This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a8528e-3838-3b6a-8c91-cb48849a1fbe.roa File: d5a8528e-3838-3b6a-8c91-cb48849a1fbe.roa (raw, json) Hash identifier: yarVqb0FORG4PHE+T1sJpFVx+2vZfWrbs4GfukZMtIg= Subject key identifier: 28:D6:48:A0:F9:A1:6E:84:57:FC:B6:3F:E5:9D:44:48:7D:86:23:FC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BEF1B43CADB3CE8907BBD4540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a8528e-3838-3b6a-8c91-cb48849a1fbe.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 16625 IP address blocks: 23.33.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:43:ca:db:3c:e8:90:7b:bd:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=db61772e-19a8-446e-bc02-fe9a7739c0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:62:c3:19:be:63:89:64:cf:13:c8:d3:92:15: fa:88:31:23:68:bd:c1:7f:39:15:a4:04:e3:6a:de: 8f:10:fe:1e:7e:6c:b4:e4:6a:79:d9:41:d7:22:9b: 91:e5:4e:6f:dd:ee:88:96:fe:21:7b:ee:8f:f1:56: ab:91:67:47:8b:2c:95:cc:bd:af:32:52:95:19:f4: 24:51:ca:bc:3e:05:79:52:45:90:b0:80:5e:ba:07: d6:de:06:37:05:0b:d2:a0:df:24:54:8a:8d:c7:6c: 60:c4:4e:f6:d1:41:bd:66:6f:5b:1c:5c:f7:70:9e: 73:49:e7:9e:ad:e2:70:26:8b:b8:48:e2:a9:36:1b: 7e:cb:43:68:96:52:9d:97:1a:e1:96:a3:b5:2e:3c: 37:55:19:c9:d1:3f:11:d6:b6:82:bf:d2:9f:5f:16: 2b:9c:57:b0:68:52:0f:30:57:f5:40:06:3b:8a:30: d4:37:00:e9:bc:db:90:fb:15:55:be:d0:80:1f:b5: 44:eb:0d:6a:f8:63:6a:5c:f7:26:19:8f:7d:a1:3f: 11:e0:d3:f1:94:ff:e1:29:aa:3e:ee:06:a9:a9:39: 56:67:cb:dd:64:8c:9b:a4:33:37:ce:ac:ab:6a:ca: a8:a6:0e:42:15:41:c8:40:62:6f:3a:60:3e:e1:e7: 89:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D6:48:A0:F9:A1:6E:84:57:FC:B6:3F:E5:9D:44:48:7D:86:23:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a8528e-3838-3b6a-8c91-cb48849a1fbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b5:15:9e:94:c9:96:ad:df:64:d4:41:28:9b:5c:3e:29:5a: 65:50:c4:53:7e:ae:53:ee:b2:af:9e:42:a9:34:dc:73:81:f8: 4d:0b:0a:53:64:cb:8f:63:6e:01:83:42:e0:75:bb:32:9c:c7: 5c:a5:bd:82:88:6e:66:90:20:9f:88:25:cf:02:0c:e2:af:42: 3c:69:fb:50:9f:61:39:45:b4:b3:f9:36:58:1f:26:f1:45:ba: c1:18:44:f3:81:e4:d5:c9:b9:ad:2f:41:3f:5c:ba:bc:c7:8d: ad:13:84:48:b7:81:d0:76:f5:74:94:45:86:1c:87:30:69:75: eb:1d:b5:32:55:4f:9c:1b:f7:fd:f5:28:be:c9:3e:80:02:68: 94:fc:52:9c:35:e6:33:16:c1:0a:1d:b4:01:02:c0:a1:13:24: 48:1f:0c:fd:ab:c6:59:62:5e:8c:fd:0a:16:a5:28:a2:6e:fa: b3:bb:1e:bc:68:32:85:d8:60:f9:13:27:19:6c:4c:c0:b7:c4: 42:ce:bd:bb:a5:a3:de:52:5f:24:07:c9:c7:50:1f:ab:15:b9: 73:56:ee:9f:29:d3:08:15:0c:89:63:53:db:b1:61:95:e0:18: 1d:40:62:d1:e4:6d:bb:53:7e:6d:4b:88:5e:38:53:b1:b6:47: 00:97:6a:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvG0PK2zzokHu9RUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk ZGI2MTc3MmUtMTlhOC00NDZlLWJjMDItZmU5YTc3MzljMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2LDGb5jiWTPE8jTkhX6iDEjaL3BfzkVpATj at6PEP4efmy05Gp52UHXIpuR5U5v3e6Ilv4he+6P8VarkWdHiyyVzL2vMlKVGfQk Ucq8PgV5UkWQsIBeugfW3gY3BQvSoN8kVIqNx2xgxE720UG9Zm9bHFz3cJ5zSeee reJwJou4SOKpNht+y0NollKdlxrhlqO1Ljw3VRnJ0T8R1raCv9KfXxYrnFewaFIP MFf1QAY7ijDUNwDpvNuQ+xVVvtCAH7VE6w1q+GNqXPcmGY99oT8R4NPxlP/hKao+ 7gapqTlWZ8vdZIybpDM3zqyrasqopg5CFUHIQGJvOmA+4eeJTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjWSKD5oW6EV/y2P+WdREh9hiP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVhODUyOGUtMzgzOC0z YjZhLThjOTEtY2I0ODg0OWExZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHq1FZ6UyZat32TUQSibXD4pWmVQxFN+rlPusq+eQqk03HOB+E0LClNk y49jbgGDQuB1uzKcx1ylvYKIbmaQIJ+IJc8CDOKvQjxp+1CfYTlFtLP5NlgfJvFF usEYRPOB5NXJua0vQT9curzHja0ThEi3gdB29XSURYYchzBpdesdtTJVT5wb9/31 KL7JPoACaJT8Upw15jMWwQodtAECwKETJEgfDP2rxlliXoz9ChalKKJu+rO7Hrxo MoXYYPkTJxlsTMC3xELOvbulo95SXyQHycdQH6sVuXNW7p8p0wgVDIljU9uxYZXg GB1AYtHkbbtTfm1LiF44U7G2RwCXatQ= -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:09 2025 by rpki-client