This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa File: d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa (raw, json) Hash identifier: e9eXOp2vsDxxQjTvXz4O/83AteMNIi0xFg9g5fOuMV0= Subject key identifier: E8:C7:48:F9:81:70:56:37:D8:5E:23:BB:A4:AF:A4:14:28:31:BE:AC Certificate issuer: /CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab Certificate serial: 010D0C9F4328584C645C0DC3D82AAD1939CC8480 Authority key identifier: 97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 19879 IP address blocks: 23.169.88.0/24 maxlen: 24 23.169.89.0/24 maxlen: 24 2602:f9a6::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5c:0d:c3:d8:2a:ad:19:39:cc:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=31a8b537-0867-4825-a55b-cd5a0c8fe592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:27:a3:0f:5a:29:3c:f7:85:21:cf:5a:54:10: 03:37:34:4d:6d:b0:6e:fd:a4:a5:8a:47:37:fa:fa: d8:2b:43:6d:da:8f:0a:0d:16:f1:58:7e:34:86:12: 2d:d8:96:e3:72:d9:fb:50:38:d9:35:fd:6d:9d:56: 4a:fb:7b:16:09:92:18:6d:1c:4e:83:da:8d:b4:1d: 08:e7:6a:8d:a0:f7:76:18:71:35:5e:6a:81:46:70: bd:d4:e3:72:0a:06:62:be:59:7f:0e:df:26:99:6d: 01:a0:a1:95:a9:3a:51:c0:82:99:36:5e:cc:11:ed: 55:69:dc:69:c9:f4:37:20:31:01:75:fd:66:d3:56: 74:1e:ab:d8:f7:a2:16:ac:be:89:1d:7d:65:33:e7: 97:c2:0a:02:fa:ce:d1:63:27:f9:9a:3f:86:c7:67: 33:31:55:1d:2b:fb:e2:a9:ad:8c:09:7b:4d:04:84: 06:f7:be:9d:99:31:3e:d7:c3:13:49:52:f4:4b:76: a2:61:d8:bf:84:60:38:95:58:02:0b:0f:c2:3b:67: 58:c4:90:66:0b:38:eb:6d:57:2f:cc:27:de:7b:03: 46:41:ee:84:a4:8d:7d:41:57:16:a4:b1:aa:0b:f2: 5d:fc:17:74:a3:3d:cc:62:94:8b:5f:40:9d:60:0a: c6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C7:48:F9:81:70:56:37:D8:5E:23:BB:A4:AF:A4:14:28:31:BE:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl X509v3 Authority Key Identifier: keyid:97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer sbgp-ipAddrBlock: critical IPv4: 23.169.88.0/23 IPv6: 2602:f9a6::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1f:6e:2f:4c:b8:e1:00:3f:e6:e0:e1:1e:97:44:c9:61:83: 1e:ca:fe:1b:c4:6d:d3:73:7f:ff:ec:41:3a:c3:ad:a3:84:1a: ac:7c:6e:45:01:0b:43:45:42:a0:af:8e:f9:a2:2d:b7:fb:e8: 5f:89:9d:29:cf:1a:4a:57:da:7e:6f:04:87:40:ca:ff:df:52: 55:d8:d8:69:06:90:4c:2e:c8:53:57:44:e0:f1:99:f8:c7:ac: f2:6c:d3:cc:1b:a7:62:38:de:9c:1b:d1:f1:6c:5f:91:45:7a: 11:c7:11:0c:fb:7b:1c:c4:93:ac:c3:fc:82:b2:dd:3c:bd:36: 2d:32:39:82:22:25:98:de:3d:a3:f7:0a:14:4e:7c:c8:2a:13: 27:66:17:61:00:0a:b3:c5:a3:b9:09:2d:70:e5:bb:8f:fd:d2: e5:9b:b0:c1:8b:6b:23:0e:d5:22:fa:97:c3:d3:a5:b0:fd:1f: a2:e6:6e:20:97:84:84:9c:c1:d2:c6:2a:3c:10:fa:83:30:d1: ba:db:91:53:72:e3:0d:c7:63:d6:5c:06:9e:9b:b1:f3:45:25: 02:6c:2e:ea:ca:da:63:42:d6:38:fc:c2:7d:3a:00:e2:46:a7: 04:30:b1:b9:3e:7f:96:29:17:0f:67:c5:2a:91:5d:74:fa:a6: 80:1c:8e:9d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWExkXA3D2CqtGTnMhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkxOGE2MGItMmYxNi00ZGI5LThkNDctZGRkZmFmYjVm ZGFiMB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk MzFhOGI1MzctMDg2Ny00ODI1LWE1NWItY2Q1YTBjOGZlNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiejD1opPPeFIc9aVBADNzRNbbBu/aSlikc3 +vrYK0Nt2o8KDRbxWH40hhIt2Jbjctn7UDjZNf1tnVZK+3sWCZIYbRxOg9qNtB0I 52qNoPd2GHE1XmqBRnC91ONyCgZivll/Dt8mmW0BoKGVqTpRwIKZNl7MEe1Vadxp yfQ3IDEBdf1m01Z0HqvY96IWrL6JHX1lM+eXwgoC+s7RYyf5mj+Gx2czMVUdK/vi qa2MCXtNBIQG976dmTE+18MTSVL0S3aiYdi/hGA4lVgCCw/CO2dYxJBmCzjrbVcv zCfeewNGQe6EpI19QVcWpLGqC/Jd/Bd0oz3MYpSLX0CdYArGcwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOjHSPmBcFY32F4ju6SvpBQoMb6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OTE4 YTYwYi0yZjE2LTRkYjktOGQ0Ny1kZGRmYWZiNWZkYWIvZDgyMzA0MGQtMmRmYi0z NWFiLWI5YzQtOTVlNmIyZGUyYWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjkxOGE2MGItMmYxNi00ZGI5LThk NDctZGRkZmFmYjVmZGFiLzY5MThhNjBiLTJmMTYtNGRiOS04ZDQ3LWRkZGZhZmI1 ZmRhYi5jcmwwHwYDVR0jBBgwFoAUl8NQrsFalDaWyPb4G3kBnULiTaMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82OTE4YTYwYi0yZjE2LTRkYjktOGQ0Ny1kZGRm YWZiNWZkYWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF6lYMA4E AgACMAgDBgQmAvmmADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBH24vTLjhAD/m4OEel0TJYYMeyv4bxG3T c3//7EE6w62jhBqsfG5FAQtDRUKgr475oi23++hfiZ0pzxpKV9p+bwSHQMr/31JV 2NhpBpBMLshTV0Tg8Zn4x6zybNPMG6diON6cG9HxbF+RRXoRxxEM+3scxJOsw/yC st08vTYtMjmCIiWY3j2j9woUTnzIKhMnZhdhAAqzxaO5CS1w5buP/dLlm7DBi2sj DtUi+pfD06Ww/R+i5m4gl4SEnMHSxio8EPqDMNG625FTcuMNx2PWXAaem7HzRSUC bC7qytpjQtY4/MJ9OgDiRqcEMLG5Pn+WKRcPZ8UqkV10+qaAHI6d -----END CERTIFICATE-----Generated at Fri Jan 9 18:09:21 2026 by rpki-client