This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c680f7b6-d2a6-388e-ab74-96e2101972b7.roa File: c680f7b6-d2a6-388e-ab74-96e2101972b7.roa (raw, json) Hash identifier: Y+qlaG9gusTqgC3OPNSpUP8hZ18LE4+axj3uDzDoGl0= Subject key identifier: F0:4F:D6:02:24:24:3F:25:59:F1:E3:53:0C:2D:AB:7E:83:70:E7:E1 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584BF615E79EE09AEA122E3D1600 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c680f7b6-d2a6-388e-ab74-96e2101972b7.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 1239 IP address blocks: 23.237.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:e7:9e:e0:9a:ea:12:2e:3d:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=f81cc515-d952-4614-81c5-3cefad191812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c2:b9:f3:5a:ab:94:34:14:d0:63:ea:bb:bd: f9:27:e2:e2:30:4b:1b:42:61:cc:99:8a:74:12:41: 69:95:45:04:db:15:c3:db:e2:08:9c:66:18:fb:3f: bf:22:b6:84:db:c5:6b:56:f1:8b:7f:d7:f4:f7:b8: 15:a1:52:e0:5e:e3:e7:f3:10:d7:9a:a6:68:14:41: 27:f9:be:be:5b:5c:61:f4:fe:bf:a0:e8:95:47:28: 28:26:00:38:55:71:b9:84:01:77:ff:7c:2b:0e:6a: 80:fb:f8:c7:24:6e:a8:be:3f:90:46:30:64:28:15: c6:4c:1b:49:b4:b9:80:a8:5b:95:97:f7:84:e5:ad: 7a:e3:e6:30:a7:40:9d:07:e9:48:cc:25:e4:d9:38: f3:48:7f:52:a2:a6:54:22:6e:a5:0c:c6:b8:f4:c6: 9d:39:1e:f7:ba:f9:76:57:b5:a9:17:c9:e2:e0:17: 7c:f6:1c:54:59:cd:ca:fd:a5:37:2f:72:3d:26:8d: ac:af:31:0d:7c:d2:5f:d3:18:00:3b:fc:8b:24:59: 1d:ad:cc:38:23:ab:fb:71:f5:81:05:13:12:5c:3d: 14:5a:ee:82:54:10:fb:8e:88:d2:b8:57:8c:01:c6: 4c:4f:b1:81:48:b6:21:4f:37:3b:b6:d5:00:9e:8a: 34:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4F:D6:02:24:24:3F:25:59:F1:E3:53:0C:2D:AB:7E:83:70:E7:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c680f7b6-d2a6-388e-ab74-96e2101972b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:77:f9:63:8b:de:f6:ba:5f:47:4a:ea:22:ee:d5:22:e4:ca: 37:ea:06:56:19:ed:4a:ac:97:fc:11:eb:60:a0:67:98:57:28: 9d:42:c7:fe:0d:46:ac:cc:bb:2f:b8:ef:a1:9e:d1:18:af:de: 85:e6:62:a3:0c:5f:60:f0:78:b5:5f:f9:0b:31:22:3e:a0:6d: 25:70:33:bc:a8:1f:2d:6e:60:d0:8d:ee:8b:f7:ce:65:b7:79: 02:6e:e4:5d:c1:37:3d:6c:1f:31:c0:ed:0a:c7:63:d7:de:ad: 42:65:ec:d3:04:b6:14:1a:de:47:04:85:ac:ab:62:9a:2c:f9: 20:b5:28:2b:f0:4e:bb:e3:1a:3e:3f:ab:e4:e5:d6:00:c8:cc: 0d:96:d2:57:bd:ab:57:90:ca:0f:80:e2:f4:bd:95:9f:9a:a4: 4b:95:1d:fd:45:8c:75:bc:dd:e0:f0:84:54:fb:b5:66:08:cc: b6:cd:7c:6b:02:29:3b:9b:55:36:d1:70:b4:24:45:8a:a0:3a: 0e:c7:b9:a1:70:14:a2:37:10:e3:4e:8f:fd:02:1b:43:63:b9: 71:40:de:09:0d:dd:b7:6b:c5:f6:2f:36:f7:12:2e:a2:57:9e: a5:61:e5:51:0f:77:c1:de:4b:4a:c9:cd:0e:24:6f:bd:a8:09: 04:92:a2:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2Feee4JrqEi49FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk ZjgxY2M1MTUtZDk1Mi00NjE0LTgxYzUtM2NlZmFkMTkxODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisK581qrlDQU0GPqu735J+LiMEsbQmHMmYp0 EkFplUUE2xXD2+IInGYY+z+/IraE28VrVvGLf9f097gVoVLgXuPn8xDXmqZoFEEn +b6+W1xh9P6/oOiVRygoJgA4VXG5hAF3/3wrDmqA+/jHJG6ovj+QRjBkKBXGTBtJ tLmAqFuVl/eE5a164+Ywp0CdB+lIzCXk2TjzSH9SoqZUIm6lDMa49MadOR73uvl2 V7WpF8ni4Bd89hxUWc3K/aU3L3I9Jo2srzENfNJf0xgAO/yLJFkdrcw4I6v7cfWB BRMSXD0UWu6CVBD7jojSuFeMAcZMT7GBSLYhTzc7ttUAnoo0sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBP1gIkJD8lWfHjUwwtq36DcOfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYzY4MGY3YjYtZDJhNi0z ODhlLWFiNzQtOTZlMjEwMTk3MmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR3+WOL3va6X0dK6iLu1SLkyjfqBlYZ7Uqsl/wR62CgZ5hXKJ1Cx/4N RqzMuy+476Ge0Riv3oXmYqMMX2DweLVf+QsxIj6gbSVwM7yoHy1uYNCN7ov3zmW3 eQJu5F3BNz1sHzHA7QrHY9ferUJl7NMEthQa3kcEhayrYpos+SC1KCvwTrvjGj4/ q+Tl1gDIzA2W0le9q1eQyg+A4vS9lZ+apEuVHf1FjHW83eDwhFT7tWYIzLbNfGsC KTubVTbRcLQkRYqgOg7HuaFwFKI3EONOj/0CG0NjuXFA3gkN3bdrxfYvNvcSLqJX nqVh5VEPd8HeS0rJzQ4kb72oCQSSokU= -----END CERTIFICATE-----Generated at Sun Dec 7 15:59:38 2025 by rpki-client