This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96909b2-99ca-31d9-90ff-7962438db4ab.roa File: c96909b2-99ca-31d9-90ff-7962438db4ab.roa (raw, json) Hash identifier: OQCgjR5pFvqEnQoFqlcoXQBDX94/f/EKlsd6Xin81d8= Subject key identifier: D2:7F:E8:40:BC:0A:42:6D:E6:23:F4:21:32:8E:C2:F2:DA:52:9C:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BEF1B425E0EE04B56A08B1B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96909b2-99ca-31d9-90ff-7962438db4ab.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 20940 IP address blocks: 23.33.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:42:5e:0e:e0:4b:56:a0:8b:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=95081c56-899b-4863-b163-e9c0f0493100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:c5:16:c5:95:e7:a6:06:97:c9:04:99:b9: 44:da:a0:74:41:38:ad:09:dc:63:2e:47:95:80:7b: fc:1b:28:07:f3:27:e1:b0:e3:d5:04:68:10:fb:53: 30:33:59:88:c6:cb:97:fa:59:76:88:7c:91:43:14: e3:10:8b:c0:a4:f6:c3:05:c5:7f:fd:a1:0f:2b:a2: e4:25:9e:3b:f8:c9:b3:dd:79:52:fa:5a:b8:2b:be: 80:df:30:43:32:03:98:7b:99:c1:51:f1:fb:e2:87: 9c:e5:d6:c1:89:be:1c:8f:25:3f:ed:36:aa:23:e1: 58:8e:f0:d3:b5:0a:9a:d7:5a:18:f8:be:1c:88:64: 4c:07:20:04:8b:d5:84:26:8f:61:91:ad:c1:ef:fd: c2:81:52:ca:8d:cb:15:d2:51:2e:75:f3:03:2d:af: f2:e6:bf:4c:58:77:30:c4:9a:06:fc:70:86:83:5d: 4f:a9:39:04:bf:fb:ef:0f:bf:ad:ca:8e:5c:a3:7d: 08:f7:08:7e:06:f8:30:96:c4:0e:67:97:1e:91:8c: fe:1c:31:c3:f9:de:29:20:96:76:aa:fc:78:47:9a: 29:23:62:fd:c8:04:5c:e8:0d:30:53:c7:60:f9:f2: 35:a6:f4:dc:f5:e6:25:85:2b:80:58:24:ce:07:38: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7F:E8:40:BC:0A:42:6D:E6:23:F4:21:32:8E:C2:F2:DA:52:9C:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96909b2-99ca-31d9-90ff-7962438db4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9f:13:97:75:3b:ff:d0:db:2d:15:84:a2:81:9b:73:1e:08: d3:a2:d1:ef:68:c0:2e:a6:36:f2:11:c3:b6:f7:9f:4c:5e:d3: bb:03:9c:26:f4:32:49:f4:8a:7a:84:c1:0b:0a:73:5c:85:c7: 53:40:af:dd:35:43:ba:ab:c8:91:14:f5:1b:70:6c:54:9d:2c: a1:b8:14:83:c4:f8:f6:67:ac:5e:93:7a:e1:cd:b9:87:a0:fc: 73:41:88:e6:b4:39:53:d5:45:e8:9f:85:cf:45:a7:84:0c:78: 05:5b:50:59:93:bc:0a:f1:03:49:31:7b:24:5f:6b:87:07:09: d8:51:09:42:f1:3b:a4:2f:dc:77:c7:38:8b:6b:c9:5d:59:00: 95:44:8c:02:5e:37:4b:c6:2a:80:de:fc:6c:a8:2a:f8:5c:aa: 74:5b:88:51:d5:63:09:e3:ce:4e:ae:09:b0:96:ad:92:a0:dd: 70:1e:cc:97:af:42:d3:26:c0:b7:a6:b4:cf:c5:5b:b4:83:73: ce:c4:da:79:b3:30:ea:7e:24:e7:6f:98:c1:d1:51:2b:30:34: df:6b:21:07:e7:2e:4f:5f:af:86:c3:53:91:6d:05:2a:2b:d3: 7a:fd:bb:58:67:84:ae:71:5f:50:cc:cc:18:ce:d8:95:df:40: e4:af:0c:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvG0JeDuBLVqCLGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk OTUwODFjNTYtODk5Yi00ODYzLWIxNjMtZTljMGYwNDkzMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9LFFsWV56YGl8kEmblE2qB0QTitCdxjLkeV gHv8GygH8yfhsOPVBGgQ+1MwM1mIxsuX+ll2iHyRQxTjEIvApPbDBcV//aEPK6Lk JZ47+Mmz3XlS+lq4K76A3zBDMgOYe5nBUfH74oec5dbBib4cjyU/7TaqI+FYjvDT tQqa11oY+L4ciGRMByAEi9WEJo9hka3B7/3CgVLKjcsV0lEudfMDLa/y5r9MWHcw xJoG/HCGg11PqTkEv/vvD7+tyo5co30I9wh+BvgwlsQOZ5cekYz+HDHD+d4pIJZ2 qvx4R5opI2L9yARc6A0wU8dg+fI1pvTc9eYlhSuAWCTOBzjGJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJ/6EC8CkJt5iP0ITKOwvLaUpzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzk2OTA5YjItOTljYS0z MWQ5LTkwZmYtNzk2MjQzOGRiNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyfE5d1O//Q2y0VhKKBm3MeCNOi0e9owC6mNvIRw7b3n0xe07sDnCb0 Mkn0inqEwQsKc1yFx1NAr901Q7qryJEU9RtwbFSdLKG4FIPE+PZnrF6TeuHNuYeg /HNBiOa0OVPVReifhc9Fp4QMeAVbUFmTvArxA0kxeyRfa4cHCdhRCULxO6Qv3HfH OItryV1ZAJVEjAJeN0vGKoDe/GyoKvhcqnRbiFHVYwnjzk6uCbCWrZKg3XAezJev QtMmwLemtM/FW7SDc87E2nmzMOp+JOdvmMHRUSswNN9rIQfnLk9fr4bDU5FtBSor 03r9u1hnhK5xX1DMzBjO2JXfQOSvDCY= -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:52 2025 by rpki-client