfi QFOmxFn0/msZARlrFiu3/vvKm+0YzsFLzeKkP9pXMmixiIS8bcbFyklA0wobetRW tJU3Wp2Uv5msW6eXNi6EL3wSKgsLRsUBtRaKQXaE+IGbBbz7CLJdakki1OQqiVjq 4c+k8x0YqUAXyUZESXJ4ViX/WM7PpG0IT1mxG84+MMiQ2fpviQG9Sbec41N0Y6rK 4s3D1SiFEs24VG2EbQEVt6ONF/6fSkg+Hd8G6zk82TK79tSLFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnxj5hTAJHrQAmP5XJX2gSJFba2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJmYzg4ZDAtZjNhNC0z M2QxLWE1NDQtZjY5ODlmNzFhYmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8sUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMpKe3D4vwL96SbxIKyKIUs8A5YBNguhWropMbdmyJ3OA65FtrPKZQM u+7qcqUMkZa1xr9U5Imrrn6fs+mnEaRrfz6WwzJK7D62ocSDAoptNgRBEDCq6e3X zWas9tjh2ThTRGo3I+JZo87gzdtZWM7Tfn5jrZWZl3zpoIs6qjgtyIqX6viJ92j0 S2i2ghOUxXAGfc/6MGKeXGlQUoJGuwrMjWK/OZMWPyyc7D5rMmD541wmYsJVpOKx zylWGvoS1D0ESNsK8aQvxKuOX5XDyzpgHGCe4AtLspr86VukuWgNNSPhtvvI024X g/cFYfHd74x+vO7ORUMbLk1kS+iRPYw= -----END CERTIFICATE-----Generated at Thu Dec 18 11:28:01 2025 by rpki-client