This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b62217ee-0525-3fce-82e2-9d7b2f27ae9c.roa File: b62217ee-0525-3fce-82e2-9d7b2f27ae9c.roa (raw, json) Hash identifier: RjFdjFZB5JD+MYeqVa/A8PeF8n9Sq8N6b7Ns6lwnK3k= Subject key identifier: 96:AD:5C:C6:AB:8F:35:40:02:DE:C3:BD:ED:5B:D1:1A:25:3C:B2:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BDCF5CECD89356400D1A0C400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b62217ee-0525-3fce-82e2-9d7b2f27ae9c.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 20940 IP address blocks: 172.235.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:ce:cd:89:35:64:00:d1:a0:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=dc420f01-cccc-4483-baff-c1b9d3e6d980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:0d:1e:bd:4f:04:ac:61:43:fe:3b:7b:91: c1:4d:a4:41:59:a5:e4:1f:7a:3b:40:cf:48:17:d7: 8a:aa:9e:58:3d:10:10:49:bc:d5:b8:e0:0e:4d:16: ef:e4:92:66:16:ea:1d:5f:69:d4:2f:85:3a:6e:37: 84:5c:db:14:9e:7f:e1:2f:29:52:c9:d0:7f:c1:e1: 80:c8:c3:5b:1b:98:e5:51:7e:46:e2:e4:0d:90:3b: 17:e7:40:b4:cb:37:ec:ae:5b:14:b1:37:b8:35:21: f5:46:1f:8b:18:b2:b8:2f:49:06:57:55:75:e6:6a: 79:dd:4f:cf:09:a4:87:55:96:0b:5a:35:4d:73:19: d5:65:ba:06:8b:e5:1c:72:b6:7d:b4:1e:59:b9:56: fe:1f:29:a3:42:19:99:45:51:50:1c:7f:ac:eb:8d: 1b:75:ef:b2:0c:b0:79:06:32:72:bf:0a:24:ec:39: 54:73:88:17:78:f9:1e:cf:eb:ba:3f:b8:6c:52:ff: f4:ae:76:c0:c3:df:e8:e3:3f:09:73:5d:4d:76:6b: 51:41:db:33:34:50:76:b0:fd:75:5b:f5:a8:69:01: 51:3b:4a:91:f4:95:1e:ab:5e:3a:40:68:f9:1d:26: 9f:91:3d:12:78:64:bd:ca:da:5d:e2:2f:6f:e5:ca: f5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AD:5C:C6:AB:8F:35:40:02:DE:C3:BD:ED:5B:D1:1A:25:3C:B2:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b62217ee-0525-3fce-82e2-9d7b2f27ae9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b6:81:73:0d:42:23:cd:69:3b:8f:69:cb:e1:61:5b:26:00: f0:b1:1d:03:4a:27:df:bf:16:45:69:7d:f1:e6:79:fc:79:67: 77:c4:cf:c6:41:7e:ac:29:8b:43:9e:b9:b1:7f:5f:bf:d9:44: e9:e7:1f:30:da:32:f8:62:d2:6d:4d:26:a9:be:48:15:7e:f8: 63:ec:99:96:5c:c2:3e:0c:39:69:9d:90:79:a9:f3:4b:0d:58: 1b:05:46:d0:06:20:f5:fe:34:86:30:3b:da:4d:42:7b:ab:63: ba:f1:12:b0:0e:57:d2:ec:bc:5f:1c:2e:f0:95:27:1e:7d:f7: bf:bf:46:32:ba:fd:86:bb:8f:78:9a:28:e7:0a:bf:71:6e:e2: b2:cd:9b:a0:33:bb:82:33:76:10:3d:53:d7:7f:6e:a9:a0:02: 32:57:88:a6:d6:d9:fa:07:57:ad:c8:17:2e:61:f2:ac:9c:61: 61:33:9c:e8:0b:9c:66:af:7f:ce:52:08:76:e4:8d:c1:74:47: a6:a9:29:66:f6:f3:f2:99:37:02:0d:39:a8:a9:b9:54:a4:65: 83:5a:ea:87:18:1d:8c:b1:fa:a6:21:23:57:ad:32:5f:86:df: 85:88:8f:75:31:d4:3f:1e:3c:a7:c6:50:3f:a2:77:e4:ae:8c: df:d7:77:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9c7NiTVkANGgxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk ZGM0MjBmMDEtY2NjYy00NDgzLWJhZmYtYzFiOWQzZTZkOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjwNHr1PBKxhQ/47e5HBTaRBWaXkH3o7QM9I F9eKqp5YPRAQSbzVuOAOTRbv5JJmFuodX2nUL4U6bjeEXNsUnn/hLylSydB/weGA yMNbG5jlUX5G4uQNkDsX50C0yzfsrlsUsTe4NSH1Rh+LGLK4L0kGV1V15mp53U/P CaSHVZYLWjVNcxnVZboGi+UccrZ9tB5ZuVb+HymjQhmZRVFQHH+s640bde+yDLB5 BjJyvwok7DlUc4gXePkez+u6P7hsUv/0rnbAw9/o4z8Jc11NdmtRQdszNFB2sP11 W/WoaQFRO0qR9JUeq146QGj5HSafkT0SeGS9ytpd4i9v5cr1aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJatXMarjzVAAt7Dve1b0RolPLLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjYyMjE3ZWUtMDUyNS0z ZmNlLTgyZTItOWQ3YjJmMjdhZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe2gXMNQiPNaTuPacvhYVsmAPCxHQNKJ9+/FkVpffHmefx5Z3fEz8ZB fqwpi0OeubF/X7/ZROnnHzDaMvhi0m1NJqm+SBV++GPsmZZcwj4MOWmdkHmp80sN WBsFRtAGIPX+NIYwO9pNQnurY7rxErAOV9LsvF8cLvCVJx5997+/RjK6/Ya7j3ia KOcKv3Fu4rLNm6Azu4IzdhA9U9d/bqmgAjJXiKbW2foHV63IFy5h8qycYWEznOgL nGavf85SCHbkjcF0R6apKWb28/KZNwINOaipuVSkZYNa6ocYHYyx+qYhI1etMl+G 34WIj3Ux1D8ePKfGUD+id+SujN/Xdxk= -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:58 2025 by rpki-client