This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa File: 2680c2a2-cabf-3554-9a13-b69dcab407b9.roa (raw, json) Hash identifier: XVsInhDKhv4Yoi+kK5Z4IJUiBQaWlUvOz8gUTZPNayA= Subject key identifier: FE:4A:7B:81:40:41:CA:D6:BC:B0:21:85:02:2B:1D:44:66:4C:2F:C3 Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F4328584BF615EA65044C1F8569BE9180 Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 46962 IP address blocks: 23.133.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:ea:65:04:4c:1f:85:69:be:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=b5f6c9fb-ad7d-44bd-b5ac-db4d29c9328d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:52:7a:f6:1a:b7:8a:63:90:1f:c1:a8:9f: af:d1:a3:20:49:21:36:16:21:f2:ae:37:a8:e0:0f: 8e:3c:fd:0a:82:4a:18:2f:4a:45:07:1d:8f:59:05: 38:6e:7c:2f:ec:a3:d7:8f:2c:1b:66:80:b0:25:7a: 47:bc:08:df:67:6b:8e:6f:cd:a7:01:c0:09:54:89: df:09:52:96:70:87:ac:59:53:2f:46:69:85:e8:c3: 25:88:09:37:90:33:cf:fe:7e:25:9d:e7:d6:4d:ba: 04:01:4a:b7:8d:33:a3:a5:8e:67:11:79:48:b6:2a: b8:38:18:c9:15:71:e3:a1:36:f7:e7:1f:99:85:ac: 24:51:7b:19:c9:c1:39:08:8e:97:51:70:bf:5a:31: 93:ed:1b:aa:16:f0:5d:11:74:ea:52:29:30:6a:cc: 6d:55:27:d3:9e:2c:c4:74:47:19:0a:26:81:0a:b2: 78:12:49:6f:ac:15:60:9d:c3:da:53:b9:26:99:38: c4:2c:af:13:9d:5b:79:81:04:03:05:04:d5:9c:f5: 99:7f:ec:47:71:6b:8f:b1:99:35:75:f0:4b:c5:b9: f3:9d:4f:fc:eb:70:5b:b4:13:7e:a1:8c:6e:53:09: a5:84:88:b2:ce:ef:5b:09:ca:00:fa:e3:a7:eb:d5: 1c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4A:7B:81:40:41:CA:D6:BC:B0:21:85:02:2B:1D:44:66:4C:2F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv4: 23.133.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:90:c0:ee:96:35:23:9a:9e:b3:43:b7:ec:7b:ac:88:2d:63: b4:0c:5e:0c:ec:6f:47:c1:6d:74:9f:b6:23:89:95:15:38:4f: 8f:d4:b7:c1:c9:a4:9f:38:7c:3c:49:4b:f6:c4:a6:c4:ad:55: bf:54:1e:9c:20:54:51:83:3a:43:f2:1e:5f:00:0f:3a:fd:78: e5:20:85:cf:7c:d8:b7:d3:10:84:72:56:ab:2f:48:b2:82:18: d9:c2:98:25:f3:39:3b:f4:99:70:0d:99:c9:62:02:7b:26:3a: 72:72:64:05:8d:b3:5f:15:cd:fa:4b:d4:c7:7b:fa:f3:19:96: 7b:90:70:ca:f1:14:cd:6b:75:17:13:f1:96:4a:30:9b:38:2e: a0:c3:01:5c:1c:17:75:5b:72:f6:f0:50:3c:c0:3b:40:5e:3f: 9c:79:31:61:35:6d:2c:51:6d:6e:4b:ed:98:25:f3:b9:d9:63: eb:83:4b:61:87:d0:26:83:f5:76:4b:e9:46:66:e6:b4:ab:c2: ee:72:74:bf:f1:b0:b2:c3:67:e0:8f:d0:6c:84:21:6c:11:3d: a9:e1:04:fd:f0:a3:d8:ff:ab:3d:f9:35:c7:39:8b:c7:36:1d: e0:ae:95:71:a2:43:ac:d8:a8:4e:f8:f9:13:c2:ef:7f:16:06: d4:3a:1e:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2FeplBEwfhWm+kYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk YjVmNmM5ZmItYWQ3ZC00NGJkLWI1YWMtZGI0ZDI5YzkzMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLdSevYat4pjkB/BqJ+v0aMgSSE2FiHyrjeo 4A+OPP0KgkoYL0pFBx2PWQU4bnwv7KPXjywbZoCwJXpHvAjfZ2uOb82nAcAJVInf CVKWcIesWVMvRmmF6MMliAk3kDPP/n4lnefWTboEAUq3jTOjpY5nEXlItiq4OBjJ FXHjoTb35x+ZhawkUXsZycE5CI6XUXC/WjGT7RuqFvBdEXTqUikwasxtVSfTnizE dEcZCiaBCrJ4EklvrBVgncPaU7kmmTjELK8TnVt5gQQDBQTVnPWZf+xHcWuPsZk1 dfBLxbnznU/863BbtBN+oYxuUwmlhIiyzu9bCcoA+uOn69UczwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5Ke4FAQcrWvLAhhQIrHURmTC/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvMjY4MGMyYTItY2FiZi0z NTU0LTlhMTMtYjY5ZGNhYjQwN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4V4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGQwO6WNSOanrNDt+x7rIgtY7QMXgzsb0fBbXSftiOJlRU4T4/Ut8HJ pJ84fDxJS/bEpsStVb9UHpwgVFGDOkPyHl8ADzr9eOUghc982LfTEIRyVqsvSLKC GNnCmCXzOTv0mXANmcliAnsmOnJyZAWNs18VzfpL1Md7+vMZlnuQcMrxFM1rdRcT 8ZZKMJs4LqDDAVwcF3VbcvbwUDzAO0BeP5x5MWE1bSxRbW5L7Zgl87nZY+uDS2GH 0CaD9XZL6UZm5rSrwu5ydL/xsLLDZ+CP0GyEIWwRPanhBP3wo9j/qz35Ncc5i8c2 HeCulXGiQ6zYqE74+RPC738WBtQ6HhM= -----END CERTIFICATE-----Generated at Tue Nov 25 09:11:55 2025 by rpki-client