This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de345a0e-9c84-3ebf-9914-74409a3f0a52.roa File: de345a0e-9c84-3ebf-9914-74409a3f0a52.roa (raw, json) Hash identifier: mm/kV2q7dAIKSJbhdhfS8IzV3Iu0LyyOhV+Ji4N4aw0= Subject key identifier: 35:A9:2F:C8:D6:2C:72:C7:97:F5:7B:D5:E4:90:0F:58:5B:47:DB:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C0DD0D3C3E11E2BDE0F4A9900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de345a0e-9c84-3ebf-9914-74409a3f0a52.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 16625 IP address blocks: 23.55.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:d3:c3:e1:1e:2b:de:0f:4a:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=8d06d918-6ed4-441c-99d6-deb8c8473ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:bb:fc:49:80:e2:3f:27:cf:71:09:70:8d: 0c:b1:44:50:76:1b:f1:4f:75:a3:00:2a:d1:20:59: 5d:91:7e:90:5b:73:70:74:c7:72:a3:79:55:e9:19: d8:8a:33:57:ce:74:a8:07:a0:ee:7c:4b:75:6f:8c: 59:ca:19:be:1f:2b:25:4b:96:ce:53:3f:dc:af:f4: 3f:90:77:50:b8:ac:dd:b0:57:47:1d:3f:bf:c4:62: 55:4d:12:0f:ac:f5:cf:6d:14:a2:1b:23:15:0c:3d: c3:7b:fb:c1:c4:95:30:45:0a:f0:f0:6a:31:86:d7: e4:c4:c3:50:09:2f:03:d1:67:80:31:48:3c:24:d4: 11:f9:42:27:db:22:6b:aa:d7:3e:6a:01:20:50:bf: cb:07:3c:71:b1:2a:32:37:6b:ae:e2:0a:a6:e8:6e: 64:cb:46:68:8f:97:12:d2:88:5a:49:e4:4b:f1:00: 7c:2f:51:06:ad:ab:6a:80:f1:f2:2b:6d:0b:43:ad: d5:1b:bf:0d:20:82:2c:a9:0a:1c:5b:be:b4:74:c4: 09:59:76:86:35:2b:89:27:bc:16:d1:54:48:8c:91: 2e:24:42:80:0d:48:6c:4f:8f:a9:c9:65:03:72:1d: 42:1a:2d:8b:97:66:1b:ec:52:b6:b8:50:99:dc:60: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A9:2F:C8:D6:2C:72:C7:97:F5:7B:D5:E4:90:0F:58:5B:47:DB:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de345a0e-9c84-3ebf-9914-74409a3f0a52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.55.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f6:1f:d3:a7:88:e5:da:7a:c9:20:e7:e5:7e:d4:9a:2d:60: 4f:59:8c:0a:1e:e4:88:8a:bb:2b:f3:c0:27:06:c7:34:d3:0d: 24:d0:7c:4a:b7:20:82:2c:fa:3e:d6:f4:57:9c:ef:49:11:b0: a8:49:5a:72:e6:4e:f2:64:e1:ab:b0:50:40:3c:26:84:1e:ab: bb:a2:1c:25:60:0f:7a:fa:49:11:d3:bb:fd:f5:7a:a6:86:c7: c7:da:55:21:7f:dd:1c:4b:a6:2b:3a:d5:2f:d7:10:c7:fa:2d: 75:2a:0d:9b:6b:6f:ca:29:5f:39:e7:41:1a:0d:77:5e:5a:d1: 67:60:78:f9:ea:92:54:03:dc:38:67:30:91:2f:cd:68:b7:e9: 21:0c:d2:1b:c1:52:80:3b:cb:8a:cb:77:6e:4d:1e:54:d9:be: d3:47:03:23:95:be:f6:7b:3f:90:fd:0b:aa:69:c1:92:3e:3a: db:f3:4c:66:dd:64:57:ff:74:e9:66:94:ca:bc:5b:78:df:e8: 8e:ee:53:3d:c3:9e:71:97:30:64:36:3b:3b:6c:33:dc:76:5f: 20:10:a6:19:1c:a7:c4:bd:dd:7a:e3:73:16:b9:93:07:e6:af: f1:16:d6:06:8c:7f:e1:3d:09:5e:f7:7d:4b:53:8c:a6:95:40: 2e:64:76:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0NPD4R4r3g9KmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk OGQwNmQ5MTgtNmVkNC00NDFjLTk5ZDYtZGViOGM4NDczZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3y7/EmA4j8nz3EJcI0MsURQdhvxT3WjACrR IFldkX6QW3NwdMdyo3lV6RnYijNXznSoB6DufEt1b4xZyhm+HyslS5bOUz/cr/Q/ kHdQuKzdsFdHHT+/xGJVTRIPrPXPbRSiGyMVDD3De/vBxJUwRQrw8GoxhtfkxMNQ CS8D0WeAMUg8JNQR+UIn2yJrqtc+agEgUL/LBzxxsSoyN2uu4gqm6G5ky0Zoj5cS 0ohaSeRL8QB8L1EGratqgPHyK20LQ63VG78NIIIsqQocW760dMQJWXaGNSuJJ7wW 0VRIjJEuJEKADUhsT4+pyWUDch1CGi2Ll2Yb7FK2uFCZ3GAo3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWpL8jWLHLHl/V71eSQD1hbR9sNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGUzNDVhMGUtOWM4NC0z ZWJmLTk5MTQtNzQ0MDlhM2YwYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI72H9OniOXaeskg5+V+1JotYE9ZjAoe5IiKuyvzwCcGxzTTDSTQfEq3 IIIs+j7W9Fec70kRsKhJWnLmTvJk4auwUEA8JoQeq7uiHCVgD3r6SRHTu/31eqaG x8faVSF/3RxLpis61S/XEMf6LXUqDZtrb8opXznnQRoNd15a0WdgePnqklQD3Dhn MJEvzWi36SEM0hvBUoA7y4rLd25NHlTZvtNHAyOVvvZ7P5D9C6ppwZI+OtvzTGbd ZFf/dOlmlMq8W3jf6I7uUz3DnnGXMGQ2OztsM9x2XyAQphkcp8S93Xrjcxa5kwfm r/EW1gaMf+E9CV73fUtTjKaVQC5kdso= -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:11 2025 by rpki-client