This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d30dd7e9-e7d6-36b6-8536-7f3b83092f36.roa File: d30dd7e9-e7d6-36b6-8536-7f3b83092f36.roa (raw, json) Hash identifier: w+3H50lJCmPjHVgCAed9s6agC2fNKS3YEinQwCMo1fQ= Subject key identifier: 0B:96:15:D9:71:98:66:97:90:9C:3E:83:ED:5C:6A:D5:B1:24:7C:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C0DD0E8B3156321D0F31F1000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d30dd7e9-e7d6-36b6-8536-7f3b83092f36.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.58.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:e8:b3:15:63:21:d0:f3:1f:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=76c43e15-4be0-4971-8003-4c1ad504e3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:28:cf:5b:e1:84:51:2b:6f:a9:bd:03:8e:83: 85:e2:65:b4:a2:95:bd:b2:b4:27:42:a2:0b:9a:b8: 31:7e:37:46:bb:7e:ab:94:b7:3c:ca:b1:f8:bd:2c: 9d:cc:e0:c2:17:ad:76:f7:59:17:c6:f2:40:67:63: bd:e9:e9:1f:92:a8:fc:64:16:f3:49:38:a1:2f:3f: ca:b2:8b:b3:13:f6:87:e1:9c:41:60:81:a9:2e:d0: 9a:96:16:36:06:1b:1a:66:13:09:e5:49:c2:fe:93: 79:ac:07:f6:b9:79:08:0a:a3:a3:5f:a1:d3:90:a0: cd:18:4b:8f:da:2e:75:da:27:2b:94:f9:51:74:db: fa:3e:c7:a3:bb:03:6a:b4:97:bb:d5:45:25:3e:d0: 1c:98:74:bf:27:de:03:a1:66:ae:54:97:14:2c:53: 0c:f2:71:38:d0:4d:30:30:00:03:5a:b3:a4:a6:37: aa:ea:24:8c:b5:64:47:c7:28:ae:04:b4:16:18:16: ca:09:53:0a:be:2d:c7:a1:18:55:61:44:8d:b5:d3: 78:e0:98:6e:01:c4:ad:4e:bb:5e:b2:30:25:58:a1: a7:45:90:bd:48:77:a4:b4:91:4f:1b:0b:37:73:0d: 07:6c:65:48:91:9f:16:02:ca:f6:10:0e:e9:74:a3: af:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:96:15:D9:71:98:66:97:90:9C:3E:83:ED:5C:6A:D5:B1:24:7C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d30dd7e9-e7d6-36b6-8536-7f3b83092f36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a7:69:d4:b2:8c:55:be:3a:c3:40:d6:3e:60:4f:52:f1:43: 88:6b:ff:11:6c:c1:bc:18:b8:2e:ad:3f:b4:c8:7c:45:16:25: 2d:c5:8e:35:36:1d:cd:8c:6b:3f:8c:12:69:6a:b0:5c:67:2d: 11:5c:9b:f6:bb:65:55:8e:62:79:60:9e:eb:4d:9c:2d:6f:22: ee:21:42:48:0c:92:2d:16:11:7d:ec:4c:bf:8a:07:85:9e:38: 49:b3:50:48:fe:fd:75:90:d3:9f:66:f9:6c:05:0f:2d:71:fe: 1b:06:dc:92:53:c8:20:f1:14:f5:63:6f:94:22:4c:67:6c:f9: d0:aa:ac:7e:7a:d8:d8:2b:c9:c1:3c:f1:2d:98:7b:1c:29:55: 71:82:23:bd:52:b1:66:b2:27:94:a0:be:71:45:79:12:19:eb: c3:64:dc:77:4b:28:23:c7:44:dd:32:f5:97:cd:c5:3e:cb:49: c5:5c:26:c7:48:a1:47:c2:52:ee:fc:44:77:14:99:0d:ab:a7: 02:6e:8f:dc:67:3d:ec:01:98:75:97:95:87:fb:3a:ef:0f:64: 44:65:60:35:1e:35:48:3a:78:61:59:67:cd:af:54:37:6e:04: d6:5a:de:f4:74:64:05:b1:81:d3:86:50:30:0d:93:2a:a1:84: 1f:fb:41:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0OizFWMh0PMfEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk NzZjNDNlMTUtNGJlMC00OTcxLTgwMDMtNGMxYWQ1MDRlM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyjPW+GEUStvqb0DjoOF4mW0opW9srQnQqIL mrgxfjdGu36rlLc8yrH4vSydzODCF61291kXxvJAZ2O96ekfkqj8ZBbzSTihLz/K souzE/aH4ZxBYIGpLtCalhY2BhsaZhMJ5UnC/pN5rAf2uXkICqOjX6HTkKDNGEuP 2i512icrlPlRdNv6PsejuwNqtJe71UUlPtAcmHS/J94DoWauVJcULFMM8nE40E0w MAADWrOkpjeq6iSMtWRHxyiuBLQWGBbKCVMKvi3HoRhVYUSNtdN44JhuAcStTrte sjAlWKGnRZC9SHektJFPGws3cw0HbGVIkZ8WAsr2EA7pdKOvBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuWFdlxmGaXkJw+g+1catWxJHw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDMwZGQ3ZTktZTdkNi0z NmI2LTg1MzYtN2YzYjgzMDkyZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzpZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOnadSyjFW+OsNA1j5gT1LxQ4hr/xFswbwYuC6tP7TIfEUWJS3FjjU2 Hc2Maz+MEmlqsFxnLRFcm/a7ZVWOYnlgnutNnC1vIu4hQkgMki0WEX3sTL+KB4We OEmzUEj+/XWQ059m+WwFDy1x/hsG3JJTyCDxFPVjb5QiTGds+dCqrH562NgrycE8 8S2YexwpVXGCI71SsWayJ5SgvnFFeRIZ68Nk3HdLKCPHRN0y9ZfNxT7LScVcJsdI oUfCUu78RHcUmQ2rpwJuj9xnPewBmHWXlYf7Ou8PZERlYDUeNUg6eGFZZ82vVDdu BNZa3vR0ZAWxgdOGUDANkyqhhB/7QaM= -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:31 2025 by rpki-client