This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95325eb5-07a5-306f-b719-bcbd324b7d0e.roa File: 95325eb5-07a5-306f-b719-bcbd324b7d0e.roa (raw, json) Hash identifier: 4zSU9HM54OD6FgksOl1v31xi2GdxaRGyWVsFn9JatuY= Subject key identifier: 3E:73:6F:BF:60:44:33:84:C3:0B:49:90:B9:A3:3C:65:FD:17:76:5D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C0570C5C61287C778FDB3E040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95325eb5-07a5-306f-b719-bcbd324b7d0e.roa Signing time: Sat 29 Nov 2025 14:00:39 +0000 ROA not before: Sat 29 Nov 2025 14:00:39 +0000 ROA not after: Fri 27 Feb 2026 14:00:39 +0000 asID: 16625 IP address blocks: 23.52.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:05:70:c5:c6:12:87:c7:78:fd:b3:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 29 14:00:39 2025 GMT Not After : Feb 27 14:00:39 2026 GMT Subject: CN=43ac9ef0-f051-4d20-ab74-4374454c0903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:99:fb:96:ad:63:96:b3:ef:15:b1:a6:2d: a6:50:66:c3:5f:fc:11:6e:20:c6:6a:93:ba:7b:ac: 60:67:2b:10:e0:11:b2:6a:19:42:6e:5d:98:e0:0b: 1a:af:9b:44:97:37:ce:0f:84:8a:dc:8a:18:44:d5: 3c:29:e8:81:2d:15:45:a8:d4:40:2b:27:8a:ec:db: 50:6d:5c:b9:0b:53:70:26:64:1c:10:3a:20:88:10: 56:e4:16:ea:82:4f:5d:04:45:c3:04:6a:09:39:8c: 64:07:06:a3:2a:d0:83:16:19:64:4f:1e:4a:7f:36: 58:b5:40:e4:1c:5f:df:a8:8c:93:80:06:e6:d2:87: 75:52:4c:48:40:70:a6:91:de:4e:50:4d:6f:2b:8b: 72:51:7d:fd:3c:0c:99:6b:d0:6e:54:c7:56:0a:3a: ae:34:6b:16:42:01:e3:b0:04:7a:cb:fc:3e:f1:82: 64:4c:7a:67:83:fe:db:7e:77:53:55:6a:21:fb:20: 12:d4:cc:63:ce:0b:d4:ba:f9:ee:2b:ab:6a:6d:0f: 6f:4e:bb:5d:34:6f:2b:0b:eb:ea:45:13:08:a1:54: 20:25:8a:47:c7:59:83:5c:4a:06:22:2a:de:bf:41: 86:ff:56:10:8e:f3:df:0e:8d:85:69:b5:63:7d:0b: ab:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:73:6F:BF:60:44:33:84:C3:0B:49:90:B9:A3:3C:65:FD:17:76:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95325eb5-07a5-306f-b719-bcbd324b7d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:65:35:4e:7b:cc:23:6a:e6:a6:f4:d8:89:e8:db:d9:31:9e: df:1f:75:5e:7f:ff:78:b9:c1:c9:48:cc:62:75:9c:47:93:0f: 48:f4:b0:00:c6:44:0c:34:d4:95:80:40:40:8d:18:86:a2:e2: 32:8c:8f:97:59:d4:fd:e9:dc:eb:53:59:80:a1:73:29:0d:c8: 7f:76:ff:ef:df:f5:7b:7b:eb:af:b8:a5:c9:2a:40:f5:db:b0: d1:60:1c:71:f6:61:bf:4d:5e:6a:79:aa:8e:6e:b4:ed:94:f5: 8f:de:19:fd:84:ec:8c:64:8d:27:ee:28:96:58:c4:a8:57:c7: 69:51:f7:d5:f0:c4:3d:24:11:49:1b:8a:56:7e:8d:52:77:d3: bc:76:5f:c3:8d:e4:e3:12:d5:4a:f1:37:2d:40:6d:ca:2f:87: 22:90:c8:8b:6b:d8:d5:d8:7d:f2:6c:52:40:a3:8f:2e:85:be: 1b:f1:a6:57:2b:c6:f4:07:ad:61:86:0c:41:5c:07:3d:4e:db: 39:a7:ff:14:be:06:2a:45:c1:43:c2:0e:83:7c:69:21:5b:d7: a8:a9:84:94:78:2f:15:c5:bc:e0:a5:ad:8f:33:df:c5:d4:f1: b1:15:ae:73:f7:80:6f:30:50:f8:77:75:f4:5d:c2:22:7e:78: d2:af:ab:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwFcMXGEofHeP2z4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyOTE0MDAzOVoXDTI2MDIyNzE0MDAzOVowLzEtMCsGA1UEAxMk NDNhYzllZjAtZjA1MS00ZDIwLWFiNzQtNDM3NDQ1NGMwOTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkKZ+5atY5az7xWxpi2mUGbDX/wRbiDGapO6 e6xgZysQ4BGyahlCbl2Y4Asar5tElzfOD4SK3IoYRNU8KeiBLRVFqNRAKyeK7NtQ bVy5C1NwJmQcEDogiBBW5Bbqgk9dBEXDBGoJOYxkBwajKtCDFhlkTx5KfzZYtUDk HF/fqIyTgAbm0od1UkxIQHCmkd5OUE1vK4tyUX39PAyZa9BuVMdWCjquNGsWQgHj sAR6y/w+8YJkTHpng/7bfndTVWoh+yAS1MxjzgvUuvnuK6tqbQ9vTrtdNG8rC+vq RRMIoVQgJYpHx1mDXEoGIirev0GG/1YQjvPfDo2FabVjfQurGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5zb79gRDOEwwtJkLmjPGX9F3ZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTUzMjVlYjUtMDdhNS0z MDZmLWI3MTktYmNiZDMyNGI3ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRlNU57zCNq5qb02Ino29kxnt8fdV5//3i5wclIzGJ1nEeTD0j0sADG RAw01JWAQECNGIai4jKMj5dZ1P3p3OtTWYChcykNyH92/+/f9Xt766+4pckqQPXb sNFgHHH2Yb9NXmp5qo5utO2U9Y/eGf2E7IxkjSfuKJZYxKhXx2lR99XwxD0kEUkb ilZ+jVJ307x2X8ON5OMS1UrxNy1AbcovhyKQyItr2NXYffJsUkCjjy6Fvhvxplcr xvQHrWGGDEFcBz1O2zmn/xS+BipFwUPCDoN8aSFb16iphJR4LxXFvOClrY8z38XU 8bEVrnP3gG8wUPh3dfRdwiJ+eNKvqyw= -----END CERTIFICATE-----Generated at Sat Dec 6 12:57:50 2025 by rpki-client