This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb5e52c5-d095-3976-a3f4-24a2515cea53.roa File: bb5e52c5-d095-3976-a3f4-24a2515cea53.roa (raw, json) Hash identifier: aOkyCegxxNBO5V9jBWkHOjf2WaiN2ph3aYaBZNDH4qw= Subject key identifier: 59:B1:AC:37:59:3C:99:57:35:1A:51:B6:9A:96:9A:2C:00:F7:A6:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BF615EABD5A4CB5B998C413E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb5e52c5-d095-3976-a3f4-24a2515cea53.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 9498 IP address blocks: 23.197.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:ea:bd:5a:4c:b5:b9:98:c4:13:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=9e643e23-5091-48ff-b619-58e0217dff0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2f:53:b2:12:a0:50:17:cd:85:64:7d:24:9e: cc:ef:af:d6:6a:9d:60:cd:10:d4:5c:0c:6f:5a:65: dc:b4:b1:f5:60:5e:61:57:d7:ee:97:75:5f:c6:82: d8:8a:b3:53:8b:d7:a4:71:c0:da:3d:3c:c3:fb:db: 40:7e:4e:88:26:cb:c5:68:0e:26:51:df:80:66:22: 14:cb:5a:ef:78:ff:89:a5:b0:35:6d:8a:66:11:9e: 4b:70:d4:c7:3f:b9:d3:02:5e:c2:8d:34:9e:3b:c3: 33:31:3c:cd:26:fa:99:55:76:45:fe:ca:cc:2f:6c: 98:8e:04:1e:a8:9b:02:67:d1:8d:ed:f7:5e:a2:29: b3:3c:90:34:c2:37:85:10:af:1b:67:0a:6c:24:42: e8:34:79:25:c4:9c:32:1b:38:4b:9a:ad:8b:9d:14: ac:8b:3f:95:13:67:e4:20:1d:df:50:e3:16:5f:5a: dd:bb:0e:58:9e:03:e3:a9:22:e8:fe:62:9e:a1:7a: b9:a8:57:04:12:11:21:49:20:ad:d8:d5:e6:63:7b: 9b:4d:e8:15:01:5b:cb:67:c7:1c:48:eb:77:82:d2: e1:f4:ae:c1:4a:39:de:c3:09:60:6d:84:42:a1:c2: a8:15:de:23:36:00:50:9d:83:a0:c7:6b:06:49:5e: 02:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B1:AC:37:59:3C:99:57:35:1A:51:B6:9A:96:9A:2C:00:F7:A6:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb5e52c5-d095-3976-a3f4-24a2515cea53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:77:a2:3d:a6:4c:97:e0:e2:18:46:9b:59:8c:9e:ba:ce:fe: cb:44:3a:78:a2:29:5d:1b:40:66:b5:a3:5d:99:d5:49:fb:7a: 97:33:20:c9:10:3a:26:d3:32:ba:b4:a1:c3:5f:27:c2:e6:b7: a6:ed:7d:78:6f:f8:02:79:22:32:20:ee:4a:a4:88:1d:3e:78: 67:78:15:7e:f0:a4:45:b1:b7:b8:2c:0d:bb:22:bb:7d:0a:fb: 5d:29:2a:f1:43:41:dc:b1:46:b3:5e:5b:c9:d9:39:cb:87:67: 58:99:dd:cc:4c:37:91:13:41:73:dc:54:76:54:7b:1f:75:2c: 71:44:4c:76:79:4d:33:f5:0c:17:99:e0:82:b0:56:28:d6:2f: 63:a3:a2:cd:2b:d2:50:dd:56:fa:ce:05:4c:f7:f5:80:76:bb: c7:ae:5b:47:ce:ba:1b:f8:10:6f:4a:2f:60:d7:83:af:e2:f9: d1:38:fd:e3:bb:7e:38:9c:47:eb:31:40:ab:6b:e4:01:54:28: 20:fc:5e:97:b8:bd:36:51:43:32:20:e7:f3:ec:71:04:55:c0: 90:0e:10:7a:5b:5a:44:fd:64:89:6e:6a:49:d9:44:db:c6:00: a8:e4:5a:01:c2:a7:6e:38:5a:0c:c9:8d:e7:e4:82:b6:40:41: d5:b6:8d:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2Feq9Wky1uZjEE+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk OWU2NDNlMjMtNTA5MS00OGZmLWI2MTktNThlMDIxN2RmZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi9TshKgUBfNhWR9JJ7M76/Wap1gzRDUXAxv WmXctLH1YF5hV9ful3VfxoLYirNTi9ekccDaPTzD+9tAfk6IJsvFaA4mUd+AZiIU y1rveP+JpbA1bYpmEZ5LcNTHP7nTAl7CjTSeO8MzMTzNJvqZVXZF/srML2yYjgQe qJsCZ9GN7fdeoimzPJA0wjeFEK8bZwpsJELoNHklxJwyGzhLmq2LnRSsiz+VE2fk IB3fUOMWX1rduw5YngPjqSLo/mKeoXq5qFcEEhEhSSCt2NXmY3ubTegVAVvLZ8cc SOt3gtLh9K7BSjnewwlgbYRCocKoFd4jNgBQnYOgx2sGSV4C+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmxrDdZPJlXNRpRtpqWmiwA96aQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmI1ZTUyYzUtZDA5NS0z OTc2LWEzZjQtMjRhMjUxNWNlYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8XYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd3oj2mTJfg4hhGm1mMnrrO/stEOniiKV0bQGa1o12Z1Un7epczIMkQ OibTMrq0ocNfJ8Lmt6btfXhv+AJ5IjIg7kqkiB0+eGd4FX7wpEWxt7gsDbsiu30K +10pKvFDQdyxRrNeW8nZOcuHZ1iZ3cxMN5ETQXPcVHZUex91LHFETHZ5TTP1DBeZ 4IKwVijWL2Ojos0r0lDdVvrOBUz39YB2u8euW0fOuhv4EG9KL2DXg6/i+dE4/eO7 fjicR+sxQKtr5AFUKCD8Xpe4vTZRQzIg5/PscQRVwJAOEHpbWkT9ZIluaknZRNvG AKjkWgHCp244WgzJjefkgrZAQdW2jVA= -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:33 2025 by rpki-client