This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/961a8348-cbc6-3dc2-8248-5d5d90f6f6e5.roa File: 961a8348-cbc6-3dc2-8248-5d5d90f6f6e5.roa (raw, json) Hash identifier: nt1ao9ydh0QI+6dtmAeFJ37q2JH9xfGovcJyFOp3ezc= Subject key identifier: 1B:2F:C4:98:41:E0:F9:F1:C6:44:33:5D:EF:62:42:0F:54:7A:65:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C13663B10E3CCBD9824B92380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/961a8348-cbc6-3dc2-8248-5d5d90f6f6e5.roa Signing time: Thu 04 Dec 2025 14:00:39 +0000 ROA not before: Thu 04 Dec 2025 14:00:39 +0000 ROA not after: Wed 04 Mar 2026 14:00:39 +0000 asID: 35994 IP address blocks: 23.213.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:13:66:3b:10:e3:cc:bd:98:24:b9:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 4 14:00:39 2025 GMT Not After : Mar 4 14:00:39 2026 GMT Subject: CN=bf3144c9-581f-465c-a385-8e9ee64a263a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:ca:2e:14:20:f1:b0:f9:32:7b:10:50:11: 94:ad:25:04:5f:47:0f:2f:83:5a:ac:13:05:4c:91: 40:93:49:4b:bd:0e:0e:42:56:74:7e:0b:28:fb:46: 78:a5:5b:06:c9:e1:d4:0b:80:cc:d2:3f:9d:3f:06: 7a:7c:3f:e8:65:52:1d:90:a2:ad:4b:a2:32:76:e9: 60:2d:cd:e3:44:4d:c8:d9:7c:97:f7:75:22:09:18: 4e:b6:cf:e5:fe:c1:af:cb:8b:d6:95:b2:44:89:0c: 3e:8d:0d:6a:9b:99:e3:2d:bf:ac:c5:75:91:cb:0a: 99:7a:f0:2b:7a:50:71:55:e7:aa:98:b9:3e:7d:fe: 0b:1c:f4:a2:bd:0a:f1:37:88:c6:e5:a4:97:f3:5f: 9a:e5:5a:ea:39:60:8f:04:11:32:82:69:fc:6e:db: 6d:6c:10:a3:c8:03:30:35:b9:3e:ef:f1:57:41:24: 75:9e:68:79:99:fb:d0:f9:80:66:84:89:32:88:ef: c2:bc:f0:30:23:43:75:93:7a:48:5a:ea:e0:fa:63: 52:bf:13:da:1c:91:59:57:1e:3d:ce:e7:ff:fc:28: db:c9:84:cd:c6:f2:3c:a4:78:27:51:b0:43:a6:a8: 11:12:01:c9:0e:a7:c0:cc:f2:1b:13:40:2c:e6:b0: 29:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2F:C4:98:41:E0:F9:F1:C6:44:33:5D:EF:62:42:0F:54:7A:65:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/961a8348-cbc6-3dc2-8248-5d5d90f6f6e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d7:f3:91:05:5a:2b:16:4e:7f:f0:0e:75:09:b0:a9:86:29: 43:21:a3:b6:eb:2e:9c:57:7d:da:ed:3a:f3:63:5a:9f:83:ed: 76:d6:3d:9a:8c:38:a6:bd:2f:e4:21:ba:1b:1a:d3:bc:c5:55: 4c:3a:31:0d:37:12:ea:d9:40:39:d1:3f:a6:19:6e:56:22:97: d2:75:6e:c4:9c:2d:6e:ea:61:95:88:7b:b2:24:4b:9e:f9:51: 1f:3d:fe:2d:bb:81:91:43:f9:cf:c1:aa:17:cd:59:2d:bd:5e: 54:8c:14:f0:1a:aa:11:c6:43:4a:26:a0:70:e3:08:f7:de:ce: 25:74:bf:ed:69:56:a8:99:01:8e:61:a0:31:bd:0c:da:44:f3: c8:db:7a:7b:3e:ed:53:9f:56:b0:6d:06:b5:50:5c:48:24:4b: fb:a6:f3:98:2c:df:47:97:32:f1:a1:67:c5:e3:4f:fd:8d:aa: aa:7e:fb:19:96:c1:b2:d5:81:b8:f7:1d:fe:7a:95:52:f9:50: ca:c1:64:39:fe:f2:3f:d4:4e:b5:bd:f1:37:87:b6:d5:b2:d5: 50:8c:da:02:34:1c:14:44:16:63:c9:bd:cd:56:b1:d0:4c:95: 21:9f:bb:b6:69:69:d1:56:74:a3:53:0c:2e:ca:92:c0:26:a0: bf:cf:b5:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwTZjsQ48y9mCS5I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwNDE0MDAzOVoXDTI2MDMwNDE0MDAzOVowLzEtMCsGA1UEAxMk YmYzMTQ0YzktNTgxZi00NjVjLWEzODUtOGU5ZWU2NGEyNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7fKLhQg8bD5MnsQUBGUrSUEX0cPL4NarBMF TJFAk0lLvQ4OQlZ0fgso+0Z4pVsGyeHUC4DM0j+dPwZ6fD/oZVIdkKKtS6Iydulg Lc3jRE3I2XyX93UiCRhOts/l/sGvy4vWlbJEiQw+jQ1qm5njLb+sxXWRywqZevAr elBxVeeqmLk+ff4LHPSivQrxN4jG5aSX81+a5VrqOWCPBBEygmn8btttbBCjyAMw Nbk+7/FXQSR1nmh5mfvQ+YBmhIkyiO/CvPAwI0N1k3pIWurg+mNSvxPaHJFZVx49 zuf//CjbyYTNxvI8pHgnUbBDpqgREgHJDqfAzPIbE0As5rApuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsvxJhB4PnxxkQzXe9iQg9UemV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTYxYTgzNDgtY2JjNi0z ZGMyLTgyNDgtNWQ1ZDkwZjZmNmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALX85EFWisWTn/wDnUJsKmGKUMho7brLpxXfdrtOvNjWp+D7XbWPZqM OKa9L+Qhuhsa07zFVUw6MQ03EurZQDnRP6YZblYil9J1bsScLW7qYZWIe7IkS575 UR89/i27gZFD+c/BqhfNWS29XlSMFPAaqhHGQ0omoHDjCPfeziV0v+1pVqiZAY5h oDG9DNpE88jbens+7VOfVrBtBrVQXEgkS/um85gs30eXMvGhZ8XjT/2Nqqp++xmW wbLVgbj3Hf56lVL5UMrBZDn+8j/UTrW98TeHttWy1VCM2gI0HBREFmPJvc1WsdBM lSGfu7ZpadFWdKNTDC7KksAmoL/PtZ0= -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:03 2025 by rpki-client