This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa File: a9d6e5c9-bec2-395f-af08-83ce47190965.roa (raw, json) Hash identifier: vN9tzCrG/9kN3OuZ6sBfhZYgLkAbjzcETJNZCqPLVgs= Subject key identifier: 04:23:A7:A9:2D:9F:F2:C2:0F:5B:D3:A6:ED:75:25:D2:02:5C:D3:AF Certificate issuer: /CN=d037641d-aa90-4eab-864e-a73e03e24cfa Certificate serial: 010D0C9F4328584C1FF622DD6C585C52BA78DB80 Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa Signing time: Tue 09 Dec 2025 02:00:31 +0000 ROA not before: Tue 09 Dec 2025 02:00:31 +0000 ROA not after: Mon 09 Mar 2026 01:00:31 +0000 asID: 398759 IP address blocks: 23.165.120.0/24 maxlen: 24 2602:f9eb::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1f:f6:22:dd:6c:58:5c:52:ba:78:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa Validity Not Before: Dec 9 02:00:31 2025 GMT Not After : Mar 9 01:00:31 2026 GMT Subject: CN=91bc8efb-c03b-4172-aaa3-1f844cf5242d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c6:6b:46:ed:2b:fe:9d:99:44:e6:e9:48:db: 01:31:e8:20:e9:cc:20:55:57:45:e1:13:9e:4a:5d: 8b:cf:55:90:b5:61:d5:41:01:aa:9e:c7:83:50:55: 6e:a1:d6:61:f0:5a:cc:44:b2:49:51:dd:f1:56:79: 19:3f:54:82:53:66:0f:fd:6b:32:57:3b:e3:6f:a7: 5d:0e:4d:7d:46:84:54:f4:3f:e6:8b:0c:8e:b6:f6: 58:5f:85:32:74:1f:d5:68:64:37:8f:ab:fc:50:b8: 3d:f4:ae:a7:07:ef:23:52:c7:bc:27:a0:af:eb:ae: 67:cd:a5:e8:03:3b:b7:5e:af:c4:fd:c6:7e:45:2d: 86:c8:5a:c3:8c:50:f2:e9:ed:8c:20:6b:28:4b:d2: f0:14:80:a3:64:e6:43:06:0f:12:50:c6:ef:4e:53: 4c:91:b0:fe:b0:0f:58:c7:0d:32:a6:49:0a:30:d6: bd:bd:e7:23:2c:2a:9a:5c:b2:10:30:ce:de:d9:54: 27:11:80:b7:51:76:20:6e:33:be:f6:b6:fd:0c:3f: 08:0d:f4:18:aa:1c:8f:b0:fc:55:25:68:9e:fc:3f: 8b:85:33:1e:ca:ae:58:f0:ac:24:e8:cd:a9:44:9b: 25:f6:c7:12:e0:14:df:32:37:52:0a:71:c4:f8:f1: 66:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:23:A7:A9:2D:9F:F2:C2:0F:5B:D3:A6:ED:75:25:D2:02:5C:D3:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl X509v3 Authority Key Identifier: keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer sbgp-ipAddrBlock: critical IPv4: 23.165.120.0/24 IPv6: 2602:f9eb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d7:71:a2:26:01:5e:ec:07:d7:76:c3:3f:6f:0d:53:a3:ae: e3:c5:e0:83:9c:3d:e9:71:69:9d:3c:0c:ab:0a:0a:a0:44:87: 33:f4:f6:34:89:eb:43:39:86:4b:13:03:46:be:ae:54:18:f9: 89:af:82:f5:67:f4:64:db:a0:b5:c7:f2:11:4e:bb:a1:ec:27: dd:0f:d2:a8:7c:1a:77:1b:91:72:04:b1:6a:a9:31:15:bc:ec: 5d:8d:0a:c5:39:c4:ae:c2:0e:b5:7d:3b:65:75:49:29:50:b4: 54:02:cb:d7:3c:40:da:f5:d0:cc:09:c5:3d:c6:28:ed:39:e1: b3:f2:44:cb:23:15:93:10:d7:7a:d3:ac:95:8e:a6:96:b8:20: 05:d9:3b:e6:e0:e3:0a:32:e6:13:81:3e:08:88:62:48:3d:7a: 13:d8:87:06:f7:c0:c2:5a:77:e0:bc:dc:50:40:9f:7d:16:52: 5b:90:a4:4c:47:8c:22:84:de:c8:22:46:c2:10:bd:5f:47:cf: 2a:90:cb:da:18:5f:65:d4:62:f6:8d:1c:7e:b3:63:b3:33:e5: a6:37:3b:91:81:3c:39:59:7d:47:3e:b1:85:c6:d0:d3:c1:6e: 19:7d:54:d2:0b:b7:f0:d8:94:cf:75:8d:77:91:3d:16:75:b6: d2:8f:9c:1c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEwf9iLdbFhcUrp424AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzNzY0MWQtYWE5MC00ZWFiLTg2NGUtYTczZTAzZTI0 Y2ZhMB4XDTI1MTIwOTAyMDAzMVoXDTI2MDMwOTAxMDAzMVowLzEtMCsGA1UEAxMk OTFiYzhlZmItYzAzYi00MTcyLWFhYTMtMWY4NDRjZjUyNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcZrRu0r/p2ZRObpSNsBMegg6cwgVVdF4ROe Sl2Lz1WQtWHVQQGqnseDUFVuodZh8FrMRLJJUd3xVnkZP1SCU2YP/WsyVzvjb6dd Dk19RoRU9D/miwyOtvZYX4UydB/VaGQ3j6v8ULg99K6nB+8jUse8J6Cv665nzaXo Azu3Xq/E/cZ+RS2GyFrDjFDy6e2MIGsoS9LwFICjZOZDBg8SUMbvTlNMkbD+sA9Y xw0ypkkKMNa9vecjLCqaXLIQMM7e2VQnEYC3UXYgbjO+9rb9DD8IDfQYqhyPsPxV JWie/D+LhTMeyq5Y8Kwk6M2pRJsl9scS4BTfMjdSCnHE+PFmXQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAQjp6ktn/LCD1vTpu11JdICXNOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3 NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNlMDNlMjRjZmEvYTlkNmU1YzktYmVjMi0z OTVmLWFmMDgtODNjZTQ3MTkwOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDAzNzY0MWQtYWE5MC00ZWFiLTg2 NGUtYTczZTAzZTI0Y2ZhL2QwMzc2NDFkLWFhOTAtNGVhYi04NjRlLWE3M2UwM2Uy NGNmYS5jcmwwHwYDVR0jBBgwFoAUt7tDftH++/QIZeum6I89OeWGSBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNl MDNlMjRjZmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6V4MA4E AgACMAgDBgQmAvnrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAy13GiJgFe7AfXdsM/bw1To67jxeCDnD3p cWmdPAyrCgqgRIcz9PY0ietDOYZLEwNGvq5UGPmJr4L1Z/Rk26C1x/IRTruh7Cfd D9KofBp3G5FyBLFqqTEVvOxdjQrFOcSuwg61fTtldUkpULRUAsvXPEDa9dDMCcU9 xijtOeGz8kTLIxWTENd606yVjqaWuCAF2Tvm4OMKMuYTgT4IiGJIPXoT2IcG98DC WnfgvNxQQJ99FlJbkKRMR4wihN7IIkbCEL1fR88qkMvaGF9l1GL2jRx+s2OzM+Wm NzuRgTw5WX1HPrGFxtDTwW4ZfVTSC7fw2JTPdY13kT0WdbbSj5wc -----END CERTIFICATE-----Generated at Tue Dec 16 15:45:51 2025 by rpki-client