This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a572a0b1-1a57-3e9f-9b15-b285f4ec3fa0.roa File: a572a0b1-1a57-3e9f-9b15-b285f4ec3fa0.roa (raw, json) Hash identifier: DPcSbP+vYD2zW1lljniAfl4v7nXM/KH9SyyBzzacfaU= Subject key identifier: FA:74:97:EB:50:E8:E3:9B:9A:1F:A5:26:19:B7:98:32:17:E3:D5:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C285650D9D274B4057F7655E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a572a0b1-1a57-3e9f-9b15-b285f4ec3fa0.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 16625 IP address blocks: 23.201.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:50:d9:d2:74:b4:05:7f:76:55:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=570806d9-cf7b-4853-8e90-cfec0341be70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9a:f7:84:c3:83:08:67:52:19:5a:18:34:26: 8f:90:66:c8:c9:65:c5:e5:4f:d0:5f:6e:b3:cb:c1: a1:82:b2:d6:39:de:2f:c3:3d:7e:54:3c:d1:81:fe: 59:fe:53:00:b3:2e:34:35:74:7d:0f:7d:e2:46:3e: c0:bc:68:24:af:78:fa:c8:44:d2:3a:64:f6:1e:3b: 52:df:52:c4:80:52:f9:bc:5d:f6:33:a4:ae:f3:2b: ad:20:10:c7:75:02:8f:f4:9b:be:0f:0d:ee:92:c8: 68:a1:f6:fe:30:9c:b7:f2:c0:eb:1c:93:73:5b:11: d8:44:51:5f:36:bc:d2:c6:56:ae:1c:d9:45:b7:48: 82:d1:d8:1c:97:6a:55:d6:0a:7a:f9:5f:ce:7d:05: 18:ed:a1:f3:9c:57:c2:c8:ff:c7:50:2c:d0:99:5a: 22:3b:8d:e7:de:a6:a7:ca:f4:11:54:e0:75:27:8b: 1f:b8:10:5e:f8:94:45:3b:f1:54:f7:8c:88:eb:29: e5:1b:fe:e0:de:ea:e3:a3:66:c4:44:ae:fe:dd:c0: 5b:5c:34:c5:b5:dc:39:ed:c2:5c:0c:df:51:93:3b: ff:92:69:45:bc:50:a6:9d:9b:63:b4:94:a8:f0:30: 00:1a:d0:18:52:a4:09:50:7f:b6:7a:7d:97:97:5f: a8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:74:97:EB:50:E8:E3:9B:9A:1F:A5:26:19:B7:98:32:17:E3:D5:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a572a0b1-1a57-3e9f-9b15-b285f4ec3fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8c:c6:a5:01:a0:03:a0:e3:f1:c2:f6:28:ce:b0:67:24:7c: cc:7f:2f:28:25:2a:f9:d0:c2:e5:6d:7e:59:51:41:dd:e9:71: d3:ca:34:4e:84:25:01:06:51:ce:f1:07:42:e1:28:c3:9b:2d: b8:d3:47:8e:9b:01:4d:79:e3:98:50:65:1b:81:20:d5:77:bb: 06:07:14:17:68:a6:69:0e:47:55:e8:b5:21:d7:bf:f7:e3:97: 39:b8:1c:e0:65:00:08:fa:98:be:72:5d:47:2f:7e:1c:cb:87: d1:fb:5a:d5:66:06:47:f5:f2:3e:c8:ac:50:ed:bc:db:6c:da: 49:66:63:59:e4:95:cf:ab:00:50:ff:0d:b7:d1:fb:7f:21:96: 3d:7a:33:60:73:1f:3f:55:be:f7:35:78:48:b0:b9:7a:86:8b: 80:68:3e:9f:5b:de:10:dc:df:84:a8:4e:f9:4f:8c:8a:09:26: 69:6b:ec:44:cc:11:37:84:3c:98:ef:ae:39:74:ab:7f:b3:d3: 70:da:50:03:b3:b7:12:78:07:b4:ad:54:02:fe:78:4f:39:72: 3a:99:80:6a:74:33:ad:f3:1b:74:26:13:6d:41:ca:85:2f:44: d5:e7:77:1f:17:51:1c:be:83:be:c8:01:95:29:bc:fa:5d:a6: 92:5d:01:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwoVlDZ0nS0BX92VeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk NTcwODA2ZDktY2Y3Yi00ODUzLThlOTAtY2ZlYzAzNDFiZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Jr3hMODCGdSGVoYNCaPkGbIyWXF5U/QX26z y8GhgrLWOd4vwz1+VDzRgf5Z/lMAsy40NXR9D33iRj7AvGgkr3j6yETSOmT2HjtS 31LEgFL5vF32M6Su8yutIBDHdQKP9Ju+Dw3ukshoofb+MJy38sDrHJNzWxHYRFFf NrzSxlauHNlFt0iC0dgcl2pV1gp6+V/OfQUY7aHznFfCyP/HUCzQmVoiO43n3qan yvQRVOB1J4sfuBBe+JRFO/FU94yI6ynlG/7g3urjo2bERK7+3cBbXDTFtdw57cJc DN9Rkzv/kmlFvFCmnZtjtJSo8DAAGtAYUqQJUH+2en2Xl1+o0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPp0l+tQ6OObmh+lJhm3mDIX49WWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTU3MmEwYjEtMWE1Ny0z ZTlmLTliMTUtYjI4NWY0ZWMzZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8kIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6MxqUBoAOg4/HC9ijOsGckfMx/LyglKvnQwuVtfllRQd3pcdPKNE6E JQEGUc7xB0LhKMObLbjTR46bAU1545hQZRuBINV3uwYHFBdopmkOR1XotSHXv/fj lzm4HOBlAAj6mL5yXUcvfhzLh9H7WtVmBkf18j7IrFDtvNts2klmY1nklc+rAFD/ DbfR+38hlj16M2BzHz9Vvvc1eEiwuXqGi4BoPp9b3hDc34SoTvlPjIoJJmlr7ETM ETeEPJjvrjl0q3+z03DaUAOztxJ4B7StVAL+eE85cjqZgGp0M63zG3QmE21ByoUv RNXndx8XURy+g77IAZUpvPpdppJdATM= -----END CERTIFICATE-----Generated at Thu Dec 18 05:48:17 2025 by rpki-client