This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa File: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (raw, json) Hash identifier: cXc/r6a0ONFf3KT7Zamb0pVtGBccGa8fRx8Nss6n4rk= Subject key identifier: 19:8B:67:98:DD:8E:A0:CE:82:38:50:18:68:A8:88:92:37:3B:89:B4 Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a Certificate serial: 010D0C9F4328584C566696E04D672E45F4AB2B40 Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 54143 IP address blocks: 23.166.112.0/24 maxlen: 24 2606:7180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 31 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:96:e0:4d:67:2e:45:f4:ab:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=7e2f7d7a-82b9-4caf-a4d6-70a9cabca1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:76:ab:12:c2:f7:f8:9b:3a:b5:b0:4d:47: e6:b0:ae:c8:d5:c1:fc:37:cf:54:74:08:f7:ac:2c: dc:c4:19:62:99:e5:b0:fa:e9:b0:05:57:9b:78:49: 6d:45:92:0e:21:14:e2:5e:39:2a:83:b2:b4:ac:18: 53:5d:78:e8:47:3a:4c:6a:34:1b:cf:c7:24:b9:56: 49:c8:ce:fd:2d:96:dd:a3:2a:79:97:fa:47:4e:7e: 86:87:b8:12:ac:06:11:d4:a8:d4:1c:ee:ca:1f:fa: 81:94:b6:e8:e0:a0:a5:2b:2a:64:f0:50:8d:00:c0: b5:b4:96:c1:9f:dc:35:44:92:58:5e:f0:3c:26:60: dc:c0:24:84:60:ef:9f:f2:4f:86:3a:1b:b7:41:7d: 14:7b:3f:6c:53:94:1e:5e:54:89:35:f3:81:79:ea: d2:32:3d:37:80:15:a0:4b:f8:55:d8:fe:73:05:b2: 27:93:2e:b9:20:33:1b:b4:8c:88:af:2d:0d:07:3e: b3:4c:72:7b:72:4a:8e:b3:3b:c0:88:93:f9:c3:65: 7b:72:7c:58:f6:3e:92:0f:37:bd:51:44:de:72:03: f8:fe:3e:8a:eb:ca:91:57:b5:0b:57:5b:76:ae:15: 84:11:73:4f:09:68:59:15:58:ba:e6:8e:38:06:d8: 25:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8B:67:98:DD:8E:A0:CE:82:38:50:18:68:A8:88:92:37:3B:89:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl X509v3 Authority Key Identifier: keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer sbgp-ipAddrBlock: critical IPv4: 23.166.112.0/24 IPv6: 2606:7180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:16:bd:ed:81:3f:50:3f:ad:93:1d:fb:26:c8:4f:f0:35:52: d3:c5:da:4a:fd:32:30:d0:6f:d8:02:1b:19:28:e6:76:31:9f: aa:cb:a0:66:da:30:0c:ce:68:f0:d1:00:a1:60:02:ab:5d:ae: dd:82:99:23:40:19:ed:6e:1d:c9:39:b2:4a:d6:cb:08:90:0d: 96:89:27:f7:b6:16:de:c2:b4:4a:f5:3f:96:cd:60:bc:1a:3f: 9d:2d:bc:77:ef:6b:41:61:1b:d1:a8:3f:b9:ac:ca:c7:ef:6e: 68:48:30:9c:91:72:af:9e:bd:0f:32:29:02:8d:d3:13:87:14: 18:29:5e:6b:f0:bc:87:32:ce:0b:f9:4c:19:d3:d1:47:01:1c: e7:1f:72:04:6e:a9:8d:c8:9e:4f:7d:81:28:4e:ef:01:3a:0e: d5:2e:db:d3:ea:d2:1b:0d:58:0e:04:ff:ac:c4:b0:9c:bf:0d: a4:80:6a:2d:18:ca:a6:1a:89:59:43:a2:57:d8:b6:05:37:dd: 08:f3:39:93:0f:06:af:9f:8b:78:30:cd:16:fa:aa:e7:14:bc: 69:76:a3:79:99:29:3a:29:5f:b4:51:ee:db:17:b2:2f:ed:40: 18:b9:6f:f8:94:13:d6:fc:18:d5:7b:88:1b:60:1e:da:76:58: 9d:a6:61:f7 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWExWZpbgTWcuRfSrK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY2NTFhZGYtYTc5NS00NjZhLTliMGItYWZhYWVhMjE0 MDJhMB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk N2UyZjdkN2EtODJiOS00Y2FmLWE0ZDYtNzBhOWNhYmNhMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2p2qxLC9/ibOrWwTUfmsK7I1cH8N89UdAj3 rCzcxBlimeWw+umwBVebeEltRZIOIRTiXjkqg7K0rBhTXXjoRzpMajQbz8ckuVZJ yM79LZbdoyp5l/pHTn6Gh7gSrAYR1KjUHO7KH/qBlLbo4KClKypk8FCNAMC1tJbB n9w1RJJYXvA8JmDcwCSEYO+f8k+GOhu3QX0Uez9sU5QeXlSJNfOBeerSMj03gBWg S/hV2P5zBbInky65IDMbtIyIry0NBz6zTHJ7ckqOszvAiJP5w2V7cnxY9j6SDze9 UUTecgP4/j6K68qRV7ULV1t2rhWEEXNPCWhZFVi65o44BtglcQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBmLZ5jdjqDOgjhQGGioiJI3O4m0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1 MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFhZWEyMTQwMmEvY2FhZjFjN2MtZWNmMS0z NzY0LTk2MDgtYjZhMjEzZTNiZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWY2NTFhZGYtYTc5NS00NjZhLTli MGItYWZhYWVhMjE0MDJhL2FmNjUxYWRmLWE3OTUtNDY2YS05YjBiLWFmYWFlYTIx NDAyYS5jcmwwHwYDVR0jBBgwFoAUQKzvnnAH4Ckj+0QSsdRRHh+qk3gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hZjY1MWFkZi1hNzk1LTQ2NmEtOWIwYi1hZmFh ZWEyMTQwMmEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6ZwMA0E AgACMAcDBQAmBnGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGoWve2BP1A/rZMd+ybIT/A1UtPF2kr9MjDQ b9gCGxko5nYxn6rLoGbaMAzOaPDRAKFgAqtdrt2CmSNAGe1uHck5skrWywiQDZaJ J/e2Ft7CtEr1P5bNYLwaP50tvHfva0FhG9GoP7msysfvbmhIMJyRcq+evQ8yKQKN 0xOHFBgpXmvwvIcyzgv5TBnT0UcBHOcfcgRuqY3Ink99gShO7wE6DtUu29Pq0hsN WA4E/6zEsJy/DaSAai0YyqYaiVlDolfYtgU33QjzOZMPBq+fi3gwzRb6qucUvGl2 o3mZKTopX7RR7tsXsi/tQBi5b/iUE9b8GNV7iBtgHtp2WJ2mYfc= -----END CERTIFICATE-----Generated at Tue Dec 30 06:37:36 2025 by rpki-client