This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f14625b4-a283-3a33-9ea9-b23b0dabf708.roa File: f14625b4-a283-3a33-9ea9-b23b0dabf708.roa (raw, json) Hash identifier: e7xHMD2necnjdhxp6o/82IEG3doWzFc4de1DHCzkeTM= Subject key identifier: 89:6E:BB:51:E1:1E:C0:8B:63:40:47:85:F5:72:62:01:DC:F0:B8:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BFD11044BFECF31E6550E9240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f14625b4-a283-3a33-9ea9-b23b0dabf708.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.43.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:11:04:4b:fe:cf:31:e6:55:0e:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=ebdf34d9-9680-45b7-a7a7-401d930a2894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:59:1a:25:2a:02:f6:9b:d9:a8:45:a5:98: c9:38:7e:7a:34:4c:25:3e:d5:9f:43:4c:5a:6e:0c: f9:31:08:65:68:0c:22:25:db:57:70:ea:07:93:af: 8e:fa:44:ce:7e:17:01:20:95:78:12:09:30:47:d0: a3:08:fb:b7:75:cf:33:fc:c4:e1:7f:3b:9e:36:c1: 1f:93:8e:0b:a3:ff:40:b8:5a:0a:1c:47:9e:dc:b2: c9:11:90:a0:ba:d5:22:7e:ff:09:1e:00:fc:90:34: 12:a4:7d:cd:7d:10:e7:c3:2d:f2:cd:f0:81:94:a4: c9:f1:78:6f:ec:e2:ff:c0:64:c1:0c:70:e8:68:a3: 78:33:61:9a:55:89:28:2d:ad:fa:fb:30:b7:20:40: 2d:61:b4:95:20:27:e9:c7:04:e0:66:e0:06:a3:47: 91:91:e6:92:31:ca:50:19:94:bc:30:32:c3:6e:73: 2a:4d:c7:c9:8d:b5:41:fa:b5:c9:9a:49:84:12:c5: 61:7e:c1:68:e8:dd:ab:01:9e:3c:de:66:39:65:cf: 88:54:3e:98:34:c3:21:24:6e:61:ed:25:0a:12:63: 28:61:89:66:35:2f:67:cc:e4:c1:f7:d2:3e:ea:75: 74:73:01:28:be:98:30:32:bf:c6:b2:7d:d2:61:43: f3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6E:BB:51:E1:1E:C0:8B:63:40:47:85:F5:72:62:01:DC:F0:B8:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f14625b4-a283-3a33-9ea9-b23b0dabf708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9e:31:d1:b9:30:2b:3b:77:33:19:36:af:06:36:eb:15:b8: b1:e8:0a:9d:80:86:0b:5c:a9:f4:4e:01:65:07:11:01:e2:c0: 3d:80:5e:c3:29:0f:25:b0:1c:a0:5d:dc:83:f4:9d:26:c8:0e: ac:0b:fc:04:c5:b8:a3:b9:3c:bd:e4:df:5e:d2:1b:f0:ac:2d: 3c:40:cd:c8:9c:bc:a3:b4:ff:9c:1b:91:0c:d6:9d:89:d6:e6: 37:16:81:d8:bb:dd:9e:2f:62:f2:ce:13:45:04:90:41:52:b8: 6b:2c:2a:4d:77:29:3b:e1:35:22:1d:3a:8d:92:74:bc:19:3c: f1:b9:72:f8:04:51:0d:c2:94:ae:3c:75:3a:68:9f:78:3b:86: 44:4c:6d:7a:7f:be:f5:2c:71:cb:79:82:41:0c:dc:bc:f4:e1: 12:80:49:59:e8:d5:a0:f7:af:25:f6:11:8b:11:5a:18:5b:32: 7b:bc:3c:b3:87:94:b6:a7:9d:62:27:59:58:ea:e5:02:8e:9c: f1:cf:f9:c2:75:cc:76:65:36:20:b5:03:66:5b:a7:84:c4:d1: 9f:ac:2e:3f:e5:5f:0e:a8:5b:90:70:c0:00:43:36:cd:b8:83: 30:69:c1:1f:91:fa:ad:27:a9:30:6d:a1:98:0a:0a:d2:81:9d: 8c:76:9c:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EQRL/s8x5lUOkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk ZWJkZjM0ZDktOTY4MC00NWI3LWE3YTctNDAxZDkzMGEyODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOdZGiUqAvab2ahFpZjJOH56NEwlPtWfQ0xa bgz5MQhlaAwiJdtXcOoHk6+O+kTOfhcBIJV4EgkwR9CjCPu3dc8z/MThfzueNsEf k44Lo/9AuFoKHEee3LLJEZCgutUifv8JHgD8kDQSpH3NfRDnwy3yzfCBlKTJ8Xhv 7OL/wGTBDHDoaKN4M2GaVYkoLa36+zC3IEAtYbSVICfpxwTgZuAGo0eRkeaSMcpQ GZS8MDLDbnMqTcfJjbVB+rXJmkmEEsVhfsFo6N2rAZ483mY5Zc+IVD6YNMMhJG5h 7SUKEmMoYYlmNS9nzOTB99I+6nV0cwEovpgwMr/Gsn3SYUPzLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIluu1HhHsCLY0BHhfVyYgHc8LhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjE0NjI1YjQtYTI4My0z YTMzLTllYTktYjIzYjBkYWJmNzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWeMdG5MCs7dzMZNq8GNusVuLHoCp2AhgtcqfROAWUHEQHiwD2AXsMp DyWwHKBd3IP0nSbIDqwL/ATFuKO5PL3k317SG/CsLTxAzcicvKO0/5wbkQzWnYnW 5jcWgdi73Z4vYvLOE0UEkEFSuGssKk13KTvhNSIdOo2SdLwZPPG5cvgEUQ3ClK48 dTpon3g7hkRMbXp/vvUscct5gkEM3Lz04RKASVno1aD3ryX2EYsRWhhbMnu8PLOH lLannWInWVjq5QKOnPHP+cJ1zHZlNiC1A2Zbp4TE0Z+sLj/lXw6oW5BwwABDNs24 gzBpwR+R+q0nqTBtoZgKCtKBnYx2nJw= -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:33 2025 by rpki-client