This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91f560b1-be0b-300a-9c3f-71da8213ce60.roa File: 91f560b1-be0b-300a-9c3f-71da8213ce60.roa (raw, json) Hash identifier: Qz3tBKEskajsN7uOuLLd9cqU7Isvs00Bol4LhL/8WA0= Subject key identifier: 3A:22:DF:05:86:E3:A1:CF:78:0D:71:2A:1F:A8:16:3C:50:68:D8:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BC53B144E0BA6729030C6A2C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91f560b1-be0b-300a-9c3f-71da8213ce60.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 20940 IP address blocks: 23.3.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:14:4e:0b:a6:72:90:30:c6:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=59a4670e-22ca-415e-a18d-a8af268c70de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:01:ce:1b:9d:e8:c3:94:0f:fb:eb:70:e0:63: e9:5a:81:96:06:08:61:19:ae:3c:7e:e8:d4:9e:8e: 17:bf:c3:bb:f2:38:b9:fa:ce:b0:7f:67:75:92:18: a8:ca:bb:86:b0:c9:f3:72:e9:29:c2:d8:a5:ee:d6: 7e:dc:8d:fa:51:91:1f:2b:0e:49:65:8b:6a:c4:b1: ed:8c:61:96:65:78:5b:0c:61:7f:c1:17:e1:58:4b: 2c:90:3a:ff:f4:fa:9b:12:89:7d:50:9a:e5:0f:a7: 4d:82:c4:97:ff:23:82:13:a9:c8:83:89:89:c6:f5: cb:d2:b3:d9:73:24:e2:df:f0:bd:16:fb:87:16:69: 12:9b:74:85:0a:36:f5:51:fb:d8:a9:2b:1b:d2:65: e5:f7:14:5d:d1:46:91:b7:93:62:4f:7a:53:41:5d: 2e:87:2e:eb:63:2e:59:ae:58:30:76:08:14:c5:28: 66:ef:4d:04:2c:bb:13:75:b6:55:ab:90:28:a2:f3: 23:63:5e:1b:79:41:e1:7e:e7:2f:e0:fd:2a:d7:ce: 39:87:4a:ea:c6:f6:d9:84:53:3e:3e:d1:8a:e2:76: 31:91:6a:b6:11:16:69:96:2a:8a:bd:29:b0:7e:8b: 10:ea:bb:62:d2:0d:4d:1f:e1:17:29:6c:e3:aa:04: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:22:DF:05:86:E3:A1:CF:78:0D:71:2A:1F:A8:16:3C:50:68:D8:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91f560b1-be0b-300a-9c3f-71da8213ce60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:fd:3e:a5:1f:96:d7:4b:ba:ce:16:10:10:b1:df:da:27:7d: 62:6f:97:70:db:c3:7c:62:74:83:05:85:46:fe:8e:58:69:98: 46:52:45:89:5d:cc:b5:8e:e3:ac:46:80:01:5d:6c:de:e1:61: 98:0d:18:28:9f:e7:12:48:2e:b5:06:c8:9b:5e:0e:62:ff:9b: af:b8:0a:c8:fd:02:f3:48:01:71:cd:a3:dc:93:3c:e3:fb:0d: c4:4d:8d:1f:01:56:48:e5:2a:66:d7:67:97:ef:25:62:36:06: c3:45:99:3a:90:c9:0d:eb:5d:bb:4a:53:7b:fd:fd:98:a4:fe: d1:8d:03:41:41:49:32:e4:a2:22:2e:c1:d8:53:d0:3a:50:6b: 63:f7:10:38:56:fb:9e:20:9e:21:b8:38:78:ab:9c:cb:51:af: 78:37:ff:b6:fe:87:7a:12:d4:8a:e4:f7:57:05:cf:2f:b8:04: 1f:6e:7f:a2:94:6e:53:99:9d:5a:48:a6:4a:98:28:08:f8:6f: e1:eb:4f:fd:52:a5:cd:60:e2:75:98:3c:fa:c0:09:5e:d7:08: 11:c0:59:cc:90:40:8a:51:6f:39:1f:c1:ca:ca:83:3d:51:c5: d7:1b:93:f1:65:1a:48:3d:d4:dd:73:5e:27:06:48:bd:a0:90: b2:25:18:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOxROC6ZykDDGosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NTlhNDY3MGUtMjJjYS00MTVlLWExOGQtYThhZjI2OGM3MGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AHOG53ow5QP++tw4GPpWoGWBghhGa48fujU no4Xv8O78ji5+s6wf2d1khioyruGsMnzcukpwtil7tZ+3I36UZEfKw5JZYtqxLHt jGGWZXhbDGF/wRfhWEsskDr/9PqbEol9UJrlD6dNgsSX/yOCE6nIg4mJxvXL0rPZ cyTi3/C9FvuHFmkSm3SFCjb1UfvYqSsb0mXl9xRd0UaRt5NiT3pTQV0uhy7rYy5Z rlgwdggUxShm700ELLsTdbZVq5AoovMjY14beUHhfucv4P0q1845h0rqxvbZhFM+ PtGK4nYxkWq2ERZpliqKvSmwfosQ6rti0g1NH+EXKWzjqgQdUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoi3wWG46HPeA1xKh+oFjxQaNjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFmNTYwYjEtYmUwYi0z MDBhLTljM2YtNzFkYTgyMTNjZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb9PqUfltdLus4WEBCx39onfWJvl3Dbw3xidIMFhUb+jlhpmEZSRYld zLWO46xGgAFdbN7hYZgNGCif5xJILrUGyJteDmL/m6+4Csj9AvNIAXHNo9yTPOP7 DcRNjR8BVkjlKmbXZ5fvJWI2BsNFmTqQyQ3rXbtKU3v9/Zik/tGNA0FBSTLkoiIu wdhT0DpQa2P3EDhW+54gniG4OHirnMtRr3g3/7b+h3oS1Irk91cFzy+4BB9uf6KU blOZnVpIpkqYKAj4b+HrT/1Spc1g4nWYPPrACV7XCBHAWcyQQIpRbzkfwcrKgz1R xdcbk/FlGkg91N1zXicGSL2gkLIlGBs= -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:52 2025 by rpki-client