This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de27a019-bb5a-3ee6-9585-9b3415713963.roa File: de27a019-bb5a-3ee6-9585-9b3415713963.roa (raw, json) Hash identifier: PH4YuGhrevsx+ENTnM6paaiPFMcQC2Xy/Nx8sDDmpBk= Subject key identifier: 36:DA:D1:B9:5E:55:9B:43:D5:52:0E:3C:33:23:FB:BA:02:93:3D:02 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BFBAB4A0BEA40338CB1F28F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de27a019-bb5a-3ee6-9585-9b3415713963.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 23.33.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:4a:0b:ea:40:33:8c:b1:f2:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=21497caa-f677-48dd-a436-0cef9a1b5f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f6:87:15:b6:b7:f0:83:5e:09:ba:d0:06:3c: 5d:9d:42:90:5e:61:9d:ed:cc:90:75:8c:f3:54:a1: 89:ee:7b:b4:59:89:2d:60:bb:10:5b:02:35:82:cf: a5:9d:8e:02:27:57:ec:9a:92:4a:42:71:1a:c0:10: c7:21:cb:d3:f9:af:0d:6d:5c:73:99:e8:13:bd:bb: 39:13:89:b1:26:47:70:d9:1a:24:59:a8:ce:48:8d: 11:62:c5:b7:0f:dd:56:a1:8b:48:c0:33:85:61:f9: ef:5c:db:08:c9:46:37:a6:aa:c4:8f:e4:20:27:f7: 7a:10:93:20:16:76:5d:2e:80:54:cc:2e:e6:94:28: b4:38:59:82:d7:36:fe:9d:6f:e4:bf:ad:0a:fc:74: ab:47:fb:17:80:69:90:05:65:c3:33:a3:e5:46:90: cd:bc:bf:1a:68:96:6d:f2:2d:55:18:b0:b7:4b:d7: 45:f4:ac:08:d4:57:1a:57:b0:46:7b:ee:65:6d:c1: 5c:0e:55:bc:08:54:f8:28:6d:f9:77:fd:87:04:d1: 31:5e:2a:d4:49:20:10:c0:11:c6:06:c1:01:17:4f: 67:e8:36:80:8f:69:26:e6:60:6f:e1:25:f5:b3:a8: 51:02:4e:bf:e7:2c:33:b4:a4:16:80:5b:45:50:76: f5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DA:D1:B9:5E:55:9B:43:D5:52:0E:3C:33:23:FB:BA:02:93:3D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de27a019-bb5a-3ee6-9585-9b3415713963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:82:f2:d9:fc:f9:6b:8f:ad:c2:ee:66:71:d5:39:26:a4:d6: 71:38:e4:dd:16:4a:a3:a0:58:62:94:23:69:29:81:69:f0:fd: d0:0a:ee:31:1b:08:8d:5b:c5:85:ff:88:bd:77:ea:2b:08:86: ef:cd:a0:58:41:d5:1f:66:b2:12:80:40:af:96:1c:b5:b4:12: 24:28:f9:a0:04:6a:71:71:7a:b9:73:c4:d1:f0:de:d4:dd:98: 05:42:69:e4:fa:60:23:90:c8:54:8c:40:a5:65:f7:c2:e5:36: 12:07:c1:7c:77:04:04:29:8d:79:7c:1c:a4:34:db:7b:4b:3b: 7a:68:03:ce:ed:07:67:54:dc:57:7d:89:d6:af:99:3d:12:9d: 92:ff:44:13:a3:ee:02:f8:92:d5:62:3a:b2:ca:c9:09:e2:6e: 0e:be:3d:dd:42:03:b5:37:dd:76:f5:90:ee:1a:5b:7c:60:3a: 2e:09:2c:70:e3:11:fc:fe:d8:f9:0c:b7:21:e0:82:98:56:7c: 8b:14:d4:ea:c7:98:30:c1:45:e9:43:ce:fe:37:70:6a:7d:93: 20:dc:7e:9c:9c:d6:70:aa:e0:e7:b0:22:6f:b1:1c:0b:e1:69: 5c:0e:05:40:2c:79:43:34:79:c6:82:40:df:99:de:ee:6e:ba: e6:5f:23:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7q0oL6kAzjLHyj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk MjE0OTdjYWEtZjY3Ny00OGRkLWE0MzYtMGNlZjlhMWI1ZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfaHFba38INeCbrQBjxdnUKQXmGd7cyQdYzz VKGJ7nu0WYktYLsQWwI1gs+lnY4CJ1fsmpJKQnEawBDHIcvT+a8NbVxzmegTvbs5 E4mxJkdw2RokWajOSI0RYsW3D91WoYtIwDOFYfnvXNsIyUY3pqrEj+QgJ/d6EJMg FnZdLoBUzC7mlCi0OFmC1zb+nW/kv60K/HSrR/sXgGmQBWXDM6PlRpDNvL8aaJZt 8i1VGLC3S9dF9KwI1FcaV7BGe+5lbcFcDlW8CFT4KG35d/2HBNExXirUSSAQwBHG BsEBF09n6DaAj2km5mBv4SX1s6hRAk6/5ywztKQWgFtFUHb1yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDba0bleVZtD1VIOPDMj+7oCkz0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGUyN2EwMTktYmI1YS0z ZWU2LTk1ODUtOWIzNDE1NzEzOTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCC8tn8+WuPrcLuZnHVOSak1nE45N0WSqOgWGKUI2kpgWnw/dAK7jEb CI1bxYX/iL136isIhu/NoFhB1R9mshKAQK+WHLW0EiQo+aAEanFxerlzxNHw3tTd mAVCaeT6YCOQyFSMQKVl98LlNhIHwXx3BAQpjXl8HKQ023tLO3poA87tB2dU3Fd9 idavmT0SnZL/RBOj7gL4ktViOrLKyQnibg6+Pd1CA7U33Xb1kO4aW3xgOi4JLHDj Efz+2PkMtyHggphWfIsU1OrHmDDBRelDzv43cGp9kyDcfpyc1nCq4OewIm+xHAvh aVwOBUAseUM0ecaCQN+Z3u5uuuZfI8o= -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:12 2025 by rpki-client