This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/25e84704-60c2-30c2-9812-d48955828bb7.roa File: 25e84704-60c2-30c2-9812-d48955828bb7.roa (raw, json) Hash identifier: xR+16FJ17C/z5t0cfJmCdHbDLnMWwjS0WOlRyDwew8o= Subject key identifier: E7:98:FF:5D:E5:79:AA:2C:07:F9:31:4C:19:DC:6E:25:AF:30:7C:1E Certificate issuer: /CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d Certificate serial: 010D0C9F4328584C18FB84260C374C77E9A83F60 Authority key identifier: 34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/25e84704-60c2-30c2-9812-d48955828bb7.roa Signing time: Sat 06 Dec 2025 14:00:38 +0000 ROA not before: Sat 06 Dec 2025 14:00:38 +0000 ROA not after: Fri 06 Mar 2026 14:00:38 +0000 asID: 21647 IP address blocks: 23.167.200.0/24 maxlen: 24 2602:f9c6::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:fb:84:26:0c:37:4c:77:e9:a8:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d Validity Not Before: Dec 6 14:00:38 2025 GMT Not After : Mar 6 14:00:38 2026 GMT Subject: CN=c909bdcf-94df-4177-af76-293c49bded5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1e:2c:9d:fc:6a:51:08:fd:31:88:d1:f2:17: d1:c0:d3:f7:2d:fc:15:3e:5c:70:1b:46:6c:f0:99: 1a:7d:ab:5b:23:63:f0:f8:7c:7c:ec:69:10:db:e0: aa:08:eb:27:a9:bb:ad:11:fb:1b:04:4b:ea:b0:f1: 0c:ee:04:3c:d1:47:b2:28:89:c3:7c:a3:8f:cd:31: 1d:22:6a:0e:7d:f1:54:eb:d1:60:b6:be:cf:d6:89: 99:36:f8:47:b2:6d:3b:1e:56:c5:a6:3c:de:b6:f6: 79:1b:1c:83:dc:f8:ff:91:44:32:15:b8:95:a0:06: 7b:1f:e3:47:af:93:e4:3c:b6:75:33:fc:70:8a:84: 00:46:f9:11:b2:06:80:da:40:e2:f5:de:f9:43:a7: ec:bb:f8:95:8a:12:57:99:5d:db:d7:14:db:d6:e1: f8:94:93:ee:93:f5:9d:75:c4:85:5b:a5:1c:c1:d5: 00:97:b3:e3:78:51:24:85:4e:41:b2:dc:8c:18:a6: a9:de:f9:8e:7e:4f:c4:5f:30:20:c5:4e:5c:68:dc: 8a:02:80:a3:b1:63:e8:7a:a1:16:30:93:de:2d:d2: ba:93:7d:de:2f:ae:19:31:46:d3:70:1e:f7:cc:57: 7a:d4:fa:21:23:b2:5c:66:43:e3:2f:6a:1a:68:1e: f6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:98:FF:5D:E5:79:AA:2C:07:F9:31:4C:19:DC:6E:25:AF:30:7C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/25e84704-60c2-30c2-9812-d48955828bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl X509v3 Authority Key Identifier: keyid:34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer sbgp-ipAddrBlock: critical IPv4: 23.167.200.0/24 IPv6: 2602:f9c6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ec:28:7f:37:8d:2f:e5:b3:47:35:0e:c6:e6:90:5f:6c:7c: 06:e9:e9:9d:7b:b3:0b:66:1e:e1:9d:a1:10:6d:3e:20:eb:bc: 1e:c4:04:01:6a:b4:53:2a:02:e1:b1:87:7b:ab:b5:fa:3a:7b: 32:1a:38:0b:fa:75:a8:6e:59:62:4c:1e:a6:3f:12:7c:c5:e7: 33:c6:96:b1:b8:e5:c1:fa:2a:d2:9e:ea:66:5c:40:8f:21:e6: 17:b6:86:5b:de:ff:80:17:b0:0b:0f:b5:dc:38:20:58:fa:f9: 55:a0:6e:36:5a:d2:b1:d0:51:94:3b:f1:32:06:73:45:11:a4: 93:cf:92:6b:48:35:05:34:46:09:db:9b:28:94:85:0b:f1:43: 9d:6f:e3:9b:57:88:53:78:66:28:a6:f7:db:f3:54:67:3f:a3: a5:5d:b5:8e:9a:7c:8d:f9:61:fb:34:d6:5c:3e:f8:ad:d7:2e: f7:66:22:8d:9a:65:ce:f0:0a:0f:b8:31:5a:ec:1e:fe:0f:79: 42:1f:05:1a:30:07:41:dc:77:b5:d9:ae:86:29:9c:ff:12:61: f7:c3:83:52:cc:27:a2:84:74:fe:e5:8d:49:ed:d9:7b:f8:6f: 99:f8:c4:9f:cb:89:e5:be:9a:62:2c:33:c4:06:5a:25:8d:25: 93:13:db:40 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEwY+4QmDDdMd+moP2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQzMWNiYmYtNDQxZS00ZDhkLWI1OGYtNDE2N2QxMzg2 ZjZkMB4XDTI1MTIwNjE0MDAzOFoXDTI2MDMwNjE0MDAzOFowLzEtMCsGA1UEAxMk YzkwOWJkY2YtOTRkZi00MTc3LWFmNzYtMjkzYzQ5YmRlZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh4snfxqUQj9MYjR8hfRwNP3LfwVPlxwG0Zs 8JkafatbI2Pw+Hx87GkQ2+CqCOsnqbutEfsbBEvqsPEM7gQ80UeyKInDfKOPzTEd ImoOffFU69Fgtr7P1omZNvhHsm07HlbFpjzetvZ5GxyD3Pj/kUQyFbiVoAZ7H+NH r5PkPLZ1M/xwioQARvkRsgaA2kDi9d75Q6fsu/iVihJXmV3b1xTb1uH4lJPuk/Wd dcSFW6UcwdUAl7PjeFEkhU5BstyMGKap3vmOfk/EXzAgxU5caNyKAoCjsWPoeqEW MJPeLdK6k33eL64ZMUbTcB73zFd61PohI7JcZkPjL2oaaB72MwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOeY/13leaosB/kxTBncbiWvMHweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mNDMx Y2JiZi00NDFlLTRkOGQtYjU4Zi00MTY3ZDEzODZmNmQvMjVlODQ3MDQtNjBjMi0z MGMyLTk4MTItZDQ4OTU1ODI4YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjQzMWNiYmYtNDQxZS00ZDhkLWI1 OGYtNDE2N2QxMzg2ZjZkL2Y0MzFjYmJmLTQ0MWUtNGQ4ZC1iNThmLTQxNjdkMTM4 NmY2ZC5jcmwwHwYDVR0jBBgwFoAUNKAYHeaDHg2G04ycNul41/k14TkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mNDMxY2JiZi00NDFlLTRkOGQtYjU4Zi00MTY3 ZDEzODZmNmQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6fIMA4E AgACMAgDBgAmAvnGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAG7Ch/N40v5bNHNQ7G5pBfbHwG6emde7ML Zh7hnaEQbT4g67wexAQBarRTKgLhsYd7q7X6OnsyGjgL+nWoblliTB6mPxJ8xecz xpaxuOXB+irSnupmXECPIeYXtoZb3v+AF7ALD7XcOCBY+vlVoG42WtKx0FGUO/Ey BnNFEaSTz5JrSDUFNEYJ25solIUL8UOdb+ObV4hTeGYopvfb81RnP6OlXbWOmnyN +WH7NNZcPvit1y73ZiKNmmXO8AoPuDFa7B7+D3lCHwUaMAdB3He12a6GKZz/EmH3 w4NSzCeihHT+5Y1J7dl7+G+Z+MSfy4nlvppiLDPEBloljSWTE9tA -----END CERTIFICATE-----Generated at Mon Dec 8 19:01:45 2025 by rpki-client