This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e96f98c-dc46-364a-9363-dfddfd870b1d.roa File: 9e96f98c-dc46-364a-9363-dfddfd870b1d.roa (raw, json) Hash identifier: rJ3vSl55595eEsV8J7JT2+xlPIYgEf0huAPEB4rcpr4= Subject key identifier: B1:B0:99:3D:3F:C5:1B:A6:1A:EC:A8:76:C6:C9:37:B8:F2:2B:22:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C37B117EEDAF2399B566B4C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e96f98c-dc46-364a-9363-dfddfd870b1d.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 20940 IP address blocks: 23.38.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:17:ee:da:f2:39:9b:56:6b:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=edcddf83-4ec7-4dc6-b02d-9115a2a75029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c5:c3:24:cc:cd:81:70:7b:6e:9f:81:3d:50: 62:c2:c7:63:fa:3d:44:cc:f8:8b:95:fc:8f:7f:8e: e9:59:59:93:7f:d1:b9:c0:33:02:15:24:0d:83:a8: 61:63:f7:c3:93:fd:78:ee:47:c1:ea:46:29:b2:4e: 84:ac:80:9a:67:46:e7:99:c4:00:50:4d:70:98:55: fb:7b:b9:4d:7a:4a:36:24:23:7d:e3:da:0c:a8:8a: 6e:bb:27:41:6e:be:93:8f:35:dd:14:d5:ce:b6:2d: 21:d2:2a:94:0e:a5:79:09:49:44:89:bd:bf:ce:d9: aa:da:11:cb:01:23:f7:90:30:89:09:a0:e3:df:99: 49:0e:bb:bd:f8:91:0c:b6:23:25:90:73:f1:92:47: 02:17:3b:7f:b4:57:77:a5:8a:a6:50:ec:61:4a:6c: 00:4d:c3:ce:f6:d4:68:e1:8c:ff:1c:da:18:64:9f: a4:64:30:ab:ae:a4:65:7f:4e:97:b3:87:5b:dc:4d: 59:38:c2:cd:1e:ae:4d:3b:5e:0c:da:d3:9d:3d:d3: 8f:b9:e6:2c:41:f7:62:39:86:9c:2b:f0:65:02:fc: 96:ea:e4:19:e8:5a:2f:42:54:80:df:62:fe:b8:16: f1:f0:80:1e:04:fc:5f:de:ed:1c:92:eb:97:11:4b: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B0:99:3D:3F:C5:1B:A6:1A:EC:A8:76:C6:C9:37:B8:F2:2B:22:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e96f98c-dc46-364a-9363-dfddfd870b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:81:79:62:e7:45:55:d0:6e:0c:da:72:d5:57:02:ea:61:bc: 30:17:7a:15:a5:b3:36:56:90:24:cd:86:91:be:c3:89:51:69: db:e1:98:76:c0:bf:6d:52:1e:1b:c5:bd:6a:9c:28:30:d4:76: 97:bd:51:24:e1:91:bd:52:f1:c0:a0:b8:d4:a0:a0:8a:40:c3: 57:44:c1:c7:46:f6:c2:27:5e:ed:4c:1a:42:b4:ae:8c:44:ff: 6b:8c:02:0c:12:5f:89:08:6f:fb:b8:e1:f1:29:db:63:4f:a7: bd:ba:60:e9:16:ed:28:59:5a:b8:95:36:80:db:ed:a9:51:8b: d7:b6:2a:0f:36:48:0c:20:cd:31:b5:47:f3:6d:fa:69:87:a7: 34:8d:81:8b:d8:e6:0b:70:2f:84:86:44:aa:06:ea:1b:e9:0e: 89:d8:ae:4c:9c:85:dd:60:7c:eb:22:74:cc:d8:f4:77:48:e5: bc:e9:c3:4c:ca:c3:27:6e:86:21:e9:43:33:76:2f:40:21:88: 8a:af:f7:62:b9:fa:80:d3:f3:bf:67:61:ec:34:c3:04:a6:04: a9:8a:ad:b5:5f:56:f8:7b:55:49:d0:e2:94:83:ce:1d:ca:9b: 8c:77:84:b6:b6:05:77:87:98:0a:31:31:ad:a3:82:c8:fa:d6: 1d:0c:09:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw3sRfu2vI5m1ZrTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk ZWRjZGRmODMtNGVjNy00ZGM2LWIwMmQtOTExNWEyYTc1MDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsXDJMzNgXB7bp+BPVBiwsdj+j1EzPiLlfyP f47pWVmTf9G5wDMCFSQNg6hhY/fDk/147kfB6kYpsk6ErICaZ0bnmcQAUE1wmFX7 e7lNeko2JCN949oMqIpuuydBbr6TjzXdFNXOti0h0iqUDqV5CUlEib2/ztmq2hHL ASP3kDCJCaDj35lJDru9+JEMtiMlkHPxkkcCFzt/tFd3pYqmUOxhSmwATcPO9tRo 4Yz/HNoYZJ+kZDCrrqRlf06Xs4db3E1ZOMLNHq5NO14M2tOdPdOPueYsQfdiOYac K/BlAvyW6uQZ6FovQlSA32L+uBbx8IAeBPxf3u0ckuuXEUtkbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGwmT0/xRumGuyodsbJN7jyKyJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWU5NmY5OGMtZGM0Ni0z NjRhLTkzNjMtZGZkZGZkODcwYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOBeWLnRVXQbgzactVXAuphvDAXehWlszZWkCTNhpG+w4lRadvhmHbA v21SHhvFvWqcKDDUdpe9USThkb1S8cCguNSgoIpAw1dEwcdG9sInXu1MGkK0roxE /2uMAgwSX4kIb/u44fEp22NPp726YOkW7ShZWriVNoDb7alRi9e2Kg82SAwgzTG1 R/Nt+mmHpzSNgYvY5gtwL4SGRKoG6hvpDonYrkychd1gfOsidMzY9HdI5bzpw0zK wyduhiHpQzN2L0AhiIqv92K5+oDT879nYew0wwSmBKmKrbVfVvh7VUnQ4pSDzh3K m4x3hLa2BXeHmAoxMa2jgsj61h0MCfM= -----END CERTIFICATE-----Generated at Thu Dec 18 11:27:48 2025 by rpki-client