This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/5519e4f6-5a45-36a9-9ac1-79f93fdae779.roa File: 5519e4f6-5a45-36a9-9ac1-79f93fdae779.roa (raw, json) Hash identifier: 8LMXmA6nzO7ZpUOzjFqsMNn89+fCUts+KJj0R73OUXM= Subject key identifier: F0:79:F1:C1:48:ED:92:55:3E:28:44:E4:6F:5B:ED:81:73:72:B2:B8 Certificate issuer: /CN=ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319 Certificate serial: 010D0C9F4328584BF8E0B3EB6AFAE728D6169080 Authority key identifier: 95:56:29:DD:34:D3:01:75:63:6E:F7:37:07:EC:8B:3C:6E:B3:72:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/5519e4f6-5a45-36a9-9ac1-79f93fdae779.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 26939 IP address blocks: 23.130.220.0/24 maxlen: 24 2602:f76b::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:b3:eb:6a:fa:e7:28:d6:16:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319 Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=cf6cbba1-082a-44fc-ba06-4e440b45e2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:e7:05:1e:94:0a:41:d0:e8:b1:8e:b6:71: 7b:fe:17:6f:ea:3e:56:3c:39:98:07:88:0a:f4:c0: 49:13:d3:58:08:50:ba:45:96:35:a3:83:50:18:82: ab:31:5e:5b:4f:0f:d9:37:de:02:e5:86:72:75:9a: 43:31:93:60:f2:d2:36:f6:50:fc:74:7c:26:5f:66: 0e:1e:78:97:80:74:1a:af:61:30:60:6e:e7:b7:c5: 53:84:3d:04:0b:5d:93:2c:b2:d6:8e:55:1e:de:2f: 33:1a:1b:6a:ff:c6:c5:11:72:f4:29:8f:c3:98:d2: 0a:26:8f:9e:7f:e0:6f:fd:ec:ab:9c:cf:24:b2:17: 36:08:3c:d1:df:60:f2:a9:7b:dc:23:b5:45:6c:99: 93:a9:bc:73:65:40:2a:81:03:65:08:4d:f0:ee:eb: 35:7f:25:aa:ce:22:dc:2c:b2:49:bb:e8:9c:a4:91: e2:82:e1:3f:06:75:08:44:99:6f:47:24:83:8f:e1: 9b:61:f9:15:69:4d:24:1a:d5:09:ac:9c:46:33:b4: ec:14:e5:11:6f:e2:32:2f:7c:c2:20:5c:80:26:e1: 4a:b9:d1:6e:3a:3f:86:df:30:2d:71:94:1d:a0:cf: 3c:1f:dc:3c:6f:ed:4c:9f:4a:55:eb:75:59:9e:d9: e6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:79:F1:C1:48:ED:92:55:3E:28:44:E4:6F:5B:ED:81:73:72:B2:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/5519e4f6-5a45-36a9-9ac1-79f93fdae779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.crl X509v3 Authority Key Identifier: keyid:95:56:29:DD:34:D3:01:75:63:6E:F7:37:07:EC:8B:3C:6E:B3:72:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer sbgp-ipAddrBlock: critical IPv4: 23.130.220.0/24 IPv6: 2602:f76b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e6:28:90:02:06:bd:83:53:9b:84:05:dd:6d:3b:72:94:01: 1b:dc:8c:bf:cd:fa:e1:41:58:a2:4c:5a:60:35:57:20:c4:f8: 1c:71:4d:73:17:ec:50:5e:98:8a:88:79:ef:de:09:98:06:02: 83:f3:e6:0e:16:3a:d6:cb:b2:c1:2b:b6:e5:90:c5:2f:38:2e: 8f:76:e3:a7:6f:9f:51:19:63:4a:2e:d7:7c:61:0e:0a:80:a6: ae:cb:21:91:5a:c6:5c:a6:0f:37:fb:7a:d7:b0:cf:5f:a8:a3: 2f:cc:66:d9:98:62:9d:c3:9a:5f:87:d9:78:cc:46:44:ac:df: 26:ee:01:a1:07:cc:1a:2d:da:2f:16:c6:4e:98:7d:f2:15:75: 60:eb:49:c4:44:2c:0e:e5:7b:db:f4:92:dc:cc:3d:af:d2:18: 1f:dd:d3:09:10:35:50:8f:fd:8d:70:58:85:87:d8:f7:ad:0a: 10:db:14:ef:20:d7:1b:f1:43:51:d9:42:c0:e9:6a:28:fc:6d: ba:5f:b0:d5:8b:6d:28:06:b3:15:b1:93:fd:81:15:e6:f5:d6: 49:30:1c:4c:ae:27:bf:4b:2d:78:cc:cd:79:53:21:84:91:68: 44:e4:23:8e:82:76:46:01:0b:9d:91:c0:c4:2e:06:a8:6c:f8: 2b:75:48:a4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEv44LPravrnKNYWkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UzZjFjYWItNWE4Ny00YmUzLThhMmUtZmMxMmU1ZWU2 MzE5MB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk Y2Y2Y2JiYTEtMDgyYS00NGZjLWJhMDYtNGU0NDBiNDVlMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6DnBR6UCkHQ6LGOtnF7/hdv6j5WPDmYB4gK 9MBJE9NYCFC6RZY1o4NQGIKrMV5bTw/ZN94C5YZydZpDMZNg8tI29lD8dHwmX2YO HniXgHQar2EwYG7nt8VThD0EC12TLLLWjlUe3i8zGhtq/8bFEXL0KY/DmNIKJo+e f+Bv/eyrnM8kshc2CDzR32DyqXvcI7VFbJmTqbxzZUAqgQNlCE3w7us1fyWqziLc LLJJu+icpJHiguE/BnUIRJlvRySDj+GbYfkVaU0kGtUJrJxGM7TsFOURb+IyL3zC IFyAJuFKudFuOj+G3zAtcZQdoM88H9w8b+1Mn0pV63VZntnmvwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPB58cFI7ZJVPihE5G9b7YFzcrK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZTNm MWNhYi01YTg3LTRiZTMtOGEyZS1mYzEyZTVlZTYzMTkvNTUxOWU0ZjYtNWE0NS0z NmE5LTlhYzEtNzlmOTNmZGFlNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2UzZjFjYWItNWE4Ny00YmUzLThh MmUtZmMxMmU1ZWU2MzE5L2NlM2YxY2FiLTVhODctNGJlMy04YTJlLWZjMTJlNWVl NjMxOS5jcmwwHwYDVR0jBBgwFoAUlVYp3TTTAXVjbvc3B+yLPG6zcjYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZTNmMWNhYi01YTg3LTRiZTMtOGEyZS1mYzEy ZTVlZTYzMTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4LcMA4E AgACMAgDBgQmAvdrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBa5iiQAga9g1ObhAXdbTtylAEb3Iy/zfrh QViiTFpgNVcgxPgccU1zF+xQXpiKiHnv3gmYBgKD8+YOFjrWy7LBK7blkMUvOC6P duOnb59RGWNKLtd8YQ4KgKauyyGRWsZcpg83+3rXsM9fqKMvzGbZmGKdw5pfh9l4 zEZErN8m7gGhB8waLdovFsZOmH3yFXVg60nERCwO5Xvb9JLczD2v0hgf3dMJEDVQ j/2NcFiFh9j3rQoQ2xTvINcb8UNR2ULA6Woo/G26X7DVi20oBrMVsZP9gRXm9dZJ MBxMrie/Sy14zM15UyGEkWhE5COOgnZGAQudkcDELgaobPgrdUik -----END CERTIFICATE-----Generated at Tue Nov 25 09:11:39 2025 by rpki-client