This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db1d0917-c699-3454-8c45-6116fe346283.roa File: db1d0917-c699-3454-8c45-6116fe346283.roa (raw, json) Hash identifier: WxmPgvJR3Z38lScn+L7SRHCR/F/QATOdO0OOUvIKpeI= Subject key identifier: 66:55:9A:0A:00:C5:3B:04:58:E3:E0:74:7D:BB:CF:BB:85:70:74:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C3BE117E0D8FA7240076BCFC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db1d0917-c699-3454-8c45-6116fe346283.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.212.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:17:e0:d8:fa:72:40:07:6b:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=3f6b9bbc-4dac-4904-acfe-942293b9d5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:96:b1:cd:43:93:cd:77:b0:31:34:ac:b9: 4d:ff:c9:0a:e1:f5:d5:cb:32:fc:ca:90:8c:0e:10: 00:64:7f:a9:c7:8d:4c:1d:1a:f1:b3:2a:2d:ec:e6: fc:30:10:af:87:7b:ef:55:3f:36:8f:e1:a0:71:0f: 71:f0:5c:b7:d2:c7:81:37:8c:e7:43:28:93:b3:be: 15:bb:90:e5:9a:8d:7d:ae:dc:07:13:ec:88:70:48: a6:55:63:bc:3a:65:b2:c4:61:d9:65:27:ca:f8:e6: b4:c2:9a:8e:02:0e:fd:c3:47:11:7c:24:05:92:23: 7e:86:07:14:4f:45:fb:be:42:42:c6:fe:f5:1f:3d: 65:48:54:0f:2a:01:d4:0e:56:9d:54:4a:ef:f2:d7: 5c:31:27:8b:63:64:a0:08:bc:10:b6:b5:4e:60:07: 68:de:bb:cd:da:8f:1a:73:ab:8b:aa:d0:71:ce:a3: f3:2b:aa:6a:df:61:e9:c1:2a:94:fc:65:cc:83:da: 9d:2d:e0:fb:0a:bc:cb:9f:de:5a:ee:40:a2:38:98: 15:27:4e:7c:20:97:65:21:72:ad:b7:58:4a:4e:50: 7e:08:88:ad:ba:2d:eb:e0:ea:2b:85:17:b7:93:df: 27:bb:14:5b:af:d2:fd:6a:c5:5f:1e:35:53:34:32: e6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:55:9A:0A:00:C5:3B:04:58:E3:E0:74:7D:BB:CF:BB:85:70:74:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db1d0917-c699-3454-8c45-6116fe346283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:2c:29:84:ca:48:23:54:c2:dc:25:1b:e6:5c:4d:ee:ed:49: 08:88:91:de:d4:4c:6d:1b:d9:5f:54:06:c7:e5:7a:8c:a5:b7: d5:8c:c6:3d:c1:d5:0d:b1:22:ac:5b:2d:88:da:df:b6:f4:f8: c6:a7:2a:ab:c1:22:cf:01:51:6b:6a:f7:2a:97:31:1b:13:e9: 3c:fc:53:66:e2:11:20:68:13:b7:07:b8:11:25:9d:1b:3f:29: ec:af:fe:93:68:62:37:f2:6e:37:0b:dd:58:1a:33:ea:eb:41: 07:2a:4c:71:17:25:6d:57:61:93:36:e5:94:f3:23:38:c9:b4: f0:6e:b1:e5:8d:53:bf:ed:e7:54:04:b9:df:4d:80:d4:72:61: 29:61:48:e8:a6:14:f7:a9:b0:93:62:e4:3c:ef:0d:b4:d3:73: 26:f2:88:02:01:e0:d0:69:f0:8b:c3:3d:29:d8:4e:18:f1:d0: 1e:37:0b:ee:71:da:50:18:27:d1:76:b6:6e:5a:1d:c0:b8:04: 13:b2:65:52:16:9e:70:be:bd:b4:83:6f:78:8a:87:49:b8:7f: de:05:53:00:d5:98:44:fe:0c:65:cf:b9:2d:da:b7:9d:a1:e1: c7:1c:76:3e:a0:72:fd:13:3f:e7:ea:1d:23:ef:41:1f:13:73: af:44:31:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74Rfg2PpyQAdrz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk M2Y2YjliYmMtNGRhYy00OTA0LWFjZmUtOTQyMjkzYjlkNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpKWsc1Dk813sDE0rLlN/8kK4fXVyzL8ypCM DhAAZH+px41MHRrxsyot7Ob8MBCvh3vvVT82j+GgcQ9x8Fy30seBN4znQyiTs74V u5Dlmo19rtwHE+yIcEimVWO8OmWyxGHZZSfK+Oa0wpqOAg79w0cRfCQFkiN+hgcU T0X7vkJCxv71Hz1lSFQPKgHUDladVErv8tdcMSeLY2SgCLwQtrVOYAdo3rvN2o8a c6uLqtBxzqPzK6pq32HpwSqU/GXMg9qdLeD7CrzLn95a7kCiOJgVJ058IJdlIXKt t1hKTlB+CIitui3r4OorhRe3k98nuxRbr9L9asVfHjVTNDLmpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZVmgoAxTsEWOPgdH27z7uFcHSnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGIxZDA5MTctYzY5OS0z NDU0LThjNDUtNjExNmZlMzQ2MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9Q4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8sKYTKSCNUwtwlG+ZcTe7tSQiIkd7UTG0b2V9UBsfleoylt9WMxj3B 1Q2xIqxbLYja37b0+ManKqvBIs8BUWtq9yqXMRsT6Tz8U2biESBoE7cHuBElnRs/ Keyv/pNoYjfybjcL3VgaM+rrQQcqTHEXJW1XYZM25ZTzIzjJtPBuseWNU7/t51QE ud9NgNRyYSlhSOimFPepsJNi5DzvDbTTcybyiAIB4NBp8IvDPSnYThjx0B43C+5x 2lAYJ9F2tm5aHcC4BBOyZVIWnnC+vbSDb3iKh0m4f94FUwDVmET+DGXPuS3at52h 4cccdj6gcv0TP+fqHSPvQR8Tc69EMfE= -----END CERTIFICATE-----Generated at Sun Jan 25 12:54:00 2026 by rpki-client