This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9040b89b-ada7-3a3a-9ec8-baaba6ee329a.roa File: 9040b89b-ada7-3a3a-9ec8-baaba6ee329a.roa (raw, json) Hash identifier: XJeUq5M6OaweMg7TEkHmZJDfGoDOJslXV+uhUEJqFlM= Subject key identifier: 1D:F0:30:B2:4D:D2:99:CB:57:D3:3A:F6:E7:15:96:F0:C1:72:33:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BFBAB65DAC98C125E6D664A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9040b89b-ada7-3a3a-9ec8-baaba6ee329a.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.42.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:65:da:c9:8c:12:5e:6d:66:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=699d1312-6091-4982-bcb7-422221f92306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:be:0f:98:1e:03:69:30:1c:78:04:dc:ee:7f: 1a:ab:2d:63:3a:7a:45:ca:38:b2:bf:b8:22:c7:23: 4f:a5:2c:5b:ca:0f:bd:1a:4c:60:7e:cc:13:3a:35: cf:4e:c5:59:5b:cc:22:8f:76:15:4e:6a:0a:75:43: f1:61:7c:af:6b:a6:18:f5:6e:1a:35:84:d3:8d:80: fd:e5:a5:24:63:34:5e:3a:0f:69:40:77:a9:07:94: fe:b4:5c:3d:26:d3:b4:cb:c9:47:a2:45:df:60:6c: 5f:87:2b:70:56:9e:b4:f7:d8:15:a9:bc:18:ee:b0: d2:94:d6:d0:a8:6f:cb:e2:63:0f:78:f3:0d:b5:4e: ff:2c:a4:b2:ec:7c:db:22:8c:ac:9a:69:76:d2:2d: 86:84:dc:4c:8c:30:ec:68:a9:6f:34:e6:d3:00:c2: 52:cc:f7:2d:aa:b0:b7:6f:5e:61:e6:bd:38:51:6b: 4c:7d:d9:11:9a:37:79:51:49:5f:4b:6d:4f:5e:40: 11:39:03:ec:56:72:56:80:25:d7:f7:f6:4c:fa:ff: 56:2c:02:d3:3a:ff:29:97:db:ee:72:62:f4:f5:9f: 5a:ba:a8:16:1f:47:98:5e:23:0e:56:c6:76:4a:15: 91:ea:91:22:ff:3c:70:78:ca:53:35:52:05:9d:23: 5d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F0:30:B2:4D:D2:99:CB:57:D3:3A:F6:E7:15:96:F0:C1:72:33:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9040b89b-ada7-3a3a-9ec8-baaba6ee329a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:aa:67:7f:20:e5:63:ce:1a:ab:1e:76:40:10:20:32:ce:c8: 33:97:90:f4:e6:b1:df:89:e8:ac:30:76:f5:9b:b4:28:77:08: 84:f4:e5:37:e2:a0:14:cf:bf:d6:e8:46:43:f4:47:e5:c2:1c: 23:c2:b7:b2:88:40:f0:fe:75:d8:29:93:53:3e:93:63:86:d4: ea:0c:99:f2:16:b3:17:fe:e7:86:37:98:56:77:76:b0:8d:b6: 53:f1:2d:8f:1f:cf:01:81:a3:6c:4c:72:8d:e7:f1:9d:e7:59: 61:db:69:53:26:ea:61:61:ba:12:83:c6:41:9b:1d:5b:cd:6c: 19:d7:d2:69:8f:ae:3e:a8:9e:fa:9f:82:8f:8b:70:58:36:9a: 88:d8:cd:55:7b:e6:07:1e:9f:57:3c:e7:3e:a0:75:d7:dd:43: a1:66:43:12:7f:36:51:86:3c:d5:bf:16:36:e1:9d:7c:5f:1d: 0a:a0:d5:ce:96:e5:ab:e8:34:c8:27:7c:25:6a:af:02:cb:e5: 4a:34:d6:70:d6:83:9a:97:9c:2c:da:99:56:91:e2:6d:24:c9: 68:b0:41:d2:37:3a:4a:7d:cd:e1:49:ba:51:b5:d4:07:50:9b: 52:27:ea:38:b7:21:06:73:96:d0:f2:25:c5:6a:52:9e:1f:54: b1:91:8c:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7q2XayYwSXm1mSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk Njk5ZDEzMTItNjA5MS00OTgyLWJjYjctNDIyMjIxZjkyMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj74PmB4DaTAceATc7n8aqy1jOnpFyjiyv7gi xyNPpSxbyg+9GkxgfswTOjXPTsVZW8wij3YVTmoKdUPxYXyva6YY9W4aNYTTjYD9 5aUkYzReOg9pQHepB5T+tFw9JtO0y8lHokXfYGxfhytwVp6099gVqbwY7rDSlNbQ qG/L4mMPePMNtU7/LKSy7HzbIoysmml20i2GhNxMjDDsaKlvNObTAMJSzPctqrC3 b15h5r04UWtMfdkRmjd5UUlfS21PXkAROQPsVnJWgCXX9/ZM+v9WLALTOv8pl9vu cmL09Z9auqgWH0eYXiMOVsZ2ShWR6pEi/zxweMpTNVIFnSNd8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3wMLJN0pnLV9M69ucVlvDBcjOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTA0MGI4OWItYWRhNy0z YTNhLTllYzgtYmFhYmE2ZWUzMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFypgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaqZ38g5WPOGqsedkAQIDLOyDOXkPTmsd+J6KwwdvWbtCh3CIT05Tfi oBTPv9boRkP0R+XCHCPCt7KIQPD+ddgpk1M+k2OG1OoMmfIWsxf+54Y3mFZ3drCN tlPxLY8fzwGBo2xMco3n8Z3nWWHbaVMm6mFhuhKDxkGbHVvNbBnX0mmPrj6onvqf go+LcFg2mojYzVV75gcen1c85z6gddfdQ6FmQxJ/NlGGPNW/FjbhnXxfHQqg1c6W 5avoNMgnfCVqrwLL5Uo01nDWg5qXnCzamVaR4m0kyWiwQdI3Okp9zeFJulG11AdQ m1In6ji3IQZzltDyJcVqUp4fVLGRjMk= -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:22 2025 by rpki-client