This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/944af092-9dad-36e3-a6b5-5ea25e25cb0a.roa File: 944af092-9dad-36e3-a6b5-5ea25e25cb0a.roa (raw, json) Hash identifier: 2WCal2849YS5uHjGPgiPTxovGXiIXLmVEEeL4ZBzS4k= Subject key identifier: 5B:F9:DC:E5:1B:06:10:EE:DA:06:D8:E8:AE:17:0D:89:9A:7D:E2:12 Certificate issuer: /CN=d189c13c-82f8-4a93-80ac-c659e448dd77 Certificate serial: 010D0C9F4328584BF4B0ACA1F81E212780A35580 Authority key identifier: 34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/944af092-9dad-36e3-a6b5-5ea25e25cb0a.roa Signing time: Sun 23 Nov 2025 14:00:38 +0000 ROA not before: Sun 23 Nov 2025 14:00:38 +0000 ROA not after: Sat 21 Feb 2026 14:00:38 +0000 asID: 401400 IP address blocks: 23.128.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f4:b0:ac:a1:f8:1e:21:27:80:a3:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d189c13c-82f8-4a93-80ac-c659e448dd77 Validity Not Before: Nov 23 14:00:38 2025 GMT Not After : Feb 21 14:00:38 2026 GMT Subject: CN=e418d0b1-2b59-431c-a307-94f86ef3fcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7a:5e:6e:c2:67:a1:05:54:9f:79:41:c8:ec: fc:07:0f:1f:a2:08:d0:2d:7e:2e:98:68:aa:53:7f: 8a:58:7d:ee:4e:c8:a3:d4:0e:0e:31:f4:7b:41:7e: 68:10:aa:7d:98:95:ca:ea:b4:c8:55:6b:67:0a:65: 38:f4:3f:6c:4c:fe:8e:1e:0e:20:c8:d9:bd:a0:26: 04:30:13:1b:8d:63:e0:50:55:e1:cc:f5:d4:6e:61: 7a:65:38:7c:6c:ae:2d:a9:ca:ce:26:a6:92:a4:50: 66:2f:bf:a8:46:6a:58:d2:54:c3:24:6f:b4:29:c5: 60:2e:5f:81:ca:6e:4b:11:6d:42:68:92:6b:8e:39: b8:78:23:8d:40:aa:88:df:77:17:3f:b3:cd:26:26: a0:32:78:34:bf:62:b8:af:57:85:fb:f9:ef:20:ae: f0:b5:3c:92:12:06:e2:b8:87:ba:3b:b1:9b:eb:e7: 1f:c6:29:5d:33:6a:a0:f1:85:e3:6d:de:a6:4d:47: c8:b8:34:9e:af:af:7b:e8:4d:c7:7e:ea:6d:c4:da: 86:8f:af:35:92:b2:4e:70:88:0c:f0:41:99:37:1a: c1:8f:7f:13:e2:02:89:62:a5:0a:6d:3c:ce:77:b9: 4b:7e:af:95:24:35:18:9f:9c:84:43:53:49:e2:94: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F9:DC:E5:1B:06:10:EE:DA:06:D8:E8:AE:17:0D:89:9A:7D:E2:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/944af092-9dad-36e3-a6b5-5ea25e25cb0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.crl X509v3 Authority Key Identifier: keyid:34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer sbgp-ipAddrBlock: critical IPv4: 23.128.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:76:bd:f3:fa:ca:14:7b:4e:c2:34:20:c2:bb:3a:e7:c0:24: 71:55:eb:a5:4f:22:2b:ff:90:52:6f:b9:79:7c:7b:78:9b:6a: 46:d8:0f:36:fa:8c:e0:fb:2e:85:c3:65:3e:ca:11:dd:68:5e: 33:0f:cd:c9:0a:85:f1:87:e0:2d:40:b6:60:a7:33:12:98:5d: d3:db:da:3a:11:b2:e1:ed:d9:f7:86:ef:57:2c:67:2b:c8:a2: 43:0f:55:2c:55:8c:35:a3:fb:07:df:78:ec:35:e8:e3:07:cb: fa:21:b4:1c:fe:95:0f:0b:bd:a8:ea:ad:92:71:5d:61:40:32: 0a:86:f7:9b:b9:74:8a:8d:91:e6:f9:b9:a8:13:ee:26:b8:ef: 67:ce:a3:56:f8:76:52:bd:a9:b4:c1:78:e3:7f:a9:6c:ee:fa: 43:b7:90:9e:3f:f3:09:c3:94:94:fa:54:2f:49:d4:80:70:5a: d1:f0:9f:22:4d:83:27:13:ba:b1:1b:c0:5b:ab:02:2f:09:7a: 35:b2:d1:0f:f4:2f:af:9f:17:e1:33:5d:24:7b:02:35:a1:54: 02:b0:ea:ac:a7:26:92:5e:a1:8f:47:f8:1c:80:22:07:63:a6: c6:3a:47:e3:37:22:b9:c7:c2:d8:b3:2a:ba:1a:01:6d:b2:71: b7:94:36:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv0sKyh+B4hJ4CjVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4OWMxM2MtODJmOC00YTkzLTgwYWMtYzY1OWU0NDhk ZDc3MB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZTQxOGQwYjEtMmI1OS00MzFjLWEzMDctOTRmODZlZjNmY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHpebsJnoQVUn3lByOz8Bw8fogjQLX4umGiq U3+KWH3uTsij1A4OMfR7QX5oEKp9mJXK6rTIVWtnCmU49D9sTP6OHg4gyNm9oCYE MBMbjWPgUFXhzPXUbmF6ZTh8bK4tqcrOJqaSpFBmL7+oRmpY0lTDJG+0KcVgLl+B ym5LEW1CaJJrjjm4eCONQKqI33cXP7PNJiagMng0v2K4r1eF+/nvIK7wtTySEgbi uIe6O7Gb6+cfxildM2qg8YXjbd6mTUfIuDSer6976E3HfuptxNqGj681krJOcIgM 8EGZNxrBj38T4gKJYqUKbTzOd7lLfq+VJDUYn5yEQ1NJ4pRofwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv53OUbBhDu2gbY6K4XDYmafeISMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMTg5 YzEzYy04MmY4LTRhOTMtODBhYy1jNjU5ZTQ0OGRkNzcvOTQ0YWYwOTItOWRhZC0z NmUzLWE2YjUtNWVhMjVlMjVjYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDE4OWMxM2MtODJmOC00YTkzLTgw YWMtYzY1OWU0NDhkZDc3L2QxODljMTNjLTgyZjgtNGE5My04MGFjLWM2NTllNDQ4 ZGQ3Ny5jcmwwHwYDVR0jBBgwFoAUNHebP4O34C4ygPYlixA/2j3VvUwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMTg5YzEzYy04MmY4LTRhOTMtODBhYy1jNjU5 ZTQ0OGRkNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4AEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR2vfP6yhR7TsI0IMK7OufAJHFV66VPIiv/kFJvuXl8e3ibakbYDzb6 jOD7LoXDZT7KEd1oXjMPzckKhfGH4C1AtmCnMxKYXdPb2joRsuHt2feG71csZyvI okMPVSxVjDWj+wffeOw16OMHy/ohtBz+lQ8LvajqrZJxXWFAMgqG95u5dIqNkeb5 uagT7ia472fOo1b4dlK9qbTBeON/qWzu+kO3kJ4/8wnDlJT6VC9J1IBwWtHwnyJN gycTurEbwFurAi8JejWy0Q/0L6+fF+EzXSR7AjWhVAKw6qynJpJeoY9H+ByAIgdj psY6R+M3IrnHwtizKroaAW2ycbeUNmU= -----END CERTIFICATE-----Generated at Sun Nov 23 19:54:07 2025 by rpki-client