This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa File: 21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa (raw, json) Hash identifier: /Sl5UJaEzoCAvDazWDNw6gj8T7ZR85REQ+/SvG9SiPA= Subject key identifier: 7C:4F:BB:4A:E9:59:7C:92:D3:4E:8A:CD:72:E4:AC:36:83:61:74:D7 Certificate issuer: /CN=d80dfbd4-0944-4c24-a645-a238d9949fb7 Certificate serial: 010D0C9F4328584C5BFBDD27C8F1540F71B87080 Authority key identifier: A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa Signing time: Tue 30 Dec 2025 14:00:38 +0000 ROA not before: Tue 30 Dec 2025 14:00:38 +0000 ROA not after: Mon 30 Mar 2026 13:00:38 +0000 asID: 152918 IP address blocks: 23.141.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5b:fb:dd:27:c8:f1:54:0f:71:b8:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d80dfbd4-0944-4c24-a645-a238d9949fb7 Validity Not Before: Dec 30 14:00:38 2025 GMT Not After : Mar 30 13:00:38 2026 GMT Subject: CN=5f524f4a-12ff-473f-9bad-30ab43da0f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c1:85:42:e7:d9:71:a9:ec:6e:a5:5e:18:d3: ce:e7:31:d0:45:55:a1:92:82:3d:b3:b3:5c:9a:96: 7c:fd:d7:d1:cb:cc:40:d2:54:c7:4b:70:de:b1:71: 6a:15:a4:ec:6f:e1:cc:0a:a1:b0:19:ad:ff:f3:0b: 0b:db:c1:f4:a5:4d:50:db:7d:ba:bd:a3:ea:22:58: dc:b6:66:13:2c:c8:b5:45:39:2b:3b:8b:f5:df:30: 3b:7d:6e:2d:45:61:a2:d1:96:35:40:4a:eb:45:52: 18:d7:78:3e:33:ba:74:7a:36:8a:ff:93:d8:9d:46: 91:15:14:e1:b1:43:7c:36:15:ff:e3:6c:4a:92:8b: 7a:7f:ca:d8:b9:ae:52:89:19:9e:e4:35:2d:ae:02: fe:e5:69:5c:79:af:e8:c8:10:fe:c2:84:90:ce:1f: 07:1c:bc:59:93:ae:f2:e8:25:26:cd:17:e1:8a:4f: 5e:c0:bc:9c:c6:98:c7:1a:1c:20:5f:6a:4f:54:5a: 93:0b:46:5b:55:a1:43:ed:dc:5f:19:ec:5f:f3:0d: 27:8d:7e:50:5e:62:67:49:5d:55:ad:c5:23:7c:ed: 52:de:be:b7:59:14:1c:e4:53:25:21:90:a0:34:e4: d0:c0:03:54:68:9d:ae:c5:88:a5:04:20:e6:14:a7: 5c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4F:BB:4A:E9:59:7C:92:D3:4E:8A:CD:72:E4:AC:36:83:61:74:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.crl X509v3 Authority Key Identifier: keyid:A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer sbgp-ipAddrBlock: critical IPv4: 23.141.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c6:a9:c9:4f:0c:04:af:ea:db:8a:fb:6e:81:9f:f2:e2:72: 37:47:48:bd:2f:a1:cd:50:b6:28:de:1e:84:43:62:2c:b6:eb: c0:58:46:c9:ae:c0:ae:06:09:9f:e5:1b:fa:7e:92:ee:14:c3: 1c:19:09:41:a4:ba:48:ce:f1:6f:9d:2a:50:c4:a0:7c:51:96: f3:4b:5a:7e:ad:df:45:5f:3d:99:75:92:9c:a1:95:2b:f7:8e: f9:ad:69:cc:03:69:3d:32:fc:e0:98:3a:ef:66:32:60:26:1c: d5:d3:4d:23:0e:b9:74:94:48:7b:f0:fc:e5:df:68:7a:86:35: 64:c7:59:07:11:68:68:6b:15:50:be:73:d3:f8:82:ba:68:7d: 78:a2:41:e7:9f:3f:09:6b:72:c0:e7:1b:9a:f7:71:8f:03:55: e8:e9:e2:1e:df:56:e3:0e:09:80:8a:5b:64:a1:12:5a:d3:7e: 1d:9f:4f:0c:8e:b0:9d:1c:e2:c6:b7:a5:62:90:6a:ee:82:1e: 0d:16:29:a0:b6:bc:00:81:43:ac:45:ce:22:ab:bc:fb:da:ce: b3:db:bb:8b:1a:12:b6:72:32:84:91:b5:47:a9:8e:48:1e:fc: 32:dd:3d:f7:5e:50:3f:46:45:ec:90:ad:b0:97:34:de:8c:3b: ae:3a:2e:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExb+90nyPFUD3G4cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgwZGZiZDQtMDk0NC00YzI0LWE2NDUtYTIzOGQ5OTQ5 ZmI3MB4XDTI1MTIzMDE0MDAzOFoXDTI2MDMzMDEzMDAzOFowLzEtMCsGA1UEAxMk NWY1MjRmNGEtMTJmZi00NzNmLTliYWQtMzBhYjQzZGEwZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMGFQufZcansbqVeGNPO5zHQRVWhkoI9s7Nc mpZ8/dfRy8xA0lTHS3DesXFqFaTsb+HMCqGwGa3/8wsL28H0pU1Q2326vaPqIljc tmYTLMi1RTkrO4v13zA7fW4tRWGi0ZY1QErrRVIY13g+M7p0ejaK/5PYnUaRFRTh sUN8NhX/42xKkot6f8rYua5SiRme5DUtrgL+5Wlcea/oyBD+woSQzh8HHLxZk67y 6CUmzRfhik9ewLycxpjHGhwgX2pPVFqTC0ZbVaFD7dxfGexf8w0njX5QXmJnSV1V rcUjfO1S3r63WRQc5FMlIZCgNOTQwANUaJ2uxYilBCDmFKdcowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxPu0rpWXyS006KzXLkrDaDYXTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kODBk ZmJkNC0wOTQ0LTRjMjQtYTY0NS1hMjM4ZDk5NDlmYjcvMjFmNzgwZTQtODgwNC0z YzNmLWEzMmYtYzNjMThjZTVmYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDgwZGZiZDQtMDk0NC00YzI0LWE2 NDUtYTIzOGQ5OTQ5ZmI3L2Q4MGRmYmQ0LTA5NDQtNGMyNC1hNjQ1LWEyMzhkOTk0 OWZiNy5jcmwwHwYDVR0jBBgwFoAUo997XFZGSaHviZ1tCZ96IV4ljtQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kODBkZmJkNC0wOTQ0LTRjMjQtYTY0NS1hMjM4 ZDk5NDlmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF400MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPGqclPDASv6tuK+26Bn/LicjdHSL0voc1QtijeHoRDYiy268BYRsmu wK4GCZ/lG/p+ku4UwxwZCUGkukjO8W+dKlDEoHxRlvNLWn6t30VfPZl1kpyhlSv3 jvmtacwDaT0y/OCYOu9mMmAmHNXTTSMOuXSUSHvw/OXfaHqGNWTHWQcRaGhrFVC+ c9P4grpofXiiQeefPwlrcsDnG5r3cY8DVejp4h7fVuMOCYCKW2ShElrTfh2fTwyO sJ0c4sa3pWKQau6CHg0WKaC2vACBQ6xFziKrvPvazrPbu4saErZyMoSRtUepjkge /DLdPfdeUD9GReyQrbCXNN6MO646Lkg= -----END CERTIFICATE-----Generated at Sun Jan 25 10:39:34 2026 by rpki-client