This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52df3a5-cf00-3386-934e-4736d190dc31.roa File: e52df3a5-cf00-3386-934e-4736d190dc31.roa (raw, json) Hash identifier: XIBUvPLWsxoccuIMxPmxs7Wht1l8AI89Zo9qAHdL1F8= Subject key identifier: 00:21:C7:EC:AC:18:61:B3:BB:85:B0:C3:FD:F3:22:A2:34:83:C9:1A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BEF1B45546AD1D2A7C35754E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52df3a5-cf00-3386-934e-4736d190dc31.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 24203 IP address blocks: 23.35.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:45:54:6a:d1:d2:a7:c3:57:54:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=be6fdee9-2b91-4ece-927c-2b4b33a81faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:32:00:8b:87:db:00:3e:f0:d1:3a:13:6a: 87:da:49:69:5b:2c:e5:44:e2:2f:a3:a2:12:f1:39: 56:63:23:a1:b6:9d:54:38:14:ea:21:2d:12:f5:44: 51:e0:6d:3b:02:f6:c2:48:90:22:e3:1d:e6:60:d0: 57:4b:59:15:7b:bf:a0:bf:7e:ac:1e:0f:14:0c:9a: ec:d2:9b:d6:59:f1:d2:04:d3:e6:d5:f6:eb:dc:17: 8a:3e:13:49:7a:e3:e0:0e:63:e8:25:89:66:4d:ff: 05:00:0a:ae:5d:b8:1d:5b:97:e7:2a:69:2b:6c:10: cf:ad:83:9c:40:45:39:c7:e3:cc:45:c0:03:3c:97: 0c:e1:a2:c6:1f:a0:41:a3:23:5a:a7:50:cd:44:50: 87:f1:32:69:74:94:55:a4:86:6b:e6:b8:36:e6:51: da:ea:de:92:f2:7e:5a:6e:7b:7c:c7:66:1c:35:b0: ad:20:94:a0:76:fd:8f:cb:f4:3c:a5:09:00:33:9b: ff:ff:c7:5c:4d:15:5e:71:95:d6:79:19:22:2c:41: 94:e0:6e:83:fd:94:4a:8d:93:44:68:2d:ab:84:8b: 64:77:f6:60:3e:01:fc:f6:75:78:57:b8:55:67:15: 60:9d:f2:fa:d8:5d:36:7c:12:27:2b:a0:a2:94:7d: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:21:C7:EC:AC:18:61:B3:BB:85:B0:C3:FD:F3:22:A2:34:83:C9:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52df3a5-cf00-3386-934e-4736d190dc31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:4a:6c:9d:ee:24:2e:dc:93:ac:47:89:97:f8:cd:ca:41:63: a2:89:5f:6e:89:83:74:6b:21:96:bd:47:76:d6:43:04:f7:a0: 31:ec:6c:d6:a4:08:68:03:f7:bd:0c:51:bc:9f:04:d7:a3:e4: 88:43:74:7a:10:6e:d6:03:35:59:37:5d:68:54:c0:be:65:7c: 12:ba:b4:c1:ad:00:d8:65:5b:30:94:ae:16:ad:a8:11:62:30: e3:fb:4a:bb:ee:17:db:b2:a0:b6:61:a2:18:ab:9d:ed:38:6e: 2b:42:18:85:df:36:f7:d8:8b:cc:00:26:28:5d:3e:f4:b1:c8: 4b:80:69:33:22:13:f0:5a:a4:e7:8f:42:fb:cc:a2:54:14:99: 0f:46:54:1f:39:1a:c4:a2:02:b1:de:59:04:52:70:f5:e2:d9: 96:87:56:97:e0:95:c4:50:13:bb:9f:d7:d0:04:10:b6:01:3b: 5f:ff:5a:82:48:4f:ce:a0:44:c8:08:87:d8:eb:bd:4e:7d:06: 61:bf:b4:5e:01:7f:cd:d4:9e:fe:fa:f7:5c:75:22:21:80:59: 9c:84:49:b7:f3:92:27:21:a1:b3:0c:66:5b:a9:ed:2d:19:ab: fd:a0:05:b7:44:49:05:4a:f6:0f:ba:2c:8e:af:08:70:86:92: 8e:a7:d2:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvG0VUatHSp8NXVOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk YmU2ZmRlZTktMmI5MS00ZWNlLTkyN2MtMmI0YjMzYTgxZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo54yAIuH2wA+8NE6E2qH2klpWyzlROIvo6IS 8TlWYyOhtp1UOBTqIS0S9URR4G07AvbCSJAi4x3mYNBXS1kVe7+gv36sHg8UDJrs 0pvWWfHSBNPm1fbr3BeKPhNJeuPgDmPoJYlmTf8FAAquXbgdW5fnKmkrbBDPrYOc QEU5x+PMRcADPJcM4aLGH6BBoyNap1DNRFCH8TJpdJRVpIZr5rg25lHa6t6S8n5a bnt8x2YcNbCtIJSgdv2Py/Q8pQkAM5v//8dcTRVecZXWeRkiLEGU4G6D/ZRKjZNE aC2rhItkd/ZgPgH89nV4V7hVZxVgnfL62F02fBInK6CilH1DBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAhx+ysGGGzu4Www/3zIqI0g8kaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTUyZGYzYTUtY2YwMC0z Mzg2LTkzNGUtNDczNmQxOTBkYzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpKbJ3uJC7ck6xHiZf4zcpBY6KJX26Jg3RrIZa9R3bWQwT3oDHsbNak CGgD970MUbyfBNej5IhDdHoQbtYDNVk3XWhUwL5lfBK6tMGtANhlWzCUrhatqBFi MOP7SrvuF9uyoLZhohirne04bitCGIXfNvfYi8wAJihdPvSxyEuAaTMiE/BapOeP QvvMolQUmQ9GVB85GsSiArHeWQRScPXi2ZaHVpfglcRQE7uf19AEELYBO1//WoJI T86gRMgIh9jrvU59BmG/tF4Bf83Unv7691x1IiGAWZyESbfzkichobMMZlup7S0Z q/2gBbdESQVK9g+6LI6vCHCGko6n0lw= -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:49 2025 by rpki-client