This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa File: a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa (raw, json) Hash identifier: 2vgqiYA8P/Bg+uhwtviOEysqPghyPJroBZ4zXCINGPE= Subject key identifier: 9F:B4:95:34:63:96:49:97:4D:0D:2B:B1:32:CD:88:0F:12:09:2A:3F Certificate issuer: /CN=3d1c406c-fcae-4d83-9c1a-5c930e814683 Certificate serial: 010D0C9F4328584C2DEBA590C9D757B59DC6A2C0 Authority key identifier: 9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa Signing time: Sun 14 Dec 2025 02:00:31 +0000 ROA not before: Sun 14 Dec 2025 02:00:31 +0000 ROA not after: Sat 14 Mar 2026 01:00:31 +0000 asID: 401473 IP address blocks: 23.128.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2d:eb:a5:90:c9:d7:57:b5:9d:c6:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d1c406c-fcae-4d83-9c1a-5c930e814683 Validity Not Before: Dec 14 02:00:31 2025 GMT Not After : Mar 14 01:00:31 2026 GMT Subject: CN=050d0cf9-a3d8-44c7-a940-394b67b6347b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:02:c1:e4:e7:83:14:30:c2:d1:f0:16:18:45: 45:ce:8a:30:8e:50:cb:a4:92:7e:e9:2b:e1:10:fd: 63:2b:66:24:36:ba:93:cf:4a:78:b4:fe:7c:c1:65: 8a:07:8c:dc:21:4c:b9:c7:2e:d2:08:d7:a7:e5:a2: 21:be:e3:e8:13:c6:ad:1d:88:44:ad:f6:0b:0e:bc: 63:5b:e1:19:a3:f9:2b:28:e9:ac:50:be:a1:f1:7d: 24:35:a0:42:28:f4:f2:7e:7a:ca:dc:79:a2:c1:57: aa:ce:0f:26:51:52:5a:fc:d3:5e:65:6b:95:65:2a: cb:b1:fd:ee:d5:35:06:06:82:64:72:a0:b8:e7:19: 3f:81:23:43:8f:67:4d:a2:2f:00:59:7a:8a:99:7a: e1:bd:f6:8c:dd:53:b2:fc:18:29:73:4a:d9:78:45: 16:8f:b6:47:b7:79:37:6a:c2:44:1a:7b:1c:b7:9d: 22:a9:5e:8d:0d:31:56:90:a2:30:47:9d:f2:7e:99: bd:5d:3b:0e:e8:f8:65:03:47:0a:81:37:9d:3a:a7: 15:59:d2:5f:0d:f0:7b:9b:e2:f4:fd:07:75:1e:06: 51:cb:22:88:e1:e7:23:54:db:96:f6:35:23:23:b1: 50:fa:e9:c9:ad:54:ce:7f:83:5a:52:fd:8b:18:f5: a1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B4:95:34:63:96:49:97:4D:0D:2B:B1:32:CD:88:0F:12:09:2A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl X509v3 Authority Key Identifier: keyid:9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer sbgp-ipAddrBlock: critical IPv4: 23.128.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3d:16:2a:94:6f:c8:1c:e9:74:36:80:39:15:d6:4b:db:9d: 15:a9:fb:57:6d:35:c3:bc:be:60:5a:99:c6:13:5d:9d:18:07: 04:9c:f8:ef:18:cc:cf:7f:50:eb:7c:73:70:88:27:fe:c9:43: f4:9b:76:21:67:10:3a:4c:4e:5f:0f:57:ed:d3:e9:01:79:51: 10:e5:ae:fb:06:80:ea:a2:d4:16:61:39:90:75:12:0e:b1:38: 0b:71:d9:48:ec:d5:74:f9:93:42:07:8d:f8:ee:d8:cc:ae:e6: 08:0c:ae:d2:02:cb:52:0a:0d:fd:da:5a:3c:f6:2f:f7:58:51: 71:58:09:7f:78:e0:58:72:29:c0:e2:fe:02:fe:76:28:59:87: 27:36:fa:d8:e9:be:0c:42:8a:4b:d0:1d:52:b0:b9:28:10:63: b0:e7:3a:fe:33:03:67:83:c6:6e:b8:be:39:89:33:6d:d1:43: b0:40:dd:fe:52:c1:fe:07:b1:63:6d:7c:24:db:e1:f4:f9:1f: 8f:4a:59:c2:86:02:9d:94:01:27:1b:89:03:ab:6e:4a:c8:86: 92:6e:86:ba:62:4e:b7:62:bf:92:ee:23:9a:69:de:41:49:c0: aa:43:bf:15:4e:c7:a6:2e:d1:ed:7a:80:71:6e:5c:99:ea:1b: 5e:24:f0:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwt66WQyddXtZ3GosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxYzQwNmMtZmNhZS00ZDgzLTljMWEtNWM5MzBlODE0 NjgzMB4XDTI1MTIxNDAyMDAzMVoXDTI2MDMxNDAxMDAzMVowLzEtMCsGA1UEAxMk MDUwZDBjZjktYTNkOC00NGM3LWE5NDAtMzk0YjY3YjYzNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArALB5OeDFDDC0fAWGEVFzoowjlDLpJJ+6Svh EP1jK2YkNrqTz0p4tP58wWWKB4zcIUy5xy7SCNen5aIhvuPoE8atHYhErfYLDrxj W+EZo/krKOmsUL6h8X0kNaBCKPTyfnrK3HmiwVeqzg8mUVJa/NNeZWuVZSrLsf3u 1TUGBoJkcqC45xk/gSNDj2dNoi8AWXqKmXrhvfaM3VOy/Bgpc0rZeEUWj7ZHt3k3 asJEGnsct50iqV6NDTFWkKIwR53yfpm9XTsO6PhlA0cKgTedOqcVWdJfDfB7m+L0 /Qd1HgZRyyKI4ecjVNuW9jUjI7FQ+unJrVTOf4NaUv2LGPWh8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+0lTRjlkmXTQ0rsTLNiA8SCSo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDFj NDA2Yy1mY2FlLTRkODMtOWMxYS01YzkzMGU4MTQ2ODMvYTM1MDhhY2YtNmFjZi0z MGY3LWI4YzAtYThkODFiMGU0MWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QxYzQwNmMtZmNhZS00ZDgzLTlj MWEtNWM5MzBlODE0NjgzLzNkMWM0MDZjLWZjYWUtNGQ4My05YzFhLTVjOTMwZTgx NDY4My5jcmwwHwYDVR0jBBgwFoAUmuQWvmKOqdLt6p/XSIGytTENoVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDFjNDA2Yy1mY2FlLTRkODMtOWMxYS01Yzkz MGU4MTQ2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg9FiqUb8gc6XQ2gDkV1kvbnRWp+1dtNcO8vmBamcYTXZ0YBwSc+O8Y zM9/UOt8c3CIJ/7JQ/SbdiFnEDpMTl8PV+3T6QF5URDlrvsGgOqi1BZhOZB1Eg6x OAtx2Ujs1XT5k0IHjfju2Myu5ggMrtICy1IKDf3aWjz2L/dYUXFYCX944FhyKcDi /gL+dihZhyc2+tjpvgxCikvQHVKwuSgQY7DnOv4zA2eDxm64vjmJM23RQ7BA3f5S wf4HsWNtfCTb4fT5H49KWcKGAp2UAScbiQOrbkrIhpJuhrpiTrdiv5LuI5pp3kFJ wKpDvxVOx6Yu0e16gHFuXJnqG14k8DQ= -----END CERTIFICATE-----Generated at Mon Dec 15 13:13:30 2025 by rpki-client