This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99ee59c2-843d-35e0-99f8-e8ca7045d847.roa File: 99ee59c2-843d-35e0-99f8-e8ca7045d847.roa (raw, json) Hash identifier: T6nkxHLOSOUnWtvpa1GKWWhaHjpPjpAHdS4yH2t60jI= Subject key identifier: B7:B4:0D:E3:01:EC:7F:BE:D9:50:8B:0F:AD:22:A0:12:55:50:B3:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C09A0AD5422FCE54E531FACC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99ee59c2-843d-35e0-99f8-e8ca7045d847.roa Signing time: Mon 01 Dec 2025 02:00:30 +0000 ROA not before: Mon 01 Dec 2025 02:00:30 +0000 ROA not after: Sun 01 Mar 2026 02:00:30 +0000 asID: 20940 IP address blocks: 23.221.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:09:a0:ad:54:22:fc:e5:4e:53:1f:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 1 02:00:30 2025 GMT Not After : Mar 1 02:00:30 2026 GMT Subject: CN=7b877bc6-89a6-4570-af14-0ba3a6d6705e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c2:64:c4:48:4b:74:0d:d6:1d:03:7a:e9:0f: a4:cf:29:fd:54:92:7e:06:8c:05:e3:5c:c5:17:d3: 5d:0e:97:d6:f5:63:05:38:78:2a:ce:4e:f9:46:ab: e8:4d:67:49:e4:69:ed:e6:00:b4:83:e1:8c:a7:ed: e5:77:cd:04:62:95:c1:a4:eb:98:31:be:91:ec:4c: c5:de:48:db:75:d7:2c:47:bc:5a:66:81:c1:66:5a: 95:84:94:14:55:99:9d:fd:a5:c6:3c:ed:9e:fa:47: b1:29:b0:a4:bf:f3:ab:03:07:11:d6:e2:5f:3b:4c: 1a:b3:86:fd:46:14:1a:8a:fd:65:79:7f:e1:08:fe: a4:d2:35:5a:bf:be:3d:a4:94:c5:e0:b7:be:a6:3d: 2c:4b:b0:90:c9:d9:4d:01:c5:66:5a:0c:23:b5:cf: cf:9c:96:6a:3a:41:f6:54:e5:d7:30:1b:d8:81:69: 1b:4f:f9:e5:3d:93:41:40:11:17:5c:f5:9e:ca:6a: 3a:ce:c3:d4:d8:dc:4a:cd:54:62:48:85:bb:dc:75: 77:d8:8e:5f:a7:64:83:ab:30:1c:cd:f4:17:85:38: da:c1:11:09:bb:91:25:6e:e7:8f:c5:ec:fd:3e:bf: e1:ac:d3:02:ad:be:85:79:4b:bc:76:f6:41:62:16: be:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B4:0D:E3:01:EC:7F:BE:D9:50:8B:0F:AD:22:A0:12:55:50:B3:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99ee59c2-843d-35e0-99f8-e8ca7045d847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:02:2a:d9:d9:a0:c0:fe:c7:03:64:d2:ce:5b:aa:8b:06:d6: 33:af:6a:95:f5:2d:da:2c:0a:ba:f3:d6:48:6c:c8:61:4c:43: 92:8e:8d:1d:dc:e0:7e:eb:cc:15:b1:00:ee:c3:4c:f4:b4:f4: 99:fd:3a:43:31:17:02:dc:9a:b9:a1:dd:bf:ea:12:91:60:7e: a9:e2:1b:76:02:f6:07:7f:72:44:fd:b5:8d:b9:4b:6a:b9:c9: 54:22:98:a9:17:a9:d9:29:98:c1:34:cf:8c:f0:e2:98:9c:78: 58:7d:3f:aa:43:4e:9c:d4:5c:8c:1c:78:41:5f:61:39:ce:c1: 22:dc:91:8b:7a:43:1c:6b:7d:5c:fb:3a:bb:2d:ac:80:83:d3: c3:d5:b5:9a:67:97:e9:74:e7:a5:47:e3:37:03:58:96:b5:05: 61:01:8f:9f:e0:88:0d:f0:6a:50:ba:bf:d3:ad:66:fa:da:97: c5:31:09:c4:e3:03:ae:ad:33:c8:bc:bd:0e:3e:88:05:75:5c: 60:7c:11:cc:2a:6e:a3:5a:45:16:f1:da:f1:67:d7:ba:52:b0: a2:bd:75:e0:34:b4:48:ec:29:13:ed:28:a3:d1:f3:87:97:de: 4b:80:fd:ed:6f:b0:75:38:7f:27:2e:ca:a2:89:57:78:27:07: b4:73:cc:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwJoK1UIvzlTlMfrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwMTAyMDAzMFoXDTI2MDMwMTAyMDAzMFowLzEtMCsGA1UEAxMk N2I4NzdiYzYtODlhNi00NTcwLWFmMTQtMGJhM2E2ZDY3MDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsJkxEhLdA3WHQN66Q+kzyn9VJJ+BowF41zF F9NdDpfW9WMFOHgqzk75RqvoTWdJ5Gnt5gC0g+GMp+3ld80EYpXBpOuYMb6R7EzF 3kjbddcsR7xaZoHBZlqVhJQUVZmd/aXGPO2e+kexKbCkv/OrAwcR1uJfO0was4b9 RhQaiv1leX/hCP6k0jVav749pJTF4Le+pj0sS7CQydlNAcVmWgwjtc/PnJZqOkH2 VOXXMBvYgWkbT/nlPZNBQBEXXPWeymo6zsPU2NxKzVRiSIW73HV32I5fp2SDqzAc zfQXhTjawREJu5ElbuePxez9Pr/hrNMCrb6FeUu8dvZBYha+3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLe0DeMB7H++2VCLD60ioBJVULPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTllZTU5YzItODQzZC0z NWUwLTk5ZjgtZThjYTcwNDVkODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF92AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoCKtnZoMD+xwNk0s5bqosG1jOvapX1LdosCrrz1khsyGFMQ5KOjR3c 4H7rzBWxAO7DTPS09Jn9OkMxFwLcmrmh3b/qEpFgfqniG3YC9gd/ckT9tY25S2q5 yVQimKkXqdkpmME0z4zw4piceFh9P6pDTpzUXIwceEFfYTnOwSLckYt6QxxrfVz7 OrstrICD08PVtZpnl+l056VH4zcDWJa1BWEBj5/giA3walC6v9OtZvral8UxCcTj A66tM8i8vQ4+iAV1XGB8EcwqbqNaRRbx2vFn17pSsKK9deA0tEjsKRPtKKPR84eX 3kuA/e1vsHU4fycuyqKJV3gnB7RzzKM= -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:01 2025 by rpki-client