This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa
File: ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa (raw, json)
Hash identifier: XaXL4Y80GHYdFnn2VPuAqgFIbOwxBjfdtBhjKz9ORDE=
Subject key identifier: DD:DC:24:91:38:AA:33:A3:FD:14:16:54:70:E7:9A:74:01:E7:56:A2
Certificate issuer: /CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e
Certificate serial: 010D0C9F4328584C4E06852BA4F2188A20B3B780
Authority key identifier: A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa
Signing time: Thu 25 Dec 2025 14:00:39 +0000
ROA not before: Thu 25 Dec 2025 14:00:39 +0000
ROA not after: Wed 25 Mar 2026 13:00:39 +0000
asID: 35870
IP address blocks: 23.144.200.0/24 maxlen: 24
2602:fac0::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4e:06:85:2b:a4:f2:18:8a:20:b3:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e
Validity
Not Before: Dec 25 14:00:39 2025 GMT
Not After : Mar 25 13:00:39 2026 GMT
Subject: CN=3feb47cb-6448-419f-8856-44824a476909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:d0:10:d3:18:26:7b:ca:b8:27:a2:fa:07:
45:06:8d:b5:e3:57:78:a1:de:3e:a9:bf:83:0b:9e:
18:ad:03:43:68:21:1a:f3:f4:cc:79:87:26:64:87:
57:6b:eb:ee:d3:30:45:a2:d4:fb:19:08:69:23:68:
10:c7:2f:15:f9:20:f6:1e:63:6e:1b:1d:52:dc:0e:
0d:1c:d0:79:05:34:aa:ca:c0:d3:89:89:d8:c8:0c:
db:92:8d:4f:f8:f9:e9:52:19:79:a6:37:5d:02:43:
61:ee:53:29:0e:a2:73:65:77:cd:8f:fc:9a:f5:e3:
f9:a4:c0:31:10:52:b1:43:94:8f:22:95:ad:cf:34:
1f:0b:8a:6a:75:ec:71:da:51:4e:d7:92:e1:eb:7b:
fc:54:72:fe:72:0c:c8:8c:8e:ce:e5:7e:58:ee:86:
68:26:57:87:99:82:61:ec:22:14:3c:c3:e9:be:13:
88:36:72:52:c6:55:fb:7f:a1:de:89:4b:a3:3a:da:
49:f5:ad:d2:4a:8a:ef:46:dd:c1:b9:d1:4b:bf:70:
b6:9c:ec:5d:c8:14:7a:22:d9:b9:ee:46:58:33:30:
61:5b:8a:48:ca:52:99:fe:01:2f:71:86:0a:f3:49:
48:87:94:3f:9e:e5:12:16:0a:b9:a0:6d:16:c8:7c:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DC:24:91:38:AA:33:A3:FD:14:16:54:70:E7:9A:74:01:E7:56:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.crl
X509v3 Authority Key Identifier:
keyid:A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.200.0/24
IPv6:
2602:fac0::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:95:a0:0e:91:ed:43:d3:b4:1e:7e:a7:cc:39:45:71:5f:a5:
e0:fc:a5:ae:00:4b:ae:2b:45:71:bd:4d:06:81:c5:82:2f:74:
11:15:c9:cc:a7:21:26:09:2a:c2:47:32:e5:02:df:d2:4a:87:
8b:c4:b8:b7:8c:90:c7:ab:56:bc:5a:32:8b:4f:0f:35:e6:c7:
e2:97:13:a8:db:bb:0e:81:34:24:fe:d5:2a:66:a9:c4:41:2f:
f2:7f:81:76:80:72:d8:9d:a3:96:3b:72:71:42:e6:11:36:2d:
3d:93:39:4a:4a:d8:f6:42:37:b6:c6:10:aa:4b:75:16:75:ec:
27:11:e2:74:73:db:0d:90:fa:e7:c8:d4:a8:56:b4:ea:56:f4:
54:35:7f:d0:58:bd:bc:ee:c3:00:ff:c3:a2:52:59:aa:39:53:
d7:c5:9d:d3:d5:60:39:23:3c:80:43:41:23:0b:3f:37:7c:74:
41:d3:59:94:cb:bc:2d:40:f7:fa:e6:31:ac:23:a9:69:85:5a:
f6:98:d4:b2:3f:62:e5:dc:80:e3:4d:29:47:a0:90:0d:6e:7a:
a5:c3:90:9d:c8:17:22:a8:1c:69:76:cf:84:f3:fe:fa:70:ca:
e0:b8:c9:8c:0b:cf:2e:1a:38:88:be:a3:93:e3:04:d7:54:b2:
4d:de:db:f0
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWExOBoUrpPIYiiCzt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY5Y2EwMmMtNzIxZS00Y2E4LTk2ZDQtNmViMTBkOGVh
MzhlMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk
M2ZlYjQ3Y2ItNjQ0OC00MTlmLTg4NTYtNDQ4MjRhNDc2OTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWTQENMYJnvKuCei+gdFBo2141d4od4+qb+D
C54YrQNDaCEa8/TMeYcmZIdXa+vu0zBFotT7GQhpI2gQxy8V+SD2HmNuGx1S3A4N
HNB5BTSqysDTiYnYyAzbko1P+PnpUhl5pjddAkNh7lMpDqJzZXfNj/ya9eP5pMAx
EFKxQ5SPIpWtzzQfC4pqdexx2lFO15Lh63v8VHL+cgzIjI7O5X5Y7oZoJleHmYJh
7CIUPMPpvhOINnJSxlX7f6HeiUujOtpJ9a3SSorvRt3BudFLv3C2nOxdyBR6Itm5
7kZYMzBhW4pIylKZ/gEvcYYK80lIh5Q/nuUSFgq5oG0WyHxY4wIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFN3cJJE4qjOj/RQWVHDnmnQB51aiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85Zjlj
YTAyYy03MjFlLTRjYTgtOTZkNC02ZWIxMGQ4ZWEzOGUvZWM0MmU1ZGItMTI5ZC0z
ZTIxLWE2NzgtODViNGI1ZjNiYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWY5Y2EwMmMtNzIxZS00Y2E4LTk2
ZDQtNmViMTBkOGVhMzhlLzlmOWNhMDJjLTcyMWUtNGNhOC05NmQ0LTZlYjEwZDhl
YTM4ZS5jcmwwHwYDVR0jBBgwFoAUpjsZbkwxCGd0VwVqrR0o478DyvUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85ZjljYTAyYy03MjFlLTRjYTgtOTZkNC02ZWIx
MGQ4ZWEzOGUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5DIMA4E
AgACMAgDBgAmAvrAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAulaAOke1D07QefqfMOUVxX6Xg/KWuAEuu
K0VxvU0GgcWCL3QRFcnMpyEmCSrCRzLlAt/SSoeLxLi3jJDHq1a8WjKLTw815sfi
lxOo27sOgTQk/tUqZqnEQS/yf4F2gHLYnaOWO3JxQuYRNi09kzlKStj2Qje2xhCq
S3UWdewnEeJ0c9sNkPrnyNSoVrTqVvRUNX/QWL287sMA/8OiUlmqOVPXxZ3T1WA5
IzyAQ0EjCz83fHRB01mUy7wtQPf65jGsI6lphVr2mNSyP2Ll3IDjTSlHoJANbnql
w5CdyBciqBxpds+E8/76cMrguMmMC88uGjiIvqOT4wTXVLJN3tvw
-----END CERTIFICATE-----
Generated at Fri Jan 9 18:23:50 2026 by rpki-client