This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbecf14b-d485-37f5-924c-359909341294.roa File: dbecf14b-d485-37f5-924c-359909341294.roa (raw, json) Hash identifier: +OZ6sw1MsgHiJ+gNGOigruVeuC/dGH6nSyxdhGsy/L4= Subject key identifier: 1C:CA:C0:D3:43:F8:B9:D2:06:C4:24:2B:F3:55:6A:50:60:95:CA:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BEF1B443523845549B7938000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbecf14b-d485-37f5-924c-359909341294.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 20940 IP address blocks: 23.34.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:44:35:23:84:55:49:b7:93:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=0414ba17-a942-4a90-8819-0b4525b12af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c8:3a:f7:65:94:9f:34:75:ef:b3:bc:72:64: 70:fb:17:75:db:bc:4d:6b:de:5c:bb:78:9a:4e:16: 11:79:8e:50:72:cd:0e:f3:24:d4:38:a7:96:07:b9: df:9c:48:a8:af:9e:86:1a:09:07:14:dd:25:1e:1b: 11:e9:58:68:fc:75:1f:57:78:cf:5c:f5:9a:2f:06: ae:8e:49:f1:4f:50:64:94:a5:85:f6:35:f3:ea:a2: 75:4f:16:e6:bc:54:6d:01:3f:99:db:7e:c2:31:9a: d4:5c:39:84:dc:17:d1:dc:b5:93:c3:4f:b1:5f:11: bd:10:5a:89:d7:37:62:be:ef:e3:87:25:6f:13:34: 81:a8:4a:38:d0:65:a7:55:3a:86:69:65:fa:99:73: 44:65:c7:78:e4:b6:5e:e0:35:fd:8e:f3:bc:95:b9: 11:cd:ed:ac:1c:18:e9:a0:e7:66:74:70:79:7a:df: 20:48:b0:29:91:65:69:c7:e2:48:93:82:18:bc:ee: 75:38:e2:35:ed:f6:a3:2c:ac:3d:f5:5a:6b:06:27: e0:90:51:dd:8f:6d:8d:df:c3:ed:fa:7e:c5:28:4f: 65:c3:c2:29:ad:c9:36:87:54:0f:fd:9a:88:30:12: b0:b8:00:02:37:fb:db:80:eb:ba:4f:7a:a3:e9:36: b6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CA:C0:D3:43:F8:B9:D2:06:C4:24:2B:F3:55:6A:50:60:95:CA:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbecf14b-d485-37f5-924c-359909341294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:21:bc:58:2d:43:e8:93:bd:22:63:88:d2:af:f0:4a:63:13: 77:a7:97:25:4d:d5:5a:a3:15:f9:37:a6:b7:10:f8:90:16:bb: e1:c6:56:8c:3d:c0:a2:b0:0c:2f:66:b2:34:8c:15:90:24:40: 52:c1:d9:d6:f6:98:75:49:94:d4:d5:9a:4e:1e:1d:74:77:0c: e5:84:8a:f2:a3:36:d8:d0:de:93:c6:42:f2:7e:ad:8b:d8:f0: d1:28:22:e5:3d:33:ce:e9:95:8a:93:07:e7:67:73:6b:e3:d1: ed:35:54:b9:f7:5a:dc:c1:23:bf:08:26:4a:65:f8:d6:cf:a2: 18:de:a8:5b:d9:75:84:86:38:42:ea:81:76:a4:c2:96:cb:04: e6:bb:ef:8f:27:85:c2:47:de:78:ef:f7:34:14:54:98:c5:db: 0a:04:d4:03:56:0e:17:0b:c8:d5:c7:61:e6:2f:9c:fe:a0:49: 35:fb:f7:5a:7c:66:da:fd:7b:77:d8:12:aa:83:30:30:2a:30: 64:af:bf:47:91:e5:ae:07:a1:73:da:1c:e9:ca:9e:4c:f5:c5: 73:b4:71:46:ee:a3:8b:13:8b:60:3d:0c:38:ec:e6:48:a1:3a: 92:12:99:7c:85:6d:cd:49:98:06:6c:b9:af:8f:d6:00:13:a4: d4:e2:8b:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvG0Q1I4RVSbeTgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk MDQxNGJhMTctYTk0Mi00YTkwLTg4MTktMGI0NTI1YjEyYWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsg692WUnzR177O8cmRw+xd127xNa95cu3ia ThYReY5Qcs0O8yTUOKeWB7nfnEior56GGgkHFN0lHhsR6Vho/HUfV3jPXPWaLwau jknxT1BklKWF9jXz6qJ1TxbmvFRtAT+Z237CMZrUXDmE3BfR3LWTw0+xXxG9EFqJ 1zdivu/jhyVvEzSBqEo40GWnVTqGaWX6mXNEZcd45LZe4DX9jvO8lbkRze2sHBjp oOdmdHB5et8gSLApkWVpx+JIk4IYvO51OOI17fajLKw99VprBifgkFHdj22N38Pt +n7FKE9lw8Iprck2h1QP/ZqIMBKwuAACN/vbgOu6T3qj6Ta2sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzKwNND+LnSBsQkK/NValBglcpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJlY2YxNGItZDQ4NS0z N2Y1LTkyNGMtMzU5OTA5MzQxMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyI7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUhvFgtQ+iTvSJjiNKv8EpjE3enlyVN1VqjFfk3prcQ+JAWu+HGVow9 wKKwDC9msjSMFZAkQFLB2db2mHVJlNTVmk4eHXR3DOWEivKjNtjQ3pPGQvJ+rYvY 8NEoIuU9M87plYqTB+dnc2vj0e01VLn3WtzBI78IJkpl+NbPohjeqFvZdYSGOELq gXakwpbLBOa7748nhcJH3njv9zQUVJjF2woE1ANWDhcLyNXHYeYvnP6gSTX791p8 Ztr9e3fYEqqDMDAqMGSvv0eR5a4HoXPaHOnKnkz1xXO0cUbuo4sTi2A9DDjs5kih OpISmXyFbc1JmAZsua+P1gATpNTii8w= -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:56 2025 by rpki-client