This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/aa126630-1ebb-3d7e-bc58-231039087ae8.roa File: aa126630-1ebb-3d7e-bc58-231039087ae8.roa (raw, json) Hash identifier: RpkmrFw+fvbqbacCS8O7PDmKbA4x/aM9FSALzuTP42o= Subject key identifier: 41:79:3A:92:23:38:ED:59:2A:50:56:11:9B:06:33:9B:0D:CE:B4:E1 Certificate issuer: /CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4 Certificate serial: 010D0C9F4328584BF8E0CF01FBA19348F2B9BF80 Authority key identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/aa126630-1ebb-3d7e-bc58-231039087ae8.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 216309 IP address blocks: 23.141.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:cf:01:fb:a1:93:48:f2:b9:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4 Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=2973fc52-8e78-4811-85d1-1816d9bb3607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f9:ed:6c:88:37:18:76:1e:d7:ab:2f:45:27: fb:ce:66:3a:b1:a2:68:c9:66:3e:59:db:b9:2d:16: 18:28:d0:02:bb:6f:97:47:47:50:36:a5:9e:ae:28: fe:f8:cb:ff:39:c1:66:c7:9b:2d:64:20:e6:c2:53: bf:76:08:58:74:70:2e:59:71:1b:35:b4:5d:eb:0d: 84:2f:74:8c:d9:a1:70:12:2f:f4:b8:e1:3c:db:33: f3:6a:c9:a2:2f:ed:55:1b:76:36:a8:48:f2:55:99: 60:f7:3d:86:95:94:0b:69:79:78:31:98:d7:47:ad: d4:b1:ab:b3:d1:d1:a4:e1:6a:e4:5b:6c:76:1d:8e: 1b:f8:2b:b9:1f:de:b7:ba:a0:dc:97:5f:63:b9:f2: a2:4f:2e:86:c7:ef:ee:14:5d:db:26:e7:03:f9:c7: cc:ef:f7:e8:d9:42:1e:c0:90:d0:39:58:58:b6:20: 3f:12:42:07:d3:f5:03:6b:cd:36:ff:de:4b:a0:f0: 74:24:a6:0b:03:af:d1:66:6b:0b:59:3d:45:ae:cb: 53:ea:31:3b:ff:6e:d2:16:87:06:e7:14:2f:74:7d: 74:9c:fe:13:4a:23:d7:8f:a0:a8:8e:fe:6f:a7:ce: 90:02:2f:ec:ef:bc:13:1e:a1:45:6b:aa:af:4a:b9: e0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:79:3A:92:23:38:ED:59:2A:50:56:11:9B:06:33:9B:0D:CE:B4:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/aa126630-1ebb-3d7e-bc58-231039087ae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl X509v3 Authority Key Identifier: keyid:B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer sbgp-ipAddrBlock: critical IPv4: 23.141.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e6:a8:b5:dd:81:d4:1a:98:2e:d3:7e:e9:73:17:8d:7b:78: a4:02:fd:1d:63:62:bd:36:51:b5:9f:82:85:c1:7e:83:f2:85: 95:94:b0:ad:8e:88:77:9e:d3:27:31:97:6f:05:cf:aa:cd:7a: 52:f1:e6:94:0b:8a:6f:66:83:3a:8c:5f:10:17:98:10:56:48: 56:66:01:1d:e2:41:c0:09:bc:57:a8:5e:bd:60:83:f8:74:11: 32:af:77:a2:37:4d:98:9e:6a:47:09:df:69:7b:6e:57:97:db: 97:a7:1b:0e:94:d6:d9:fa:42:ef:be:fc:6b:2e:bd:f2:f4:65: 07:51:d9:bb:2b:90:be:9d:22:e5:76:d3:0d:6c:08:3c:0d:89: b1:6d:5d:f5:da:f1:27:29:31:15:37:bb:3e:70:dc:93:82:ea: 03:12:ab:59:92:0a:e2:25:b8:31:73:5c:25:33:1f:87:d0:e6: cf:a4:b3:52:e9:70:44:3c:8e:b0:7d:59:b2:dc:a3:05:3b:c4: d1:0d:44:04:64:fe:75:60:bc:85:ee:d2:03:b1:ea:80:d8:96: 1d:7c:d7:0e:8e:ac:54:9b:c1:58:4a:a4:f2:ac:5a:e0:a1:a8: 47:47:83:46:79:c3:6c:68:58:ea:3b:65:aa:be:1c:84:2c:d5: a1:90:93:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv44M8B+6GTSPK5v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E4MWUzOTEtMmY5Zi00M2FjLWE3M2UtZTAxOGUyNzlj MmQ0MB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk Mjk3M2ZjNTItOGU3OC00ODExLTg1ZDEtMTgxNmQ5YmIzNjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/ntbIg3GHYe16svRSf7zmY6saJoyWY+Wdu5 LRYYKNACu2+XR0dQNqWerij++Mv/OcFmx5stZCDmwlO/dghYdHAuWXEbNbRd6w2E L3SM2aFwEi/0uOE82zPzasmiL+1VG3Y2qEjyVZlg9z2GlZQLaXl4MZjXR63Usauz 0dGk4WrkW2x2HY4b+Cu5H963uqDcl19jufKiTy6Gx+/uFF3bJucD+cfM7/fo2UIe wJDQOVhYtiA/EkIH0/UDa802/95LoPB0JKYLA6/RZmsLWT1FrstT6jE7/27SFocG 5xQvdH10nP4TSiPXj6Cojv5vp86QAi/s77wTHqFFa6qvSrngMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF5OpIjOO1ZKlBWEZsGM5sNzrThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YTgx ZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4ZTI3OWMyZDQvYWExMjY2MzAtMWViYi0z ZDdlLWJjNTgtMjMxMDM5MDg3YWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2E4MWUzOTEtMmY5Zi00M2FjLWE3 M2UtZTAxOGUyNzljMmQ0LzdhODFlMzkxLTJmOWYtNDNhYy1hNzNlLWUwMThlMjc5 YzJkNC5jcmwwHwYDVR0jBBgwFoAUs7QcrwOOl+lOWy/V0e9YnCntD0wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83YTgxZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4 ZTI3OWMyZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF428MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjmqLXdgdQamC7TfulzF417eKQC/R1jYr02UbWfgoXBfoPyhZWUsK2O iHee0ycxl28Fz6rNelLx5pQLim9mgzqMXxAXmBBWSFZmAR3iQcAJvFeoXr1gg/h0 ETKvd6I3TZieakcJ32l7bleX25enGw6U1tn6Qu++/GsuvfL0ZQdR2bsrkL6dIuV2 0w1sCDwNibFtXfXa8ScpMRU3uz5w3JOC6gMSq1mSCuIluDFzXCUzH4fQ5s+ks1Lp cEQ8jrB9WbLcowU7xNENRARk/nVgvIXu0gOx6oDYlh181w6OrFSbwVhKpPKsWuCh qEdHg0Z5w2xoWOo7Zaq+HIQs1aGQk8Y= -----END CERTIFICATE-----Generated at Sat Dec 6 18:21:44 2025 by rpki-client