This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa File: d859550a-458f-3e37-bf97-e6cd52ef8427.roa (raw, json) Hash identifier: XmDE6frNIjrHXmArZKTtC8H/nWoYpivrkN/0mNEnmWc= Subject key identifier: 45:C8:5E:7D:B2:F7:64:D4:93:6C:29:50:84:80:5D:EB:B7:A2:4D:EC Certificate issuer: /CN=a5e2d89d-6269-4405-9578-836517825b32 Certificate serial: 010D0C9F4328584BF4B08FEC2B04D68E9EF7F300 Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa Signing time: Sun 23 Nov 2025 14:00:38 +0000 ROA not before: Sun 23 Nov 2025 14:00:38 +0000 ROA not after: Sat 21 Feb 2026 14:00:38 +0000 asID: 13347 IP address blocks: 67.223.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f4:b0:8f:ec:2b:04:d6:8e:9e:f7:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32 Validity Not Before: Nov 23 14:00:38 2025 GMT Not After : Feb 21 14:00:38 2026 GMT Subject: CN=9e0fba7f-63ee-422f-850e-1a69a3723d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dc:36:bd:a1:ee:28:79:27:8e:33:e9:be:4e: fb:c4:bc:6f:b7:27:e5:ad:a9:be:b5:88:4b:1e:39: 43:a8:04:9b:df:ac:ac:cb:ec:71:73:dd:ad:9e:38: 59:19:1b:8b:5d:2a:6f:a1:36:48:8e:64:43:51:2d: ee:37:b6:ac:7b:ef:f6:d9:d1:17:ba:ba:ff:ea:6d: 47:08:fe:8c:6d:78:f2:68:a9:a0:ba:64:93:f5:06: 99:74:4c:22:4c:2a:7d:cb:20:cb:71:15:53:42:49: 73:2e:bd:4d:90:45:b9:89:af:59:0d:6e:fc:a3:f7: 93:88:6b:cc:f8:96:96:b5:af:b8:ec:9a:40:0a:06: a8:61:a0:ec:b0:98:0c:71:a2:ff:53:fa:9f:db:01: 3a:46:dc:29:ff:81:f4:44:ea:90:cb:de:34:8c:c1: 24:e3:ca:af:39:c5:19:55:59:c2:91:7d:ff:d8:2f: a4:c4:5b:4a:c1:3a:a7:98:5f:0b:6b:24:1e:25:4d: e9:91:29:cf:8e:c1:f3:ae:c8:41:51:b9:e3:c9:b7: c6:30:ce:bf:09:9b:6d:37:18:41:44:c1:86:7a:f3: 31:1e:df:88:ef:2c:73:17:db:ae:58:ff:a7:31:91: 21:49:9d:e8:81:05:dc:c4:82:36:db:55:a7:2c:ea: 09:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C8:5E:7D:B2:F7:64:D4:93:6C:29:50:84:80:5D:EB:B7:A2:4D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl X509v3 Authority Key Identifier: keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer sbgp-ipAddrBlock: critical IPv4: 67.223.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:68:3b:4e:83:e6:a0:6f:f8:2b:a1:04:3d:ff:6b:68:d5:54: 23:41:7d:fa:6d:c1:fc:7e:eb:59:e4:a8:29:ef:e8:32:71:58: 80:66:58:30:e2:a2:b6:cc:3e:fa:06:b2:ed:d1:d0:26:1e:3d: e0:f6:57:3a:47:82:1e:40:75:70:d3:37:a9:1f:36:03:0a:6e: 3f:4b:3a:f2:db:35:b6:72:cc:ad:a7:3e:39:3d:45:64:82:4a: 21:c5:b3:b4:6f:ab:ec:1c:26:0b:d9:93:44:ba:d9:52:3b:68: 99:a1:53:22:ea:ae:f2:11:4e:74:98:f6:80:1b:ce:dc:2c:14: bc:a0:8d:66:2a:c7:bc:ba:bd:56:15:86:32:88:12:20:92:63: e6:64:d4:73:e7:58:f9:ff:a3:aa:45:f3:e5:d8:a2:3e:d6:b0: 70:c3:9c:1d:a3:33:b8:8a:c0:3b:da:33:ed:aa:96:f2:b2:81: d7:d1:5c:15:d9:f0:fb:cd:32:a7:3b:74:b6:68:b2:0e:0c:a7: 33:d4:af:9a:05:86:f0:b8:d5:7d:c8:1b:03:be:b6:65:1f:08: 1b:2c:06:2e:14:64:2a:3e:be:ef:42:0a:93:1a:3d:4a:c8:65: 82:10:be:4d:2d:80:8c:e0:a3:1b:75:52:86:40:88:38:fb:01: f9:15:d0:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv0sI/sKwTWjp738wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMmQ4OWQtNjI2OS00NDA1LTk1NzgtODM2NTE3ODI1 YjMyMB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk OWUwZmJhN2YtNjNlZS00MjJmLTg1MGUtMWE2OWEzNzIzZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9w2vaHuKHknjjPpvk77xLxvtyflram+tYhL HjlDqASb36ysy+xxc92tnjhZGRuLXSpvoTZIjmRDUS3uN7ase+/22dEXurr/6m1H CP6MbXjyaKmgumST9QaZdEwiTCp9yyDLcRVTQklzLr1NkEW5ia9ZDW78o/eTiGvM +JaWta+47JpACgaoYaDssJgMcaL/U/qf2wE6Rtwp/4H0ROqQy940jMEk48qvOcUZ VVnCkX3/2C+kxFtKwTqnmF8LayQeJU3pkSnPjsHzrshBUbnjybfGMM6/CZttNxhB RMGGevMxHt+I7yxzF9uuWP+nMZEhSZ3ogQXcxII221WnLOoJzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXIXn2y92TUk2wpUISAXeu3ok3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUy ZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1MTc4MjViMzIvZDg1OTU1MGEtNDU4Zi0z ZTM3LWJmOTctZTZjZDUyZWY4NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTVlMmQ4OWQtNjI2OS00NDA1LTk1 NzgtODM2NTE3ODI1YjMyL2E1ZTJkODlkLTYyNjktNDQwNS05NTc4LTgzNjUxNzgy NWIzMi5jcmwwHwYDVR0jBBgwFoAU59BBfkHLFeCXHRtb1UGhvOtai84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUyZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1 MTc4MjViMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ99wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZoO06D5qBv+CuhBD3/a2jVVCNBffptwfx+61nkqCnv6DJxWIBmWDDi orbMPvoGsu3R0CYePeD2VzpHgh5AdXDTN6kfNgMKbj9LOvLbNbZyzK2nPjk9RWSC SiHFs7Rvq+wcJgvZk0S62VI7aJmhUyLqrvIRTnSY9oAbztwsFLygjWYqx7y6vVYV hjKIEiCSY+Zk1HPnWPn/o6pF8+XYoj7WsHDDnB2jM7iKwDvaM+2qlvKygdfRXBXZ 8PvNMqc7dLZosg4MpzPUr5oFhvC41X3IGwO+tmUfCBssBi4UZCo+vu9CCpMaPUrI ZYIQvk0tgIzgoxt1UoZAiDj7AfkV0Ls= -----END CERTIFICATE-----Generated at Wed Nov 26 02:00:28 2025 by rpki-client