This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa File: 509d5bf3-4c6a-3407-89d3-119b86f42934.roa (raw, json) Hash identifier: nuUHp8MXG/+bmaKI894xiQNsNp7dm2zWs26C3x3bFys= Subject key identifier: 3C:3F:A1:18:5B:4E:5A:50:FB:56:1D:44:64:3A:FF:DB:C2:0D:E8:1B Certificate issuer: /CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Certificate serial: 010D0C9F4328584C2856267E34B0DE002D627600 Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 57406 IP address blocks: 23.145.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:26:7e:34:b0:de:00:2d:62:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=8da1219b-88fb-45b5-98ab-f3089717fbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e0:3c:db:ab:3d:5b:f1:72:79:97:45:0b:93: 61:d7:4a:3e:4a:57:e6:ee:30:d5:f8:18:a0:0d:f5: e8:df:f1:45:e0:a2:49:0b:1d:fb:78:4f:1c:82:35: 52:6e:bf:5f:0f:49:bf:ca:58:83:54:ae:eb:bb:ee: 63:1f:38:ad:9d:10:73:b6:0d:02:37:76:e1:0e:4f: 7b:84:70:f1:97:95:4f:56:62:d4:9b:33:a3:4f:42: 6e:94:7f:e5:02:5c:db:67:4c:17:be:c7:ad:14:f4: f8:7a:c9:eb:ec:ec:93:d8:35:48:dc:37:37:b1:98: 54:bc:83:0f:3a:49:35:12:94:41:c4:a9:6d:ae:ba: 99:1e:e6:9d:aa:85:90:e3:34:30:1a:d4:7a:8e:01: ef:cf:7b:8a:86:4a:80:e1:e1:e5:0a:f1:3c:7b:47: e8:5a:d3:b9:62:26:a5:90:d1:d7:d4:2b:f3:76:bb: 9b:37:c6:b2:e5:2f:08:d7:a5:26:dc:f1:7d:da:4f: c8:10:d5:52:39:9c:f9:36:01:15:8d:cf:9f:f8:38: 01:10:bd:2b:e3:54:7b:b7:46:3e:dc:17:f6:e9:c9: 2f:b1:83:3f:8e:ff:bb:1f:ca:f9:4f:7f:f2:ba:e6: b8:cd:4c:c0:90:01:f4:55:fc:61:02:c1:34:2d:a7: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3F:A1:18:5B:4E:5A:50:FB:56:1D:44:64:3A:FF:DB:C2:0D:E8:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl X509v3 Authority Key Identifier: keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer sbgp-ipAddrBlock: critical IPv4: 23.145.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b9:2c:9b:cd:0b:9d:24:4b:5d:30:f4:df:cc:4f:a0:dc:79: 72:dd:4e:c5:ca:e4:9e:47:3f:bf:f5:27:ff:69:26:28:1e:10: 8d:17:f6:7c:10:e7:ec:e7:ab:14:13:75:02:b5:46:de:db:29: b4:a8:48:d8:95:f7:4b:8c:8a:2c:6a:ee:50:7d:83:3d:ce:d9: a3:fd:d5:83:4a:a5:06:6f:17:ca:a6:d8:47:ef:1c:c0:89:8e: 4f:8f:f2:30:1a:b7:72:a4:76:1c:22:32:94:fd:b6:d5:a0:bf: 45:7f:22:f8:00:0c:97:35:45:aa:d3:1d:ad:b0:2c:77:ea:d6: 95:8a:76:e3:8e:95:0f:a5:d5:82:8d:6b:5a:a1:5a:b8:e2:a7: fd:c5:06:48:ac:b7:cf:73:dd:06:c7:cd:30:c4:22:c3:70:0e: d9:6f:e4:4d:e3:6e:08:9f:77:7f:61:1a:d4:4b:5c:06:a3:f9: 35:f5:33:12:73:ba:86:6f:8d:ed:2d:c2:7f:fa:92:c8:4a:53: 7c:78:d0:57:69:b7:d4:b7:d2:05:fc:a5:48:f2:3c:b2:ae:dc: 3b:8d:fe:ad:11:a2:08:92:50:67:b6:f3:36:7c:6e:36:f4:3c: 2c:6c:d2:50:b0:97:98:30:b5:01:02:d0:4f:40:bf:68:b4:02: c9:a2:42:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwoViZ+NLDeAC1idgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhkNmI5OTMtYThiZC00NGEyLThlMDQtODk0ODNlNjk4 YTIzMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk OGRhMTIxOWItODhmYi00NWI1LTk4YWItZjMwODk3MTdmYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9eA826s9W/FyeZdFC5Nh10o+Slfm7jDV+Big DfXo3/FF4KJJCx37eE8cgjVSbr9fD0m/yliDVK7ru+5jHzitnRBztg0CN3bhDk97 hHDxl5VPVmLUmzOjT0JulH/lAlzbZ0wXvsetFPT4esnr7OyT2DVI3Dc3sZhUvIMP Okk1EpRBxKltrrqZHuadqoWQ4zQwGtR6jgHvz3uKhkqA4eHlCvE8e0foWtO5Yial kNHX1CvzdrubN8ay5S8I16Um3PF92k/IENVSOZz5NgEVjc+f+DgBEL0r41R7t0Y+ 3Bf26ckvsYM/jv+7H8r5T3/yuua4zUzAkAH0VfxhAsE0LafX/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDw/oRhbTlpQ+1YdRGQ6/9vCDegbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2 Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4M2U2OThhMjMvNTA5ZDViZjMtNGM2YS0z NDA3LTg5ZDMtMTE5Yjg2ZjQyOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhkNmI5OTMtYThiZC00NGEyLThl MDQtODk0ODNlNjk4YTIzLzM4ZDZiOTkzLWE4YmQtNDRhMi04ZTA0LTg5NDgzZTY5 OGEyMy5jcmwwHwYDVR0jBBgwFoAUbkSnmZUUo47HjKF4cBdzXF0ApswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4 M2U2OThhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH25LJvNC50kS10w9N/MT6DceXLdTsXK5J5HP7/1J/9pJigeEI0X9nwQ 5+znqxQTdQK1Rt7bKbSoSNiV90uMiixq7lB9gz3O2aP91YNKpQZvF8qm2EfvHMCJ jk+P8jAat3KkdhwiMpT9ttWgv0V/IvgADJc1RarTHa2wLHfq1pWKduOOlQ+l1YKN a1qhWrjip/3FBkist89z3QbHzTDEIsNwDtlv5E3jbgifd39hGtRLXAaj+TX1MxJz uoZvje0twn/6kshKU3x40Fdpt9S30gX8pUjyPLKu3DuN/q0RogiSUGe28zZ8bjb0 PCxs0lCwl5gwtQEC0E9Av2i0AsmiQmY= -----END CERTIFICATE-----Generated at Fri Dec 19 20:17:38 2025 by rpki-client