This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/b1e93cdb-7048-3eec-a474-37efd56ac00b.roa File: b1e93cdb-7048-3eec-a474-37efd56ac00b.roa (raw, json) Hash identifier: meaOK2fx0oD/NWx+MKABEZwxgpKQTn0dZ3n3tpDqH+Y= Subject key identifier: 2A:27:68:AF:A8:81:14:67:2E:0F:BD:E5:A5:53:B3:99:A2:D5:58:23 Certificate issuer: /CN=24570cf0-6be7-4f66-a550-b04cfd954538 Certificate serial: 010D0C9F4328584C01D603FD9BC22B958564A010 Authority key identifier: 0A:C0:D2:13:85:AA:09:75:83:97:EF:B6:FB:54:0A:9B:77:8D:D2:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/b1e93cdb-7048-3eec-a474-37efd56ac00b.roa Signing time: Fri 28 Nov 2025 07:01:40 +0000 ROA not before: Fri 28 Nov 2025 07:01:40 +0000 ROA not after: Thu 26 Feb 2026 07:01:40 +0000 asID: 399870 IP address blocks: 23.144.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:d6:03:fd:9b:c2:2b:95:85:64:a0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24570cf0-6be7-4f66-a550-b04cfd954538 Validity Not Before: Nov 28 07:01:40 2025 GMT Not After : Feb 26 07:01:40 2026 GMT Subject: CN=b89bbb80-a4a9-4bef-8768-3bc3936b9a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:91:7b:31:bd:ea:48:b7:5e:9b:2d:29:5c:55: 0f:7d:12:36:ab:9b:26:ae:18:99:15:c3:66:0d:42: 1d:ee:2a:2f:92:74:af:b4:88:50:20:e0:a0:cb:e5: fb:92:ef:5c:07:3b:9f:fe:21:33:b4:f5:88:3b:1c: 45:60:aa:27:39:c1:5d:68:f5:39:99:07:f7:2c:57: d1:63:d6:dd:2e:c1:33:56:04:7f:96:c3:cf:7c:e6: 09:70:d6:05:b9:0b:6c:5d:22:ab:c0:32:93:a8:31: e0:ea:ae:a6:eb:b3:b8:33:ea:60:2a:60:c3:ad:22: 81:18:b9:25:3a:71:f0:eb:cc:71:40:70:11:a0:c8: 4f:2c:7c:b8:4c:65:f4:3e:37:01:c8:28:9a:f1:ca: fe:bd:5d:e6:c7:bd:8d:bc:52:18:6a:87:97:6a:24: f2:48:4b:1f:63:d2:39:ce:8d:82:3d:87:6e:9e:ba: 03:1a:fc:fc:b2:d8:78:d9:09:bc:40:8b:4e:0e:dc: be:6e:a2:13:97:43:62:d8:50:17:12:a5:e0:80:8e: c9:a2:55:de:88:f5:ed:9c:cf:be:d8:57:18:7a:d0: 01:e1:87:db:b1:7e:7a:ee:4a:9c:f6:78:90:fb:ee: b2:fb:ca:ba:fb:74:21:20:f8:b7:08:cc:37:64:75: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:27:68:AF:A8:81:14:67:2E:0F:BD:E5:A5:53:B3:99:A2:D5:58:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/b1e93cdb-7048-3eec-a474-37efd56ac00b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.crl X509v3 Authority Key Identifier: keyid:0A:C0:D2:13:85:AA:09:75:83:97:EF:B6:FB:54:0A:9B:77:8D:D2:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer sbgp-ipAddrBlock: critical IPv4: 23.144.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:9a:3a:da:6d:a3:7c:53:cc:84:a4:4a:fb:97:07:7e:30:cc: e7:d2:cd:56:e6:ea:ac:20:37:2d:d5:65:ca:cc:ab:ad:43:5a: da:bb:59:3c:de:46:b1:1f:e6:ae:d0:5d:fd:57:b4:dc:1c:5b: 33:5d:82:cb:8c:b0:45:d8:7d:03:8a:fe:d9:06:6d:2f:a7:39: 9c:81:3d:71:35:eb:45:97:47:b7:d7:b1:ab:8b:a3:e0:83:3e: ed:43:ee:c6:a7:0e:2a:45:79:7c:43:ee:d3:83:20:14:39:43: 4f:d7:b3:43:21:5d:70:76:72:eb:43:c2:f3:ea:e2:31:67:11: 56:c4:be:75:73:85:f1:b9:66:3f:5a:5d:d7:90:af:b6:77:4c: 4c:2d:f8:58:c2:91:4d:70:5d:c2:73:34:1d:65:84:12:c2:f0: 49:b6:ee:38:60:bb:5c:f2:ee:c8:b0:22:99:c4:4a:4f:9c:ee: b9:49:9f:cb:93:2b:18:df:81:bb:27:56:08:29:e3:2a:ee:cc: 06:37:cb:9a:7a:c3:e6:fc:64:08:0b:8d:60:e3:dc:0b:89:93: 2a:e6:9c:54:20:74:7c:f8:1e:85:58:60:fa:5e:b5:08:f9:11: 22:4a:ae:64:00:0f:39:ae:0b:d6:c9:e0:57:ee:cf:7d:32:97: 91:4f:57:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwB1gP9m8IrlYVkoBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ1NzBjZjAtNmJlNy00ZjY2LWE1NTAtYjA0Y2ZkOTU0 NTM4MB4XDTI1MTEyODA3MDE0MFoXDTI2MDIyNjA3MDE0MFowLzEtMCsGA1UEAxMk Yjg5YmJiODAtYTRhOS00YmVmLTg3NjgtM2JjMzkzNmI5YTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpF7Mb3qSLdemy0pXFUPfRI2q5smrhiZFcNm DUId7iovknSvtIhQIOCgy+X7ku9cBzuf/iEztPWIOxxFYKonOcFdaPU5mQf3LFfR Y9bdLsEzVgR/lsPPfOYJcNYFuQtsXSKrwDKTqDHg6q6m67O4M+pgKmDDrSKBGLkl OnHw68xxQHARoMhPLHy4TGX0PjcByCia8cr+vV3mx72NvFIYaoeXaiTySEsfY9I5 zo2CPYdunroDGvz8sth42Qm8QItODty+bqITl0Ni2FAXEqXggI7JolXeiPXtnM++ 2FcYetAB4YfbsX567kqc9niQ++6y+8q6+3QhIPi3CMw3ZHWUTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFConaK+ogRRnLg+95aVTs5mi1VgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNDU3 MGNmMC02YmU3LTRmNjYtYTU1MC1iMDRjZmQ5NTQ1MzgvYjFlOTNjZGItNzA0OC0z ZWVjLWE0NzQtMzdlZmQ1NmFjMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjQ1NzBjZjAtNmJlNy00ZjY2LWE1 NTAtYjA0Y2ZkOTU0NTM4LzI0NTcwY2YwLTZiZTctNGY2Ni1hNTUwLWIwNGNmZDk1 NDUzOC5jcmwwHwYDVR0jBBgwFoAUCsDSE4WqCXWDl++2+1QKm3eN0v4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNDU3MGNmMC02YmU3LTRmNjYtYTU1MC1iMDRj ZmQ5NTQ1MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeaOtpto3xTzISkSvuXB34wzOfSzVbm6qwgNy3VZcrMq61DWtq7WTze RrEf5q7QXf1XtNwcWzNdgsuMsEXYfQOK/tkGbS+nOZyBPXE160WXR7fXsauLo+CD Pu1D7sanDipFeXxD7tODIBQ5Q0/Xs0MhXXB2cutDwvPq4jFnEVbEvnVzhfG5Zj9a XdeQr7Z3TEwt+FjCkU1wXcJzNB1lhBLC8Em27jhgu1zy7siwIpnESk+c7rlJn8uT KxjfgbsnVggp4yruzAY3y5p6w+b8ZAgLjWDj3AuJkyrmnFQgdHz4HoVYYPpetQj5 ESJKrmQADzmuC9bJ4Ffuz30yl5FPV5c= -----END CERTIFICATE-----Generated at Sat Dec 6 18:09:45 2025 by rpki-client