This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3ab904f-165d-3b4c-8ca8-0155fa57a335.roa File: a3ab904f-165d-3b4c-8ca8-0155fa57a335.roa (raw, json) Hash identifier: LZVSw4XJ86lXDe5Wv3BhqFruSchzGlGtAVCmcm5MvVU= Subject key identifier: 0D:AA:48:5A:AA:E7:58:C4:5E:DB:21:29:A4:03:DD:AA:92:47:B4:BB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BEDB5E7C86EB38D86471A79E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3ab904f-165d-3b4c-8ca8-0155fa57a335.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 18403 IP address blocks: 23.32.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:e7:c8:6e:b3:8d:86:47:1a:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=9d1acd6b-5dcb-43ba-952b-7444643b0c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a6:e7:8c:2b:80:f6:64:76:88:f0:18:f9:0d: 46:68:f8:3d:23:1d:d9:c1:ac:01:0c:5c:2c:fe:82: 42:31:e0:d6:09:4c:54:4a:18:40:7a:ea:92:c7:41: 2b:c0:df:bd:71:ba:94:64:c0:3f:f2:4e:28:ad:e0: fc:90:59:e3:2b:13:69:8e:53:ac:d0:0e:b0:48:9c: f4:b7:cc:49:da:c1:8f:7f:fb:e3:43:b3:28:24:42: d2:48:55:be:65:18:26:e5:99:5e:31:8f:7a:4a:55: cf:ee:ce:bb:78:32:80:c6:f8:27:71:bc:69:1e:fe: bf:bf:39:cd:3e:64:68:cd:de:4f:fe:50:eb:c1:35: ed:a0:31:52:df:b0:c8:96:e0:81:45:3f:2a:e8:e2: dd:3c:59:2f:d3:6d:e5:ac:7a:f5:b0:e6:1e:67:c8: 37:01:ab:02:2a:e8:2a:e9:92:ec:52:bc:c5:35:ae: e8:7f:cb:ff:6d:c9:26:71:cc:d0:39:35:dd:f3:62: 98:89:90:9b:82:8c:38:13:85:ce:ff:ee:72:b3:2a: 15:5c:72:b3:cc:40:4f:cd:bb:16:cd:02:8d:9d:54: 38:56:60:02:bc:fe:4d:b3:aa:5b:38:a3:63:b5:dd: ae:f4:97:05:17:8f:bd:0f:22:0f:38:6d:6c:e1:3a: de:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AA:48:5A:AA:E7:58:C4:5E:DB:21:29:A4:03:DD:AA:92:47:B4:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3ab904f-165d-3b4c-8ca8-0155fa57a335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:97:44:c1:e5:43:5b:40:f7:2b:ca:a4:23:70:ff:9e:42:a4: ad:20:06:18:f4:23:41:a5:23:29:8e:99:5d:40:e5:b3:e7:0c: 03:c8:9d:75:b5:2f:e0:2a:f5:92:1c:65:59:12:aa:f7:da:bc: 34:c7:6f:63:7e:19:7d:49:a5:d5:04:e8:85:d2:d8:28:ab:fc: dc:64:2d:40:2d:ed:c1:84:50:0f:bf:a7:f0:d4:32:c9:77:2e: 9f:af:4d:bb:ec:df:1a:c3:cc:9f:d7:a0:73:96:aa:ef:f4:e0: a2:74:29:22:c5:71:05:3b:6f:b8:04:c1:dd:c0:5f:52:22:d1: 58:19:7b:13:63:b3:e2:0f:08:c9:37:fe:fa:01:ad:62:5d:c2: 59:ae:4e:6a:85:75:d6:9b:4c:cf:1a:8b:e0:a7:52:d6:27:cb: 3a:11:02:2c:80:4f:00:cb:44:82:f3:51:86:61:d5:b3:19:0c: 87:50:f0:0e:1c:eb:59:f2:17:e8:07:d7:e3:33:2d:4c:ed:6e: 7d:c8:54:9a:20:b4:52:09:25:9e:2d:43:bf:b4:ea:52:b0:49: e7:b5:4b:12:8e:5f:60:0c:6c:89:4b:e3:1f:d0:85:23:bc:89: 9f:6d:89:8d:b3:16:0f:32:54:a0:9a:d8:c9:01:7c:64:93:d0: f0:cc:fc:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvttefIbrONhkcaeeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk OWQxYWNkNmItNWRjYi00M2JhLTk1MmItNzQ0NDY0M2IwYzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqbnjCuA9mR2iPAY+Q1GaPg9Ix3ZwawBDFws /oJCMeDWCUxUShhAeuqSx0ErwN+9cbqUZMA/8k4oreD8kFnjKxNpjlOs0A6wSJz0 t8xJ2sGPf/vjQ7MoJELSSFW+ZRgm5ZleMY96SlXP7s67eDKAxvgncbxpHv6/vznN PmRozd5P/lDrwTXtoDFS37DIluCBRT8q6OLdPFkv023lrHr1sOYeZ8g3AasCKugq 6ZLsUrzFNa7of8v/bckmcczQOTXd82KYiZCbgow4E4XO/+5ysyoVXHKzzEBPzbsW zQKNnVQ4VmACvP5Ns6pbOKNjtd2u9JcFF4+9DyIPOG1s4Tre1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2qSFqq51jEXtshKaQD3aqSR7S7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTNhYjkwNGYtMTY1ZC0z YjRjLThjYTgtMDE1NWZhNTdhMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyBKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqXRMHlQ1tA9yvKpCNw/55CpK0gBhj0I0GlIymOmV1A5bPnDAPInXW1 L+Aq9ZIcZVkSqvfavDTHb2N+GX1JpdUE6IXS2Cir/NxkLUAt7cGEUA+/p/DUMsl3 Lp+vTbvs3xrDzJ/XoHOWqu/04KJ0KSLFcQU7b7gEwd3AX1Ii0VgZexNjs+IPCMk3 /voBrWJdwlmuTmqFddabTM8ai+CnUtYnyzoRAiyATwDLRILzUYZh1bMZDIdQ8A4c 61nyF+gH1+MzLUztbn3IVJogtFIJJZ4tQ7+06lKwSee1SxKOX2AMbIlL4x/QhSO8 iZ9tiY2zFg8yVKCa2MkBfGST0PDM/Ak= -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:00 2025 by rpki-client