This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa60aba4-4dcc-3da3-9f7c-e7ea39701629.roa File: fa60aba4-4dcc-3da3-9f7c-e7ea39701629.roa (raw, json) Hash identifier: w54Q03IQn9eFarBdIqwLuAjERuvkn+WIb2KTW4UP9JE= Subject key identifier: CB:21:BF:30:48:D8:7C:67:84:71:88:E2:1D:29:2E:C7:CC:44:3C:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C0570C61BBCC1B88661D36280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa60aba4-4dcc-3da3-9f7c-e7ea39701629.roa Signing time: Sat 29 Nov 2025 14:00:39 +0000 ROA not before: Sat 29 Nov 2025 14:00:39 +0000 ROA not after: Fri 27 Feb 2026 14:00:39 +0000 asID: 16625 IP address blocks: 23.52.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:05:70:c6:1b:bc:c1:b8:86:61:d3:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 29 14:00:39 2025 GMT Not After : Feb 27 14:00:39 2026 GMT Subject: CN=15aed7e5-2feb-4a26-b806-882b6ce2cc12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ef:4d:95:11:66:6c:87:47:34:5e:99:7e:aa: 4b:d4:04:d2:6f:7f:50:97:21:cf:4e:1d:ce:53:0d: 8b:36:ac:21:85:a4:f9:ba:6e:b0:cb:b3:ca:5c:58: f6:57:f0:26:43:b6:22:5f:5c:31:ff:58:85:6b:1c: 5a:fa:6e:4f:b7:da:dc:67:b8:9b:2b:82:2d:6c:a9: 56:fc:12:22:0f:9d:08:b0:38:ff:d9:9a:6f:66:84: 02:f7:b0:6a:f4:fa:66:40:45:45:da:4d:26:8d:20: 7a:34:8a:98:a6:41:43:fa:74:dd:f2:22:f4:94:46: a1:53:8b:74:2b:c0:df:64:53:95:27:27:94:96:18: ae:8f:14:d4:04:d3:cc:e1:7a:87:33:fa:ed:f8:85: 7d:33:d6:60:a0:c1:b5:bb:fa:60:76:5b:74:41:48: cd:7f:b5:f8:46:6a:d4:10:38:9a:7c:e5:f6:c1:96: f9:f0:4f:b6:5a:83:21:f3:02:47:3a:66:80:6b:de: 60:01:2f:27:a0:c0:81:7a:aa:51:a5:59:9c:0a:c7: 3c:e1:89:23:52:9b:7f:02:20:d9:ad:76:32:bd:dc: 83:16:a2:3c:c3:66:21:5e:ff:73:b4:eb:de:d2:e6: aa:e8:98:ff:b1:47:d3:06:9c:9a:ee:de:ba:c9:39: a8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:21:BF:30:48:D8:7C:67:84:71:88:E2:1D:29:2E:C7:CC:44:3C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa60aba4-4dcc-3da3-9f7c-e7ea39701629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:9c:17:ef:cf:aa:ea:bd:fa:c3:a7:d8:30:33:65:4a:a5:d3: 77:b8:33:b7:9b:64:57:5d:39:6c:70:ca:58:63:3a:89:a8:64: df:87:e1:f3:eb:70:77:02:9b:d5:ab:13:da:01:87:43:70:5a: 0e:31:db:69:37:e4:10:78:06:8d:93:e2:a8:1f:e3:76:0c:f0: 18:ad:0e:3a:ac:f4:f0:e5:48:34:5e:5e:a1:9b:e6:9c:51:6d: 55:a6:64:29:b0:22:3d:3e:4e:b2:03:ee:68:ba:bb:be:5a:6e: 2c:48:81:ec:72:c5:bf:fd:a8:20:09:26:0d:67:c9:e8:2f:ec: 6a:45:19:fc:46:fc:65:56:bb:fa:f3:97:0c:4c:b2:93:00:44: 89:73:45:5a:96:35:a6:dd:99:28:ba:99:f2:7c:d6:83:82:c9: 77:b1:83:8d:03:5c:32:08:d2:39:17:ba:79:43:37:c6:6c:bd: 65:25:3f:f2:53:ab:ca:4c:01:01:d4:a1:97:19:87:28:7e:c8: ac:19:b7:da:97:5a:fb:51:1b:f0:b8:18:12:30:36:66:5d:c3: df:0d:e1:7f:69:9f:e4:b8:50:b9:8f:2a:15:53:33:30:c4:b3: 17:ce:67:15:e3:af:5d:2a:b1:a8:c2:3f:58:df:5d:82:ce:0c: d8:b4:cf:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwFcMYbvMG4hmHTYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyOTE0MDAzOVoXDTI2MDIyNzE0MDAzOVowLzEtMCsGA1UEAxMk MTVhZWQ3ZTUtMmZlYi00YTI2LWI4MDYtODgyYjZjZTJjYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke9NlRFmbIdHNF6ZfqpL1ATSb39QlyHPTh3O Uw2LNqwhhaT5um6wy7PKXFj2V/AmQ7YiX1wx/1iFaxxa+m5Pt9rcZ7ibK4ItbKlW /BIiD50IsDj/2ZpvZoQC97Bq9PpmQEVF2k0mjSB6NIqYpkFD+nTd8iL0lEahU4t0 K8DfZFOVJyeUlhiujxTUBNPM4XqHM/rt+IV9M9ZgoMG1u/pgdlt0QUjNf7X4RmrU EDiafOX2wZb58E+2WoMh8wJHOmaAa95gAS8noMCBeqpRpVmcCsc84YkjUpt/AiDZ rXYyvdyDFqI8w2YhXv9ztOve0uaq6Jj/sUfTBpya7t66yTmoMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMshvzBI2HxnhHGI4h0pLsfMRDw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmE2MGFiYTQtNGRjYy0z ZGEzLTlmN2MtZTdlYTM5NzAxNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqcF+/Pquq9+sOn2DAzZUql03e4M7ebZFddOWxwylhjOomoZN+H4fPr cHcCm9WrE9oBh0NwWg4x22k35BB4Bo2T4qgf43YM8BitDjqs9PDlSDReXqGb5pxR bVWmZCmwIj0+TrID7mi6u75abixIgexyxb/9qCAJJg1nyegv7GpFGfxG/GVWu/rz lwxMspMARIlzRVqWNabdmSi6mfJ81oOCyXexg40DXDII0jkXunlDN8ZsvWUlP/JT q8pMAQHUoZcZhyh+yKwZt9qXWvtRG/C4GBIwNmZdw98N4X9pn+S4ULmPKhVTMzDE sxfOZxXjr10qsajCP1jfXYLODNi0z6U= -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:45 2025 by rpki-client