This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3d20060e-f449-30c4-8530-5b626095efd1.roa File: 3d20060e-f449-30c4-8530-5b626095efd1.roa (raw, json) Hash identifier: Tsc/niPnWAGlulndsVbEtKL4sX0wnyOu+MuD3+PZ/cU= Subject key identifier: 02:60:60:D9:15:DA:F2:C5:88:56:FD:27:95:F7:FA:89:3C:5D:30:72 Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F4328584C2A0C38ACB9791429FA4C2740 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3d20060e-f449-30c4-8530-5b626095efd1.roa Signing time: Fri 12 Dec 2025 16:43:13 +0000 ROA not before: Fri 12 Dec 2025 16:43:13 +0000 ROA not after: Thu 12 Mar 2026 15:43:13 +0000 asID: 21658 IP address blocks: 23.131.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2a:0c:38:ac:b9:79:14:29:fa:4c:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: Dec 12 16:43:13 2025 GMT Not After : Mar 12 15:43:13 2026 GMT Subject: CN=2aa7222e-e1c8-450f-aa5d-795184be836f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:84:5a:83:5f:3e:b0:ca:cb:60:9c:e0:76:e9: d6:73:13:ce:36:25:bd:4d:ad:a9:e5:89:5d:ae:84: 2b:fc:69:58:7c:59:3c:ae:6b:fe:cc:84:7f:77:50: 89:da:f3:fc:3d:ff:14:b4:9a:c8:b5:9f:34:79:27: ad:c4:9d:e8:88:f5:7e:c6:a8:72:43:b4:9a:02:a6: 2d:67:cb:62:3b:e1:17:46:55:32:82:43:75:bb:46: 45:9d:3f:02:9e:63:8d:5d:19:94:ea:04:d2:00:4d: c8:3e:f5:7d:e5:c4:45:44:84:c0:fc:6d:55:36:9f: 01:80:e2:aa:67:1c:5d:99:af:cd:44:11:0c:f9:7d: 79:b7:a4:11:24:e1:e3:d4:b9:d0:7b:f9:ba:ff:3b: 99:e8:c8:3a:9d:6b:eb:c4:c0:10:68:d7:a8:32:eb: 5d:da:92:98:5b:cd:38:41:eb:a7:a3:06:d5:93:98: 46:54:0e:93:39:11:8f:f8:d2:d2:e8:33:5e:1f:d0: b4:a1:56:16:74:f0:19:ab:42:60:96:43:b0:ff:f2: 56:c7:22:1f:51:5d:4e:1a:87:eb:27:79:bc:75:85: 5d:ac:c4:49:27:83:19:5d:09:67:ba:27:bd:ad:99: 1d:f9:38:ec:0c:7b:9d:ee:9f:08:17:d7:74:90:5b: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:60:60:D9:15:DA:F2:C5:88:56:FD:27:95:F7:FA:89:3C:5D:30:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3d20060e-f449-30c4-8530-5b626095efd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv4: 23.131.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:dd:07:46:e8:be:cf:72:11:d9:8b:10:fd:45:af:96:8f:28: fc:a6:8b:16:79:40:2e:d0:58:34:42:a9:1e:e3:db:b7:9a:58: da:19:39:f1:b9:c2:75:d5:31:5b:67:36:3e:48:ef:40:dc:bc: 11:da:3e:56:67:ed:db:ca:da:ce:d3:65:f4:81:38:bf:d5:ab: 18:89:e0:ba:53:23:90:59:1e:26:3d:6b:17:4d:81:0a:9e:9a: 8c:20:83:8b:77:56:80:b7:5f:2e:54:b7:5e:d1:c5:0f:c7:12: ff:27:b3:60:d5:c7:7b:fb:5d:0e:68:6f:6e:40:72:13:ab:41: cc:c1:43:a1:72:f8:74:4c:96:89:e7:af:c5:6e:9f:48:a3:2b: fa:47:6b:ee:36:39:1c:1c:4a:59:c3:47:d9:92:cb:e6:81:67: fa:02:02:90:dd:91:92:b1:b2:30:26:8c:b8:db:25:5d:51:fa: aa:21:15:6a:18:dc:29:4f:a8:98:60:86:0d:95:9d:75:2b:de: 1a:a2:80:e8:0c:22:47:6d:1c:5c:94:35:89:53:1e:ce:44:81: 6b:5c:0e:92:40:d7:44:b4:f6:d2:aa:d4:db:fd:9f:9b:3f:df: 54:6d:b9:ed:4f:3a:89:c1:2e:48:d5:07:d5:10:f3:98:a9:58: 0a:b1:f0:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwqDDisuXkUKfpMJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI1MTIxMjE2NDMxM1oXDTI2MDMxMjE1NDMxM1owLzEtMCsGA1UEAxMk MmFhNzIyMmUtZTFjOC00NTBmLWFhNWQtNzk1MTg0YmU4MzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoRag18+sMrLYJzgdunWcxPONiW9Ta2p5Yld roQr/GlYfFk8rmv+zIR/d1CJ2vP8Pf8UtJrItZ80eSetxJ3oiPV+xqhyQ7SaAqYt Z8tiO+EXRlUygkN1u0ZFnT8CnmONXRmU6gTSAE3IPvV95cRFRITA/G1VNp8BgOKq Zxxdma/NRBEM+X15t6QRJOHj1LnQe/m6/zuZ6Mg6nWvrxMAQaNeoMutd2pKYW804 QeunowbVk5hGVA6TORGP+NLS6DNeH9C0oVYWdPAZq0JglkOw//JWxyIfUV1OGofr J3m8dYVdrMRJJ4MZXQlnuie9rZkd+TjsDHud7p8IF9d0kFt5mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJgYNkV2vLFiFb9J5X3+ok8XTByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvM2QyMDA2MGUtZjQ0OS0z MGM0LTg1MzAtNWI2MjYwOTVlZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4O4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzdB0bovs9yEdmLEP1Fr5aPKPymixZ5QC7QWDRCqR7j27eaWNoZOfG5 wnXVMVtnNj5I70DcvBHaPlZn7dvK2s7TZfSBOL/VqxiJ4LpTI5BZHiY9axdNgQqe mowgg4t3VoC3Xy5Ut17RxQ/HEv8ns2DVx3v7XQ5ob25AchOrQczBQ6Fy+HRMlonn r8Vun0ijK/pHa+42ORwcSlnDR9mSy+aBZ/oCApDdkZKxsjAmjLjbJV1R+qohFWoY 3ClPqJhghg2VnXUr3hqigOgMIkdtHFyUNYlTHs5EgWtcDpJA10S09tKq1Nv9n5s/ 31Rtue1POonBLkjVB9UQ85ipWAqx8G8= -----END CERTIFICATE-----Generated at Sun Dec 14 17:07:15 2025 by rpki-client