This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/7b07ff38-005d-377c-95d7-6ce9da3de600.roa File: 7b07ff38-005d-377c-95d7-6ce9da3de600.roa (raw, json) Hash identifier: VcVq+4hub+voly4cmijdHeB+9doE8QtQTWmBQKm8BBo= Subject key identifier: E7:39:4C:20:A4:A7:57:0F:87:59:59:50:B6:4C:D4:38:FC:23:AC:F6 Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584BF615EA366134B90613A87F40 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/7b07ff38-005d-377c-95d7-6ce9da3de600.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 11776 IP address blocks: 23.152.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:ea:36:61:34:b9:06:13:a8:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=3f017658-0ea5-45b7-97c0-916e44c1347f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:10:a5:fd:6c:bf:7f:0a:0c:65:53:ae:1a: 22:60:0d:e7:0f:54:f1:0a:02:ba:94:bd:62:b7:4d: b5:8e:f2:5e:5f:0c:28:e1:ae:73:5b:64:5e:f6:d9: e8:22:34:2a:09:e7:20:ee:70:67:bf:33:ee:b2:33: 6b:bd:16:46:6d:71:54:7f:b3:45:46:13:76:1b:5a: c2:d8:df:b9:b7:e1:61:4c:76:ba:48:f3:8c:3c:54: 71:99:b2:d8:f7:b5:5d:6f:4a:5e:e2:28:36:5c:a6: 7d:03:5b:37:2e:18:b9:50:08:7f:ab:ae:9f:10:c3: 77:86:fd:10:b3:63:f7:5f:08:4b:0e:c9:8a:97:79: 2a:d1:54:8e:12:5b:40:52:74:72:e2:88:8a:ae:35: be:13:c3:ff:b3:47:69:90:17:a2:cb:bb:36:70:cd: 30:be:c8:1d:6e:b4:10:eb:fa:fc:70:8a:00:39:14: 4a:72:19:a0:50:1f:33:d3:93:b9:22:52:eb:95:66: f5:5e:b7:f9:43:7d:52:7e:19:6f:b3:1f:21:08:24: 20:fc:92:2e:75:d1:d3:47:eb:0d:21:28:72:ee:62: f1:ab:f6:88:ea:db:fd:b3:5e:fd:d2:e4:63:f5:a5: 88:34:0a:f7:4e:9f:27:3d:b7:d1:d0:67:71:fc:fd: 82:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:39:4C:20:A4:A7:57:0F:87:59:59:50:B6:4C:D4:38:FC:23:AC:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/7b07ff38-005d-377c-95d7-6ce9da3de600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 23.152.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:42:89:d1:67:42:40:d9:0f:3f:94:ba:20:05:bc:70:2b:e0: 44:c1:ff:d4:8b:6f:f2:e2:bf:1e:06:cf:89:6f:7d:a4:c3:d3: 7d:9f:38:73:7d:53:6e:44:b6:67:03:93:b0:e6:34:56:82:68: 51:79:93:21:3e:ee:88:3f:d7:dd:53:a3:f9:ed:21:07:1a:0b: 56:7b:9d:df:f9:a3:6a:8d:1b:1e:60:8b:5e:02:ad:bd:01:79: cb:87:c7:a6:72:b1:4c:af:f8:95:32:59:9f:5c:cb:c0:dc:6e: 8a:38:65:d6:82:ff:a9:ca:9f:c2:3d:c6:9c:06:cd:8f:6d:8e: ce:1c:53:4f:76:4b:f4:da:7a:4c:d2:6b:70:f5:d9:75:92:79: 4c:dd:50:4e:a4:f5:ff:e7:9d:8e:33:68:dd:4a:4b:d9:44:12: c5:91:28:de:c3:f2:b4:1e:85:d8:66:c2:61:2a:db:7b:ae:57: ae:90:89:2b:a0:ce:a2:3f:65:2e:5f:01:31:e1:a8:2c:33:8f: cd:4f:33:b3:0d:90:6c:36:e7:b1:5f:42:72:97:20:2e:68:82: 1b:97:e5:95:e5:9c:b1:33:e5:df:93:8a:b7:45:ad:6e:5a:0f: 07:fc:64:2b:4b:05:c9:84:a0:49:1c:e4:f6:fd:af:65:62:d0: 3c:f1:9c:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2Feo2YTS5BhOof0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk M2YwMTc2NTgtMGVhNS00NWI3LTk3YzAtOTE2ZTQ0YzEzNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDAQpf1sv38KDGVTrhoiYA3nD1TxCgK6lL1i t021jvJeXwwo4a5zW2Re9tnoIjQqCecg7nBnvzPusjNrvRZGbXFUf7NFRhN2G1rC 2N+5t+FhTHa6SPOMPFRxmbLY97Vdb0pe4ig2XKZ9A1s3Lhi5UAh/q66fEMN3hv0Q s2P3XwhLDsmKl3kq0VSOEltAUnRy4oiKrjW+E8P/s0dpkBeiy7s2cM0wvsgdbrQQ 6/r8cIoAORRKchmgUB8z05O5IlLrlWb1Xrf5Q31Sfhlvsx8hCCQg/JIuddHTR+sN IShy7mLxq/aI6tv9s1790uRj9aWINAr3Tp8nPbfR0Gdx/P2CwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOc5TCCkp1cPh1lZULZM1Dj8I6z2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvN2IwN2ZmMzgtMDA1ZC0z NzdjLTk1ZDctNmNlOWRhM2RlNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5goMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFCidFnQkDZDz+UuiAFvHAr4ETB/9SLb/Livx4Gz4lvfaTD032fOHN9 U25EtmcDk7DmNFaCaFF5kyE+7og/191To/ntIQcaC1Z7nd/5o2qNGx5gi14Crb0B ecuHx6ZysUyv+JUyWZ9cy8Dcboo4ZdaC/6nKn8I9xpwGzY9tjs4cU092S/TaekzS a3D12XWSeUzdUE6k9f/nnY4zaN1KS9lEEsWRKN7D8rQehdhmwmEq23uuV66QiSug zqI/ZS5fATHhqCwzj81PM7MNkGw257FfQnKXIC5oghuX5ZXlnLEz5d+TirdFrW5a Dwf8ZCtLBcmEoEkc5Pb9r2Vi0DzxnO0= -----END CERTIFICATE-----Generated at Tue Nov 25 15:13:05 2025 by rpki-client