This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa File: dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa (raw, json) Hash identifier: YxRqioEHho8rNlp5ZvSypGrp325StgzWgVbbOuufOU8= Subject key identifier: CF:D5:BE:05:13:E7:51:8A:EF:EA:88:77:5C:4D:18:00:E2:3A:47:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C39165BB2BFD83353321EC13C Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.204.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:5b:b2:bf:d8:33:53:32:1e:c1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=9b503eed-8ab3-457a-bbd4-a7bb1530bab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e7:b2:b7:52:f1:3b:43:f4:0a:81:f8:81:16: 6a:89:81:6a:d8:84:6a:f7:fb:69:0a:fc:a6:a8:b8: d1:52:de:ef:59:d3:36:39:a5:5b:04:73:f5:d0:8f: 65:8c:05:bd:3e:d0:33:73:d1:a1:7d:09:47:4b:e3: 22:f7:3b:d6:ec:ea:91:0a:f3:a4:04:56:77:5a:19: 2a:6a:95:cf:90:60:a3:60:39:86:0e:e6:0d:75:c2: c6:6a:69:5f:e1:88:ea:8b:2e:eb:5c:3e:1f:7a:35: 62:27:48:92:b3:e7:d9:58:e1:5c:b4:8c:23:e3:a9: 5b:b4:5e:fc:8b:0f:77:e3:53:17:53:d5:5b:96:53: 40:cc:ec:f4:53:37:42:be:4d:ca:7f:0e:ed:1f:82: 54:1a:98:2d:4f:6d:29:16:cb:51:e8:fa:66:c7:52: 41:37:22:5f:60:41:c3:68:26:b5:95:fb:ac:02:62: 2f:19:52:c2:22:df:c9:bd:9d:86:0b:fa:ca:5c:cf: c3:a7:60:b3:92:91:ce:66:e1:c1:cd:a4:a2:4b:92: 1b:12:8c:b7:44:98:74:52:e6:6d:2a:2c:33:87:2d: fa:e7:f8:7c:f0:13:16:6a:04:49:fa:75:59:a7:d0: 49:8a:f7:7a:37:4b:4c:3d:e9:ce:72:ff:3b:73:ca: 97:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D5:BE:05:13:E7:51:8A:EF:EA:88:77:5C:4D:18:00:E2:3A:47:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1d:3e:7f:68:a4:7f:83:78:3a:03:84:93:fb:b7:31:3b:a5: e3:03:82:09:5d:6a:cd:91:23:ef:df:b3:13:35:60:7a:bc:87: 6c:63:16:75:dd:5e:d0:5b:75:c0:b5:09:84:0a:0b:d4:3a:77: 27:41:e2:b0:4a:29:e3:df:21:98:59:6a:f6:9d:ef:79:b4:24: ee:37:e5:26:f6:33:04:49:50:e3:4e:c5:71:3e:dd:ad:7f:81: 93:fe:f5:4b:b0:fc:e5:a5:03:db:f0:68:c0:fb:47:b3:b3:2d: 92:ab:c9:c1:1d:01:85:ca:e7:e0:17:43:6e:30:8a:fb:46:8b: 1d:e3:cf:c0:6a:18:cb:d7:c8:25:59:79:cf:8b:0b:4d:a3:f6: 63:b1:83:86:bf:9f:ec:2c:29:9e:0d:d1:98:65:77:66:3c:c8: 3b:cb:6f:df:8c:f5:62:55:e2:23:b5:12:6e:3b:21:c0:a9:98: 7e:bd:12:68:78:c1:74:66:16:f0:a2:a9:05:0d:88:ae:e2:27: 22:d9:eb:4f:10:c3:28:9e:be:a3:14:ea:45:29:64:82:e7:a6: 05:a5:62:0e:3b:20:dc:87:d9:2b:da:0d:50:2a:b3:ef:81:89: cf:90:6b:50:17:11:16:84:6c:00:c4:61:41:31:1d:13:60:74: 59:4f:43:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5Fluyv9gzUzIewTwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk OWI1MDNlZWQtOGFiMy00NTdhLWJiZDQtYTdiYjE1MzBiYWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgueyt1LxO0P0CoH4gRZqiYFq2IRq9/tpCvym qLjRUt7vWdM2OaVbBHP10I9ljAW9PtAzc9GhfQlHS+Mi9zvW7OqRCvOkBFZ3Whkq apXPkGCjYDmGDuYNdcLGamlf4Yjqiy7rXD4fejViJ0iSs+fZWOFctIwj46lbtF78 iw9341MXU9VbllNAzOz0UzdCvk3Kfw7tH4JUGpgtT20pFstR6Ppmx1JBNyJfYEHD aCa1lfusAmIvGVLCIt/JvZ2GC/rKXM/Dp2CzkpHOZuHBzaSiS5IbEoy3RJh0UuZt Kiwzhy365/h88BMWagRJ+nVZp9BJivd6N0tMPenOcv87c8qXDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/VvgUT51GK7+qId1xNGADiOkfOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFmY2FjMWEtMTRmMi0z YjFlLTk5NDMtMGI3ZjQ3YzQzMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsdPn9opH+DeDoDhJP7tzE7peMDggldas2RI+/fsxM1YHq8h2xjFnXd XtBbdcC1CYQKC9Q6dydB4rBKKePfIZhZavad73m0JO435Sb2MwRJUONOxXE+3a1/ gZP+9Uuw/OWlA9vwaMD7R7OzLZKrycEdAYXK5+AXQ24wivtGix3jz8BqGMvXyCVZ ec+LC02j9mOxg4a/n+wsKZ4N0Zhld2Y8yDvLb9+M9WJV4iO1Em47IcCpmH69Emh4 wXRmFvCiqQUNiK7iJyLZ608QwyievqMU6kUpZILnpgWlYg47INyH2SvaDVAqs++B ic+Qa1AXERaEbADEYUExHRNgdFlPQ8E= -----END CERTIFICATE-----Generated at Thu Dec 18 09:10:17 2025 by rpki-client