This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e86b7d19-dbb1-3c47-aeda-47d54f226f62.roa File: e86b7d19-dbb1-3c47-aeda-47d54f226f62.roa (raw, json) Hash identifier: eKFZATOifBKysW3U0L5iaa3fHQL/KRueNA8JFoPBsaM= Subject key identifier: 9D:96:90:66:68:BB:1A:59:F0:2D:11:36:CD:89:8D:2F:69:0D:95:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C0570C9B5D984E1239863D500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e86b7d19-dbb1-3c47-aeda-47d54f226f62.roa Signing time: Sat 29 Nov 2025 14:00:39 +0000 ROA not before: Sat 29 Nov 2025 14:00:39 +0000 ROA not after: Fri 27 Feb 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.53.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:05:70:c9:b5:d9:84:e1:23:98:63:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 29 14:00:39 2025 GMT Not After : Feb 27 14:00:39 2026 GMT Subject: CN=5eab0138-3669-4af2-9727-0d1bd89aa4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bb:8a:a5:0d:65:c2:be:60:ad:08:9f:8c:66: 06:bc:b5:0b:b9:82:cc:c1:4a:f8:7f:86:45:e8:f7: 3a:a8:12:91:be:8b:99:f6:6f:66:67:ef:6a:7c:ac: e4:e8:2d:8f:09:48:fa:f2:99:a6:f0:98:32:bb:8e: ca:47:67:01:e5:ba:86:ca:40:81:da:5a:61:6f:ff: e3:5c:be:13:d0:84:cf:fc:d0:fd:14:92:1d:b8:73: f5:25:49:10:97:2c:6c:c5:e5:2e:2e:f9:ba:8a:28: d2:9f:d1:ae:17:ca:a5:20:fd:3d:09:b6:42:b7:59: 15:50:79:f5:2f:05:d4:e5:e5:86:ec:af:67:77:e3: d8:1c:aa:06:e5:28:88:41:87:bc:49:cf:40:62:2e: 96:3c:63:48:c8:fe:7e:5b:ed:df:dd:01:9c:5a:24: 91:64:be:f6:4a:c0:75:01:5d:a2:7b:d6:e1:f4:0a: 0b:f2:e9:71:9c:ef:58:33:17:9f:c3:c9:ae:ea:5d: 0e:d6:35:4a:61:f9:74:bb:c2:19:d8:6d:65:aa:5b: 6d:af:1c:1e:39:36:5d:e5:96:ac:59:bc:4c:25:53: 13:38:3e:2c:26:1d:3a:4f:20:da:41:3e:47:4e:c3: 69:77:68:31:5f:7d:89:56:e1:5c:b2:d8:5e:75:e4: f0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:96:90:66:68:BB:1A:59:F0:2D:11:36:CD:89:8D:2F:69:0D:95:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e86b7d19-dbb1-3c47-aeda-47d54f226f62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4e:9b:50:25:56:55:5e:84:f7:e3:15:c7:e6:7b:a0:94:ba: b8:b0:c3:aa:5b:da:8d:f4:19:84:0d:22:24:2f:76:c9:3f:be: 88:00:88:76:5f:14:50:21:a7:fc:d9:06:0f:4d:be:a2:24:9a: 85:8b:a8:ec:e4:97:db:95:32:8e:49:3b:44:06:c3:4e:29:6b: ee:e6:0a:55:5b:d7:06:1d:49:1b:f4:dc:1c:ff:56:f0:58:73: 4f:5e:89:4c:3e:bc:af:6e:17:07:bf:53:10:b9:dc:e1:ca:c8: d6:4a:32:94:8a:77:48:9c:2d:9a:98:38:b6:45:5f:a7:b6:34: 44:52:f5:a7:21:bc:42:8b:99:23:5e:41:69:67:4b:00:9f:ca: c8:07:b6:28:e3:48:ff:0e:92:29:dd:a8:4f:06:75:a6:b8:ac: 57:8c:3d:67:82:ca:82:88:fd:03:2a:44:0c:d8:4b:b3:be:0d: 4c:e6:ae:bf:e8:44:c0:de:20:f5:86:c4:34:4e:e3:94:63:96: 92:52:69:eb:9d:3f:86:f5:9b:83:a3:30:97:3e:e2:fc:87:49: 09:79:f7:47:f1:b0:ef:a6:0b:6a:f6:df:05:9a:59:95:1e:f1: 52:75:ba:e7:03:fc:57:16:90:02:56:4d:19:bf:1b:b1:89:e4: 1d:03:18:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwFcMm12YThI5hj1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyOTE0MDAzOVoXDTI2MDIyNzE0MDAzOVowLzEtMCsGA1UEAxMk NWVhYjAxMzgtMzY2OS00YWYyLTk3MjctMGQxYmQ4OWFhNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07uKpQ1lwr5grQifjGYGvLULuYLMwUr4f4ZF 6Pc6qBKRvouZ9m9mZ+9qfKzk6C2PCUj68pmm8Jgyu47KR2cB5bqGykCB2lphb//j XL4T0ITP/ND9FJIduHP1JUkQlyxsxeUuLvm6iijSn9GuF8qlIP09CbZCt1kVUHn1 LwXU5eWG7K9nd+PYHKoG5SiIQYe8Sc9AYi6WPGNIyP5+W+3f3QGcWiSRZL72SsB1 AV2ie9bh9AoL8ulxnO9YMxefw8mu6l0O1jVKYfl0u8IZ2G1lqlttrxweOTZd5Zas WbxMJVMTOD4sJh06TyDaQT5HTsNpd2gxX32JVuFcsthedeTwZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2WkGZouxpZ8C0RNs2JjS9pDZXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTg2YjdkMTktZGJiMS0z YzQ3LWFlZGEtNDdkNTRmMjI2ZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpOm1AlVlVehPfjFcfme6CUuriww6pb2o30GYQNIiQvdsk/vogAiHZf FFAhp/zZBg9NvqIkmoWLqOzkl9uVMo5JO0QGw04pa+7mClVb1wYdSRv03Bz/VvBY c09eiUw+vK9uFwe/UxC53OHKyNZKMpSKd0icLZqYOLZFX6e2NERS9achvEKLmSNe QWlnSwCfysgHtijjSP8OkindqE8Gdaa4rFeMPWeCyoKI/QMqRAzYS7O+DUzmrr/o RMDeIPWGxDRO45RjlpJSaeudP4b1m4OjMJc+4vyHSQl590fxsO+mC2r23wWaWZUe 8VJ1uucD/FcWkAJWTRm/G7GJ5B0DGCs= -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:54 2025 by rpki-client