This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f408fe85-2cc1-33a6-a369-4ceb3415d6e4.roa File: f408fe85-2cc1-33a6-a369-4ceb3415d6e4.roa (raw, json) Hash identifier: nkE0jQK6giNkxejA1o8Rmk5wLF1cOyPjjieY/TmXfgE= Subject key identifier: 46:46:3D:2E:6D:86:77:AB:D1:34:FF:4E:BD:B3:61:0C:D7:CD:F3:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C0DD0DCE935A0D82BBB4B4500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f408fe85-2cc1-33a6-a369-4ceb3415d6e4.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.59.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:dc:e9:35:a0:d8:2b:bb:4b:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=7777a901-254c-431d-ab04-9795e2fdfe88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:f6:0d:cb:58:a2:39:d7:7d:cd:c6:d6:ad: 96:31:a2:f7:56:2e:75:09:33:2e:11:2a:3e:db:5a: 8e:40:83:c5:91:a4:50:5b:03:81:ff:d2:b3:7c:1d: f3:b5:5c:36:d5:6b:5f:e6:5f:cb:23:7a:7e:06:16: 13:95:8e:3b:24:f6:d9:05:4a:50:d4:0d:83:35:e3: e4:ad:54:22:96:7d:a2:40:c6:13:97:b4:41:d1:86: 33:ba:9e:75:a0:e5:21:0b:f3:65:af:9d:6a:6d:76: 7f:5e:ec:08:45:59:89:5b:01:f2:57:9d:d3:71:86: 20:ca:68:e7:06:60:a6:e8:e0:b0:c9:d0:6e:d1:e1: 47:1d:53:e1:46:e5:4f:38:be:f2:17:36:6f:2e:c6: 86:cc:24:15:c4:7a:d8:6e:5d:e3:99:47:32:dc:9c: 26:1e:c5:4a:7b:22:df:af:1f:56:21:9f:7c:20:ea: 28:e9:18:9b:73:95:9a:11:62:48:17:c5:cb:36:d2: f6:8a:3c:86:f7:fb:d8:f5:ab:11:17:06:f2:3a:4c: 2d:3c:4e:89:5e:16:7e:78:9f:64:39:48:3b:b7:41: 6c:33:04:a2:cd:1d:1c:f6:61:c6:ae:61:95:b0:5a: c7:d4:03:0f:25:35:5e:4f:02:16:1f:3c:42:da:16: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:46:3D:2E:6D:86:77:AB:D1:34:FF:4E:BD:B3:61:0C:D7:CD:F3:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f408fe85-2cc1-33a6-a369-4ceb3415d6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:8d:0d:e8:02:5c:78:8b:f3:9e:22:fa:1c:f0:b3:0c:94:d8: aa:e3:30:9f:71:e8:c7:de:3f:0f:a4:d9:8d:bc:a7:4f:83:fa: e6:cb:de:42:e4:08:db:10:f6:3a:73:48:e0:58:6f:fc:5d:0f: 96:ec:be:47:9c:de:52:96:ca:94:d6:14:39:c0:85:0d:64:9e: 49:d3:fb:2e:0f:ec:26:13:47:ae:d6:cb:e4:50:03:fd:d0:d2: 08:be:42:1d:5b:92:eb:72:93:b3:9f:5a:cc:43:36:d5:87:56: ef:0b:ac:5f:aa:b3:61:65:b5:eb:4c:a8:f2:58:b8:a4:f1:a8: c7:16:f9:e6:97:27:49:e7:fb:f1:e4:f6:08:46:8d:1a:f4:bc: ef:09:9d:37:b8:26:8e:c6:4a:a4:63:8c:86:86:d3:09:8d:be: b3:8c:8d:cd:51:92:14:2c:03:02:26:88:c0:3b:c3:23:5e:03: 9b:ca:84:55:cf:94:22:51:e7:49:db:62:80:28:f2:7e:4f:6e: 6b:96:d7:9f:a3:2b:27:3f:57:0f:ab:ad:75:76:7d:61:d0:40: e1:f2:48:ea:21:16:da:8a:d3:2b:eb:13:75:14:6f:60:a9:63: 7c:f4:e3:f2:50:fc:41:4b:18:2e:19:c1:d1:7c:74:c9:8c:8c: c1:2c:7d:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0NzpNaDYK7tLRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk Nzc3N2E5MDEtMjU0Yy00MzFkLWFiMDQtOTc5NWUyZmRmZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSb2DctYojnXfc3G1q2WMaL3Vi51CTMuESo+ 21qOQIPFkaRQWwOB/9KzfB3ztVw21Wtf5l/LI3p+BhYTlY47JPbZBUpQ1A2DNePk rVQiln2iQMYTl7RB0YYzup51oOUhC/Nlr51qbXZ/XuwIRVmJWwHyV53TcYYgymjn BmCm6OCwydBu0eFHHVPhRuVPOL7yFzZvLsaGzCQVxHrYbl3jmUcy3JwmHsVKeyLf rx9WIZ98IOoo6Ribc5WaEWJIF8XLNtL2ijyG9/vY9asRFwbyOkwtPE6JXhZ+eJ9k OUg7t0FsMwSizR0c9mHGrmGVsFrH1AMPJTVeTwIWHzxC2hZ97QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZGPS5thner0TT/Tr2zYQzXzfMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjQwOGZlODUtMmNjMS0z M2E2LWEzNjktNGNlYjM0MTVkNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzvjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKNDegCXHiL854i+hzwswyU2KrjMJ9x6MfePw+k2Y28p0+D+ubL3kLk CNsQ9jpzSOBYb/xdD5bsvkec3lKWypTWFDnAhQ1knknT+y4P7CYTR67Wy+RQA/3Q 0gi+Qh1bkutyk7OfWsxDNtWHVu8LrF+qs2FltetMqPJYuKTxqMcW+eaXJ0nn+/Hk 9ghGjRr0vO8JnTe4Jo7GSqRjjIaG0wmNvrOMjc1RkhQsAwImiMA7wyNeA5vKhFXP lCJR50nbYoAo8n5PbmuW15+jKyc/Vw+rrXV2fWHQQOHySOohFtqK0yvrE3UUb2Cp Y3z04/JQ/EFLGC4ZwdF8dMmMjMEsffM= -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:01 2025 by rpki-client