This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa File: 9c3e3edc-3909-344f-8448-01bc508f03d9.roa (raw, json) Hash identifier: rd2ofn4SyAlMd6LyY6/oK3PXawvLWw5XO/vv1jJo2rs= Subject key identifier: 75:B9:5E:F8:2A:47:DD:D0:35:5C:2C:1E:CF:89:6C:2F:F0:B4:48:C6 Certificate issuer: /CN=311e0039-6b7c-42f2-a76e-395b51d9ec97 Certificate serial: 010D0C9F4328584BF8E0B2E6A3A8256A1532F240 Authority key identifier: 9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 400414 IP address blocks: 23.140.152.0/24 maxlen: 24 130.51.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:b2:e6:a3:a8:25:6a:15:32:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311e0039-6b7c-42f2-a76e-395b51d9ec97 Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=dc8daec2-2ddb-4716-8216-d9cb8d77cb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ae:ff:8e:4c:07:ce:25:7c:f1:c9:ee:26:59: 4d:ff:59:74:bb:c6:6a:fc:e2:fc:c1:39:41:4d:55: 2f:da:72:7c:50:14:f5:bc:09:32:2a:ce:1f:47:f1: 0b:69:84:41:4c:7e:92:11:6b:b4:78:ab:f2:ea:72: 46:53:b7:69:f0:13:b4:85:1d:5a:6a:3b:54:32:0d: d5:99:06:bf:69:23:bd:29:74:f9:f4:19:ea:83:f7: 0a:90:77:8f:25:03:b6:40:c5:35:8c:56:f5:48:71: 73:09:5b:22:24:dd:dc:cc:2c:f4:d5:f0:4f:80:a7: f7:1b:34:e0:6c:35:95:ba:d4:8e:d2:99:65:ab:43: 13:1c:59:4e:d4:d3:a6:7a:90:ec:da:cb:ac:48:4d: 39:4c:ee:92:b0:34:d2:13:39:46:c4:d7:78:4d:1a: 71:7a:1d:ad:02:ac:c2:d5:13:72:01:cc:77:34:04: 4f:45:7a:45:96:9a:18:e3:4f:2b:b9:7d:a2:07:56: 6e:14:ab:21:49:1e:0e:60:cf:34:0b:db:e4:6a:80: ce:9b:c2:92:73:5d:9a:19:7b:38:da:9c:de:6b:82: 67:cb:99:d1:b9:06:ed:cf:2c:21:50:e6:ff:93:9d: e1:67:85:54:95:d3:a9:a6:ec:7b:89:78:2b:1a:62: c9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B9:5E:F8:2A:47:DD:D0:35:5C:2C:1E:CF:89:6C:2F:F0:B4:48:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl X509v3 Authority Key Identifier: keyid:9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer sbgp-ipAddrBlock: critical IPv4: 23.140.152.0/24 130.51.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:52:f8:b0:1e:1d:9d:39:d8:24:59:11:f3:77:63:2b:ea:f8: 22:87:7d:01:2f:c3:1b:85:1b:dd:2c:e4:a0:a1:dd:de:af:1e: ed:d4:9c:25:ca:19:0c:ce:ea:cc:1e:65:75:0b:57:01:c1:7f: c9:03:57:34:ab:8f:eb:d1:72:52:55:00:5f:43:b9:e2:84:26: 38:40:1b:87:cd:9a:d2:c5:87:3a:4a:c1:62:8e:89:13:fe:e8: 91:b5:f7:83:bc:78:39:0d:21:a2:76:ec:8f:4e:b1:b6:bd:a5: 23:e4:2b:17:08:16:e1:16:d2:ce:0a:64:50:bf:ad:6f:47:d1: 4f:13:05:b1:7a:7c:6d:93:b7:26:29:5a:8a:d1:ed:15:9a:5c: a0:6a:2d:e7:2f:9c:e9:45:c8:a8:d8:b2:b6:2b:b9:5b:ed:f2: ea:e4:d3:60:c1:f5:f1:14:3e:fc:a0:da:b6:b5:2b:be:dd:68: 06:53:8b:e7:7f:84:66:5c:14:83:1e:d0:a0:bf:7a:87:bf:ba: 67:19:79:df:88:ff:37:c8:14:73:7a:38:b5:ff:aa:49:a0:87: 93:c0:89:64:ec:37:ee:2b:de:a1:0e:60:5e:56:8f:12:b0:07: 2b:fe:52:44:f6:20:16:43:96:16:8c:c7:53:29:69:bc:f4:37: 2c:af:6e:3b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEv44LLmo6glahUy8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZTAwMzktNmI3Yy00MmYyLWE3NmUtMzk1YjUxZDll Yzk3MB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZGM4ZGFlYzItMmRkYi00NzE2LTgyMTYtZDljYjhkNzdjYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq7/jkwHziV88cnuJllN/1l0u8Zq/OL8wTlB TVUv2nJ8UBT1vAkyKs4fR/ELaYRBTH6SEWu0eKvy6nJGU7dp8BO0hR1aajtUMg3V mQa/aSO9KXT59Bnqg/cKkHePJQO2QMU1jFb1SHFzCVsiJN3czCz01fBPgKf3GzTg bDWVutSO0pllq0MTHFlO1NOmepDs2susSE05TO6SsDTSEzlGxNd4TRpxeh2tAqzC 1RNyAcx3NARPRXpFlpoY408ruX2iB1ZuFKshSR4OYM80C9vkaoDOm8KSc12aGXs4 2pzea4Jny5nRuQbtzywhUOb/k53hZ4VUldOppux7iXgrGmLJRQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHW5XvgqR93QNVwsHs+JbC/wtEjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFl MDAzOS02YjdjLTQyZjItYTc2ZS0zOTViNTFkOWVjOTcvOWMzZTNlZGMtMzkwOS0z NDRmLTg0NDgtMDFiYzUwOGYwM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzExZTAwMzktNmI3Yy00MmYyLWE3 NmUtMzk1YjUxZDllYzk3LzMxMWUwMDM5LTZiN2MtNDJmMi1hNzZlLTM5NWI1MWQ5 ZWM5Ny5jcmwwHwYDVR0jBBgwFoAUmpCZekdKmKShJIlBVZC+fLdUNXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFlMDAzOS02YjdjLTQyZjItYTc2ZS0zOTVi NTFkOWVjOTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4yYAwQB gjN8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHVS+LAeHZ052CRZEfN3Yyvq+CKHfQEvwxuFG90s5KCh3d6v Hu3UnCXKGQzO6sweZXULVwHBf8kDVzSrj+vRclJVAF9DueKEJjhAG4fNmtLFhzpK wWKOiRP+6JG194O8eDkNIaJ27I9Osba9pSPkKxcIFuEW0s4KZFC/rW9H0U8TBbF6 fG2TtyYpWorR7RWaXKBqLecvnOlFyKjYsrYruVvt8urk02DB9fEUPvyg2ra1K77d aAZTi+d/hGZcFIMe0KC/eoe/umcZed+I/zfIFHN6OLX/qkmgh5PAiWTsN+4r3qEO YF5WjxKwByv+UkT2IBZDlhaMx1Mpabz0Nyyvbjs= -----END CERTIFICATE-----Generated at Tue Nov 25 17:27:06 2025 by rpki-client