This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c834a061-9bb2-3d89-a4c4-ad8138352952.roa File: c834a061-9bb2-3d89-a4c4-ad8138352952.roa (raw, json) Hash identifier: E+ZUtVCzFbtC4TRNXdVH51qHVyfU+SVbaaQ9K8Iv2lU= Subject key identifier: 0C:3C:25:6A:0C:8E:F4:4C:F8:A9:7E:24:FC:51:02:83:65:2C:C7:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BFBAB6FE573D70AC67D1B5480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c834a061-9bb2-3d89-a4c4-ad8138352952.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.40.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:6f:e5:73:d7:0a:c6:7d:1b:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=df79743d-f804-4e1c-8d65-f7c6bb312f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ea:4d:fe:f4:11:a0:b9:3a:22:a6:f1:d4:c0: 41:c2:df:e5:42:15:60:b0:43:04:c5:03:82:cc:03: dc:df:c7:e9:3f:07:72:04:b4:75:ce:a1:af:a1:b5: 31:bf:72:3c:1c:6b:cd:7d:d6:cf:5d:b5:1d:08:af: 7d:2a:14:bf:65:64:17:08:57:1f:42:dc:8d:64:8c: 8e:27:a8:b1:ce:4e:db:8c:c6:b0:05:7b:88:91:10: e8:0a:98:bd:ae:50:75:ad:1a:72:da:3b:51:3c:dc: 6d:b7:e2:e6:39:db:61:89:31:5d:9d:2f:33:1a:e3: ef:d9:84:92:87:49:8e:38:81:63:81:06:53:ba:74: bf:85:e0:e6:e2:17:8b:21:94:57:10:6f:ce:ae:49: 73:f9:18:4f:65:f9:86:db:1e:71:2b:23:5e:cb:22: 04:5e:29:ca:88:7d:5f:2c:8d:d3:65:63:a6:63:f1: 36:b3:2e:7b:cb:cd:a8:27:63:97:2f:d3:3f:c3:5f: c2:d3:a9:5c:d9:26:3e:9a:da:8b:37:0a:1c:8e:42: 21:a7:7f:5f:ad:81:74:4c:06:e6:95:18:a8:0b:d8: 97:ff:9e:46:94:22:0b:f3:18:e6:11:44:3f:29:70: 40:34:26:78:2f:75:28:2d:b5:51:d8:a2:2d:b0:4d: 11:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3C:25:6A:0C:8E:F4:4C:F8:A9:7E:24:FC:51:02:83:65:2C:C7:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c834a061-9bb2-3d89-a4c4-ad8138352952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:4d:c2:cb:2b:93:b6:d2:4d:25:74:b0:36:75:dd:3d:bb:d1: f0:84:41:67:2a:96:b2:ba:25:5a:3d:9e:a9:53:c4:ff:42:bb: 71:44:9b:e2:36:3c:a9:1e:be:a5:11:c8:9c:a0:82:28:35:3a: 04:21:ba:eb:b5:9c:a5:74:6e:74:37:92:ec:83:0c:3f:75:1d: 4f:22:81:75:f1:67:26:47:ba:b4:88:7d:07:b0:81:a0:af:dd: 50:32:25:48:9d:94:3d:42:b0:d9:0e:08:b3:87:44:bb:dc:62: 6d:e6:a7:69:ef:c6:0e:09:10:1b:9c:9e:c1:6f:10:e6:0d:a1: 95:ba:b2:a0:80:9c:a8:b4:6c:b6:c1:b0:64:96:02:6a:6e:75: 4b:a6:01:7f:cc:01:f4:97:b0:17:54:e9:9e:52:a9:66:e0:a9: 96:29:a3:10:c7:97:c0:67:ef:96:72:ac:ae:45:f4:8e:92:8f: ef:37:0f:6b:59:36:68:88:d1:79:93:d6:32:04:ac:c3:44:4f: cc:3b:2b:a2:d6:db:eb:28:84:b0:e4:96:3a:52:a1:f4:4a:b3: 70:24:23:f6:b3:18:01:e7:b4:98:25:c7:cd:a7:5d:28:6d:a7: 89:41:de:36:88:53:34:93:7a:38:46:24:8f:b7:1d:4a:eb:89: 37:91:28:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7q2/lc9cKxn0bVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk ZGY3OTc0M2QtZjgwNC00ZTFjLThkNjUtZjdjNmJiMzEyZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5upN/vQRoLk6Iqbx1MBBwt/lQhVgsEMExQOC zAPc38fpPwdyBLR1zqGvobUxv3I8HGvNfdbPXbUdCK99KhS/ZWQXCFcfQtyNZIyO J6ixzk7bjMawBXuIkRDoCpi9rlB1rRpy2jtRPNxtt+LmOdthiTFdnS8zGuPv2YSS h0mOOIFjgQZTunS/heDm4heLIZRXEG/Orklz+RhPZfmG2x5xKyNeyyIEXinKiH1f LI3TZWOmY/E2sy57y82oJ2OXL9M/w1/C06lc2SY+mtqLNwocjkIhp39frYF0TAbm lRioC9iX/55GlCIL8xjmEUQ/KXBANCZ4L3UoLbVR2KItsE0RNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAw8JWoMjvRM+Kl+JPxRAoNlLMeDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzgzNGEwNjEtOWJiMi0z ZDg5LWE0YzQtYWQ4MTM4MzUyOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVNwssrk7bSTSV0sDZ13T270fCEQWcqlrK6JVo9nqlTxP9Cu3FEm+I2 PKkevqURyJyggig1OgQhuuu1nKV0bnQ3kuyDDD91HU8igXXxZyZHurSIfQewgaCv 3VAyJUidlD1CsNkOCLOHRLvcYm3mp2nvxg4JEBucnsFvEOYNoZW6sqCAnKi0bLbB sGSWAmpudUumAX/MAfSXsBdU6Z5SqWbgqZYpoxDHl8Bn75ZyrK5F9I6Sj+83D2tZ NmiI0XmT1jIErMNET8w7K6LW2+sohLDkljpSofRKs3AkI/azGAHntJglx82nXSht p4lB3jaIUzSTejhGJI+3HUrriTeRKHM= -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:54 2025 by rpki-client