This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf1e3177-28b4-3037-9544-789bed6a62ed.roa File: cf1e3177-28b4-3037-9544-789bed6a62ed.roa (raw, json) Hash identifier: G9Vfsl3voRrKmnj5/bc1fW+nGqKtgtswaCQJwTCXIlE= Subject key identifier: 15:8E:D5:2A:0C:8E:35:7D:C4:FF:35:75:76:E9:E5:7B:A9:D9:27:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BEF1B3C2924E2DF5ED563BA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf1e3177-28b4-3037-9544-789bed6a62ed.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 16625 IP address blocks: 23.33.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:3c:29:24:e2:df:5e:d5:63:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=c3289607-e6d1-4d95-badf-da0cf0bdd79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:84:cf:d9:5a:f6:59:0e:be:4e:d6:9a:33:b2: 43:f8:bd:cb:de:21:78:bc:ad:ab:ca:67:3c:da:f1: 09:aa:32:79:f8:a7:dc:87:b5:ee:11:69:0b:31:b4: 14:07:5a:b0:6a:38:26:e5:33:8b:d0:89:c2:2c:1f: 30:f8:c8:c1:53:fe:d9:32:c3:dc:f7:26:c4:d2:7f: 12:68:5e:8a:94:0c:d9:42:1f:da:e6:0f:27:ff:78: e5:0b:dc:23:fd:0e:70:62:91:2b:af:b0:b1:5b:d5: 09:cb:23:d1:b5:a4:5c:aa:4f:72:5b:af:04:b4:be: 97:e1:1e:73:85:1e:c9:87:4e:10:70:e0:aa:66:db: 6f:5a:3f:53:9b:1d:c1:4d:c3:c3:f5:99:d8:46:45: 6e:82:b3:e8:c4:24:3f:d3:d8:2d:36:f4:67:03:d4: d2:f3:e1:d7:13:08:b4:3e:25:83:bd:6d:f6:b5:ee: 0b:e4:a8:86:18:43:92:0a:7d:d1:ed:da:06:a8:31: 76:07:e6:84:c4:f0:f1:f6:ea:f2:05:03:98:c9:51: ad:35:a4:85:98:2b:b6:5b:e3:2d:47:44:ef:56:29: 2c:eb:1e:45:29:60:05:52:2c:15:15:6d:e2:c9:3e: 98:8d:f2:56:a1:6b:6f:b2:42:0e:36:72:75:db:0f: af:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8E:D5:2A:0C:8E:35:7D:C4:FF:35:75:76:E9:E5:7B:A9:D9:27:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf1e3177-28b4-3037-9544-789bed6a62ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c5:6e:af:ed:88:c3:39:d3:d7:b5:85:37:b2:e7:03:46:b7: c5:0e:af:be:01:1e:d5:a7:99:78:e0:b0:e7:78:3e:19:ea:37: 48:bb:fd:c2:05:c2:33:8b:ec:50:4c:64:f4:c4:69:d5:b0:d4: b1:00:9a:24:8f:9f:3f:82:9e:e9:c3:ed:e6:45:fb:72:8b:1e: ed:94:0c:5a:03:2e:1b:b4:63:67:35:6a:04:3b:dd:6b:5a:b3: e0:94:15:a3:8a:07:b9:f9:8e:b0:48:16:7b:44:b7:b2:69:f0: b6:bf:28:27:31:4b:6d:15:a2:34:3e:bf:76:31:3b:86:42:e2: 8e:ce:cc:0b:f0:cc:0f:4b:04:7c:1b:d5:3b:8e:90:8e:2b:e2: e1:ff:33:e3:63:10:dd:ed:e8:44:04:32:f6:e8:ed:a6:94:3e: 5f:92:d6:5a:d6:56:83:34:a7:20:fd:42:b3:eb:d4:a8:95:8e: 18:82:d3:cb:80:df:5c:3d:cd:e8:1e:3a:9a:ed:db:58:c7:c0: 7a:aa:44:a9:bf:4d:28:46:44:ce:d7:24:1e:d5:8e:bc:a7:26: 0e:7b:c3:64:52:9b:bf:31:b1:7a:ef:bb:c8:0a:2d:2b:f9:5a: 04:85:38:f8:e2:4c:30:c1:b4:c3:71:28:9c:0b:c5:68:1c:fc: af:05:37:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvGzwpJOLfXtVjugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk YzMyODk2MDctZTZkMS00ZDk1LWJhZGYtZGEwY2YwYmRkNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkITP2Vr2WQ6+TtaaM7JD+L3L3iF4vK2rymc8 2vEJqjJ5+Kfch7XuEWkLMbQUB1qwajgm5TOL0InCLB8w+MjBU/7ZMsPc9ybE0n8S aF6KlAzZQh/a5g8n/3jlC9wj/Q5wYpErr7CxW9UJyyPRtaRcqk9yW68EtL6X4R5z hR7Jh04QcOCqZttvWj9Tmx3BTcPD9ZnYRkVugrPoxCQ/09gtNvRnA9TS8+HXEwi0 PiWDvW32te4L5KiGGEOSCn3R7doGqDF2B+aExPDx9uryBQOYyVGtNaSFmCu2W+Mt R0TvViks6x5FKWAFUiwVFW3iyT6YjfJWoWtvskIONnJ12w+vDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWO1SoMjjV9xP81dXbp5Xup2SeuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2YxZTMxNzctMjhiNC0z MDM3LTk1NDQtNzg5YmVkNmE2MmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3Fbq/tiMM509e1hTey5wNGt8UOr74BHtWnmXjgsOd4PhnqN0i7/cIF wjOL7FBMZPTEadWw1LEAmiSPnz+CnunD7eZF+3KLHu2UDFoDLhu0Y2c1agQ73Wta s+CUFaOKB7n5jrBIFntEt7Jp8La/KCcxS20VojQ+v3YxO4ZC4o7OzAvwzA9LBHwb 1TuOkI4r4uH/M+NjEN3t6EQEMvbo7aaUPl+S1lrWVoM0pyD9QrPr1KiVjhiC08uA 31w9zegeOprt21jHwHqqRKm/TShGRM7XJB7VjrynJg57w2RSm78xsXrvu8gKLSv5 WgSFOPjiTDDBtMNxKJwLxWgc/K8FN5s= -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:51 2025 by rpki-client