This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce0aa800-0332-31ba-b4b0-fc0954cd6e6e.roa File: ce0aa800-0332-31ba-b4b0-fc0954cd6e6e.roa (raw, json) Hash identifier: dmf8ueCB0WHyyKtLKUuUHo9TcSpDCeirUmrHWgJHd6g= Subject key identifier: F1:29:0D:39:D5:8A:0B:91:4B:FA:51:C0:B9:F3:B8:8D:06:0E:02:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BFD10D27633EF94855E4FD640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce0aa800-0332-31ba-b4b0-fc0954cd6e6e.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.43.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:d2:76:33:ef:94:85:5e:4f:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=a41c8ec2-8894-4dce-8a82-30ce86bf443e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:95:02:a9:3b:49:bd:3a:25:49:75:42:8e: d4:14:5b:6f:33:32:43:c6:27:bb:2e:04:73:2e:99: 13:99:c2:99:f2:9d:b2:1e:b0:e1:9a:3b:73:d3:08: 1b:76:bb:57:8a:bf:e0:25:0a:17:27:5c:fd:7d:5f: 71:10:ad:2a:bf:c2:bf:42:9b:a8:76:e7:8c:cf:ca: cf:d3:1d:57:07:6d:56:92:43:ad:3d:8c:d1:8a:67: f4:38:11:66:18:4c:9e:cb:b9:bb:de:0e:d1:51:9b: 0c:b9:ca:3a:8a:ec:8f:fd:f4:12:1a:4d:c2:1b:67: 14:bf:b5:1e:e6:1d:5c:68:58:18:ad:9c:ac:c7:7d: f3:51:97:91:ed:aa:01:d8:d0:73:c9:fe:29:68:27: 64:28:3c:ea:d6:80:40:c1:3f:92:14:b2:02:d3:18: bf:a8:65:94:3e:d4:b5:de:8a:b9:a5:02:2e:bb:db: d9:bb:b5:f7:80:42:0c:b6:3f:fd:a3:80:e2:36:97: f0:54:56:9d:e0:ad:95:48:b9:4f:8d:9d:59:42:72: 4d:43:47:cc:d9:e0:0a:b3:b1:a9:b9:41:7f:fd:94: 0f:87:a4:9c:e4:d4:c9:e2:2e:43:db:c6:53:ab:2a: fa:c1:3d:49:45:60:69:e8:49:9a:9c:60:dd:ca:21: 71:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:29:0D:39:D5:8A:0B:91:4B:FA:51:C0:B9:F3:B8:8D:06:0E:02:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce0aa800-0332-31ba-b4b0-fc0954cd6e6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:af:11:24:a0:ed:d7:f3:15:da:e5:12:96:e5:d7:5d:a3:f7: 88:5f:10:19:42:68:b4:96:b0:a9:88:bf:ad:ec:04:15:92:98: 41:94:7d:ab:e1:6b:6c:52:e5:45:95:8b:43:d3:40:f6:72:29: 4f:81:37:3f:8e:2d:61:f3:6e:10:c0:ea:28:65:14:ab:79:33: 83:af:94:6c:e9:ee:cd:6a:8c:84:52:75:91:e2:fa:2e:e6:d1: f6:15:82:09:6e:dd:27:c5:c6:5f:56:17:b5:f1:3f:ad:18:96: ad:85:54:46:37:ed:66:0c:fe:f4:f4:b9:34:cf:62:d0:61:62: e2:b2:fc:4d:8b:88:05:58:47:f1:4f:76:25:cf:0d:88:6e:93: 5d:78:24:44:7d:cf:35:31:a1:3d:a9:ba:f0:76:20:5b:36:72: 9c:5d:72:10:16:cf:42:42:a6:c2:34:37:e4:0d:1b:70:83:32: eb:8d:fd:84:23:55:a6:14:bc:5b:8d:47:b2:45:c4:5e:73:a7: 77:ad:d9:d6:7f:65:d4:cb:7e:42:05:1c:96:6c:a0:c8:41:ca: 09:70:0a:44:3f:45:6a:ed:dd:d2:f4:0d:67:68:7c:48:4b:5a: d0:56:60:05:47:19:4c:11:08:bb:c9:14:28:11:99:f3:1e:5b: e8:e4:e8:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9ENJ2M++UhV5P1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk YTQxYzhlYzItODg5NC00ZGNlLThhODItMzBjZTg2YmY0NDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqiVAqk7Sb06JUl1Qo7UFFtvMzJDxie7LgRz LpkTmcKZ8p2yHrDhmjtz0wgbdrtXir/gJQoXJ1z9fV9xEK0qv8K/QpuodueMz8rP 0x1XB21WkkOtPYzRimf0OBFmGEyey7m73g7RUZsMuco6iuyP/fQSGk3CG2cUv7Ue 5h1caFgYrZysx33zUZeR7aoB2NBzyf4paCdkKDzq1oBAwT+SFLIC0xi/qGWUPtS1 3oq5pQIuu9vZu7X3gEIMtj/9o4DiNpfwVFad4K2VSLlPjZ1ZQnJNQ0fM2eAKs7Gp uUF//ZQPh6Sc5NTJ4i5D28ZTqyr6wT1JRWBp6EmanGDdyiFxjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEpDTnViguRS/pRwLnzuI0GDgJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2UwYWE4MDAtMDMzMi0z MWJhLWI0YjAtZmMwOTU0Y2Q2ZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyt5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKvESSg7dfzFdrlEpbl112j94hfEBlCaLSWsKmIv63sBBWSmEGUfavh a2xS5UWVi0PTQPZyKU+BNz+OLWHzbhDA6ihlFKt5M4OvlGzp7s1qjIRSdZHi+i7m 0fYVgglu3SfFxl9WF7XxP60Ylq2FVEY37WYM/vT0uTTPYtBhYuKy/E2LiAVYR/FP diXPDYhuk114JER9zzUxoT2puvB2IFs2cpxdchAWz0JCpsI0N+QNG3CDMuuN/YQj VaYUvFuNR7JFxF5zp3et2dZ/ZdTLfkIFHJZsoMhByglwCkQ/RWrt3dL0DWdofEhL WtBWYAVHGUwRCLvJFCgRmfMeW+jk6As= -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:49 2025 by rpki-client