This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7885e25-feb1-3a2f-966f-5b007db92f39.roa File: e7885e25-feb1-3a2f-966f-5b007db92f39.roa (raw, json) Hash identifier: EXRr/+ybKv7qM2QlkrG7nLqh6R17KgIP6K58i52oWLI= Subject key identifier: 2E:32:23:E4:10:D0:40:D4:FC:2A:25:9A:F4:44:5B:D4:37:F2:04:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C50D170C7B91D4EC5FD54DC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7885e25-feb1-3a2f-966f-5b007db92f39.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 16625 IP address blocks: 23.35.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:70:c7:b9:1d:4e:c5:fd:54:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=4175ab16-2037-420d-ac6d-f30dc1dea351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:d4:6e:f4:0e:e6:ca:44:74:21:f1:6d:c1: c5:78:55:69:a2:98:9b:8f:1d:96:d0:67:0a:94:c1: 8b:83:8b:82:cb:fd:4b:cd:9f:bf:62:f2:cc:9c:7e: d2:84:57:7c:e5:f6:f8:99:b3:00:94:9d:d2:2d:06: d2:2b:fc:77:4f:d9:71:98:b6:b9:c6:f9:17:d9:e7: ed:6f:c6:df:16:79:2e:92:e3:71:a0:cc:0d:64:b1: 79:94:67:da:5a:2b:da:0c:46:00:37:c1:e1:7e:04: 65:0a:b9:54:06:f1:5f:c4:86:11:68:ef:2e:c3:51: 45:9c:2d:85:df:5f:bd:60:0f:2a:f7:be:88:ed:d8: db:54:89:ea:0b:a8:7f:4c:f6:e1:c8:89:ac:73:dd: 68:cd:83:90:49:b7:09:d2:65:c1:83:92:45:ee:b9: c0:d7:c5:e3:0b:78:7e:e8:77:73:37:a8:35:94:11: 10:ef:07:86:86:34:a0:d0:1b:f1:db:f5:0a:a6:2f: 49:26:72:78:2b:1d:96:91:39:e4:44:99:21:03:91: f9:e6:f5:8a:db:08:a2:2f:d2:4d:0b:8e:75:b0:44: d7:0c:77:2b:90:ea:fd:1b:30:2d:84:92:d0:60:f9: 27:09:b7:76:56:6c:d8:6a:49:29:37:ef:7b:22:52: ba:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:32:23:E4:10:D0:40:D4:FC:2A:25:9A:F4:44:5B:D4:37:F2:04:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7885e25-feb1-3a2f-966f-5b007db92f39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e4:e6:7c:8e:88:03:30:2f:60:dd:cc:a6:50:19:c7:fd:93: 00:a9:7c:5c:99:0d:9f:6e:4a:67:55:3f:40:62:67:b7:49:bf: f9:10:23:71:12:de:59:56:d4:9c:70:21:3a:ad:ce:3c:1b:b1: d9:27:92:7f:f9:07:b9:59:cf:a7:d7:22:00:48:70:2d:89:1a: 80:f3:19:6a:10:51:25:98:03:aa:43:5f:e1:e5:3a:52:67:04: 00:b1:9a:1a:97:03:10:48:d5:1b:19:73:32:90:7b:dc:1c:03: 03:4e:e5:d3:99:fc:24:c6:5a:9f:be:0a:df:95:aa:88:e5:c0: 4e:e3:f9:c3:28:fc:c7:53:d5:f6:8e:0d:a7:a9:08:f6:1f:14: 33:de:55:7d:7b:07:4d:39:57:e6:b2:e7:54:1d:19:77:37:db: 83:73:89:e9:aa:47:38:b0:50:5e:84:65:df:47:9f:2a:91:0c: 49:a3:d3:9b:f0:54:74:88:27:37:08:4e:e3:20:d2:98:9f:56: 49:91:f8:d1:32:ac:aa:91:51:ec:de:67:e9:de:6b:be:76:2e: 38:88:a6:a2:41:bd:f2:1a:54:75:98:60:14:92:b3:ce:86:a5: 7e:07:3f:8b:85:be:98:97:35:fe:31:76:e6:3a:aa:93:f5:06: 24:95:bc:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExQ0XDHuR1Oxf1U3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NDE3NWFiMTYtMjAzNy00MjBkLWFjNmQtZjMwZGMxZGVhMzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJXUbvQO5spEdCHxbcHFeFVpopibjx2W0GcK lMGLg4uCy/1LzZ+/YvLMnH7ShFd85fb4mbMAlJ3SLQbSK/x3T9lxmLa5xvkX2eft b8bfFnkukuNxoMwNZLF5lGfaWivaDEYAN8HhfgRlCrlUBvFfxIYRaO8uw1FFnC2F 31+9YA8q976I7djbVInqC6h/TPbhyImsc91ozYOQSbcJ0mXBg5JF7rnA18XjC3h+ 6HdzN6g1lBEQ7weGhjSg0Bvx2/UKpi9JJnJ4Kx2WkTnkRJkhA5H55vWK2wiiL9JN C451sETXDHcrkOr9GzAthJLQYPknCbd2VmzYakkpN+97IlK60wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4yI+QQ0EDU/ColmvREW9Q38gQ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTc4ODVlMjUtZmViMS0z YTJmLTk2NmYtNWIwMDdkYjkyZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTk5nyOiAMwL2DdzKZQGcf9kwCpfFyZDZ9uSmdVP0BiZ7dJv/kQI3ES 3llW1JxwITqtzjwbsdknkn/5B7lZz6fXIgBIcC2JGoDzGWoQUSWYA6pDX+HlOlJn BACxmhqXAxBI1RsZczKQe9wcAwNO5dOZ/CTGWp++Ct+VqojlwE7j+cMo/MdT1faO DaepCPYfFDPeVX17B005V+ay51QdGXc324NziemqRziwUF6EZd9HnyqRDEmj05vw VHSIJzcITuMg0pifVkmR+NEyrKqRUezeZ+nea752LjiIpqJBvfIaVHWYYBSSs86G pX4HP4uFvpiXNf4xduY6qpP1BiSVvMQ= -----END CERTIFICATE-----Generated at Sun Jan 25 08:17:18 2026 by rpki-client