This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caf2a602-fc5a-3652-afc5-bb559f8acfb9.roa File: caf2a602-fc5a-3652-afc5-bb559f8acfb9.roa (raw, json) Hash identifier: W/usgV4BuN+M317H1ukDO956RwEHgGGZ66jFGZXisio= Subject key identifier: 5E:D2:C1:E9:BC:EA:AA:5C:6F:09:D5:D4:FD:65:E9:6E:44:9B:3E:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BC53B26F3C81771E365FD4FA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caf2a602-fc5a-3652-afc5-bb559f8acfb9.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 16625 IP address blocks: 23.10.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:26:f3:c8:17:71:e3:65:fd:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=a19b4f8f-1686-4071-8bc4-a415f0d1ba52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:bd:2d:87:e5:49:7e:5a:4a:2a:34:c4:15: d7:8f:c7:36:b3:bb:44:2e:ba:a4:62:17:33:8f:7a: 4e:ef:98:ce:97:01:b7:fd:ac:d1:3a:90:90:31:ea: 6f:ee:5f:4b:3a:62:9a:45:32:93:68:17:4f:87:9e: 1d:5a:5c:21:e3:a0:cc:fa:b6:7b:44:5b:30:21:1e: d8:66:0d:3e:f2:d4:26:be:87:c2:22:3b:e7:7b:56: 17:3a:e6:ed:a0:96:5a:57:51:c8:7a:a9:d2:f5:18: 15:23:1d:4d:2e:28:67:30:2b:b5:6d:6d:ba:36:8c: 26:9f:65:13:d4:ff:78:90:8a:9c:43:cc:2f:10:b5: 4d:6c:22:f5:a3:dc:e8:d1:b1:e2:18:40:b3:50:00: 3d:33:18:aa:7f:10:aa:c1:1c:9f:0c:c3:82:f1:b9: 70:df:57:1d:56:da:58:c1:80:f4:c6:9e:96:22:7d: 59:9e:88:b4:ac:12:5f:56:3c:6b:02:65:8f:fe:c2: 2d:eb:51:05:d3:cb:29:63:8f:ea:5a:83:b1:ab:3f: 00:1d:a1:14:18:b9:59:0d:d4:89:c6:1c:00:22:5f: cb:21:64:14:f4:cf:3f:01:de:0e:a6:e2:d9:a4:49: 6c:d7:c9:12:84:46:3b:c4:64:b6:69:2e:c2:b5:d8: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D2:C1:E9:BC:EA:AA:5C:6F:09:D5:D4:FD:65:E9:6E:44:9B:3E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caf2a602-fc5a-3652-afc5-bb559f8acfb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.10.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:1b:0d:48:12:b5:7d:95:43:0f:3c:9e:a5:41:3f:af:e3:22: ac:f8:03:9d:77:3f:30:27:06:68:61:a3:b7:fe:9c:b2:61:c2: 74:1b:50:c3:ae:d5:f4:3d:96:a8:bc:eb:a3:1b:aa:92:5d:cb: cc:9e:93:38:f1:a0:04:a0:d1:57:d0:a0:fb:e0:60:d8:37:14: 8d:26:7a:d0:67:b2:35:9c:36:41:4d:d7:54:22:64:8b:4d:c4: e2:9c:ae:27:c5:dc:9e:73:29:45:9c:84:90:ee:75:35:6c:6c: 38:96:bc:87:0e:91:ff:af:8c:0a:53:e4:23:5b:55:1f:5f:21: f1:04:6b:36:ba:98:39:78:e5:83:46:f4:af:f1:eb:1e:23:31: b1:e4:dc:84:21:50:29:ce:71:8e:bb:e6:5a:58:6c:75:79:27: 33:69:7f:f8:12:91:d5:26:60:96:ea:ca:f3:87:f8:83:d7:07: 63:c2:30:69:84:f5:d0:38:e9:66:d9:d3:a9:90:4d:ac:95:53: 14:86:ac:30:d8:4c:70:3c:7d:41:14:d0:7d:58:3e:df:b7:e8: 22:5a:fc:2b:37:4c:d5:04:70:2b:bf:4e:1e:49:1c:c1:86:5c: 70:56:ce:df:37:f5:cf:7e:d1:92:a3:4f:dd:af:75:83:20:85: 11:c4:ec:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOybzyBdx42X9T6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YTE5YjRmOGYtMTY4Ni00MDcxLThiYzQtYTQxNWYwZDFiYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI+9LYflSX5aSio0xBXXj8c2s7tELrqkYhcz j3pO75jOlwG3/azROpCQMepv7l9LOmKaRTKTaBdPh54dWlwh46DM+rZ7RFswIR7Y Zg0+8tQmvofCIjvne1YXOubtoJZaV1HIeqnS9RgVIx1NLihnMCu1bW26Nowmn2UT 1P94kIqcQ8wvELVNbCL1o9zo0bHiGECzUAA9MxiqfxCqwRyfDMOC8blw31cdVtpY wYD0xp6WIn1Znoi0rBJfVjxrAmWP/sIt61EF08spY4/qWoOxqz8AHaEUGLlZDdSJ xhwAIl/LIWQU9M8/Ad4OpuLZpEls18kShEY7xGS2aS7CtdjR7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7Swem86qpcbwnV1P1l6W5Emz49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2FmMmE2MDItZmM1YS0z NjUyLWFmYzUtYmI1NTlmOGFjZmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYbDUgStX2VQw88nqVBP6/jIqz4A513PzAnBmhho7f+nLJhwnQbUMOu 1fQ9lqi866MbqpJdy8yekzjxoASg0VfQoPvgYNg3FI0metBnsjWcNkFN11QiZItN xOKcrifF3J5zKUWchJDudTVsbDiWvIcOkf+vjApT5CNbVR9fIfEEaza6mDl45YNG 9K/x6x4jMbHk3IQhUCnOcY675lpYbHV5JzNpf/gSkdUmYJbqyvOH+IPXB2PCMGmE 9dA46WbZ06mQTayVUxSGrDDYTHA8fUEU0H1YPt+36CJa/Cs3TNUEcCu/Th5JHMGG XHBWzt839c9+0ZKjT92vdYMghRHE7Js= -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:30 2025 by rpki-client