This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa File: 14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa (raw, json) Hash identifier: 9nQ9LocNyoIQixU3fsmUEd0yVcEoebw5ebHHK5weJnc= Subject key identifier: 48:B5:D3:7B:79:F4:8D:FE:C0:C5:C3:3A:34:1A:AD:18:19:AF:30:0F Certificate issuer: /CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Certificate serial: 010D0C9F4328584BF8E0A8291F24D226745D8180 Authority key identifier: B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 401328 IP address blocks: 23.131.20.0/24 maxlen: 32 2602:f769::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:a8:29:1f:24:d2:26:74:5d:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=9867c19a-1afb-425e-8a1a-812cb127f293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:46:38:b6:a9:be:ab:c6:1b:e2:bd:25:f8: 7f:f0:98:6f:05:ca:01:38:a0:8d:ee:e1:eb:39:e8: a9:b0:4c:23:76:44:a3:34:be:ec:1d:c6:16:ce:7e: e4:2c:a2:18:0e:2a:22:c7:a4:3c:4c:6e:47:1c:12: ee:a0:7a:31:12:8f:d6:07:cd:17:50:f6:9b:b8:35: 0a:7e:87:e6:12:c7:a9:d8:80:c5:d8:52:b0:84:28: e7:e0:b8:38:01:93:01:31:c6:1c:74:2b:35:0f:72: f8:43:42:17:ec:28:d9:d1:f7:17:b1:e3:98:99:77: ec:8a:b5:c0:cf:bd:36:d9:df:c3:b6:74:a7:0f:33: bb:e4:e1:4c:25:40:6b:c5:c7:68:b0:72:51:df:41: 0e:7b:8c:30:fb:c6:09:dd:c8:d9:05:1d:57:ed:15: ea:f8:4a:08:51:05:a8:9c:ed:58:ea:7d:f0:09:51: f5:53:cf:08:a9:24:d5:de:1f:71:12:d3:a2:45:49: f0:ca:cb:d7:25:01:15:77:28:47:ba:a0:8b:a8:55: fa:f7:d8:c5:ac:96:ed:99:ad:96:58:1b:dd:1d:72: 57:d3:de:2f:96:94:b7:07:7f:4e:b8:7a:23:71:91: c3:e1:e5:b7:9c:44:75:e7:b6:7c:4d:91:55:cd:a6: 80:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B5:D3:7B:79:F4:8D:FE:C0:C5:C3:3A:34:1A:AD:18:19:AF:30:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl X509v3 Authority Key Identifier: keyid:B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer sbgp-ipAddrBlock: critical IPv4: 23.131.20.0/24 IPv6: 2602:f769::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:6d:d5:88:3a:c3:07:cc:d8:79:af:45:9d:1c:66:e7:ee:cf: aa:08:b9:b3:5e:59:de:25:d7:fa:a4:4e:f5:0b:f6:49:72:b8: 53:23:48:2d:86:bf:0f:2c:3c:2c:2f:b6:47:74:8f:7d:f5:36: aa:e1:3f:de:d9:94:02:e0:bd:37:0b:8d:04:47:9d:9d:46:b5: ee:96:3e:4e:67:c0:bc:7c:d5:09:6e:b0:2c:34:4f:02:f7:48: 59:39:2e:21:21:7d:1d:de:c9:45:98:f0:0f:87:cb:a7:91:52: c5:9a:d0:a7:7f:7c:2a:f6:89:86:a2:71:cb:ce:59:bb:3d:63: 29:73:07:7e:a6:fe:31:4d:6f:90:31:c7:63:6f:a2:b6:fb:26: 28:72:1a:ac:47:e3:a5:9e:1a:c7:84:b6:ec:8e:7d:4b:b1:cf: a8:ba:bc:b9:9a:39:7d:2b:ba:96:aa:14:e8:cf:fb:89:03:79: b6:68:94:ea:89:eb:d3:13:f7:de:50:bf:09:4c:3c:98:f0:1f: 3b:2c:87:c4:e8:65:43:a4:20:12:43:7b:6c:d4:5b:83:77:a1: 52:ae:bb:a2:41:c4:ab:91:df:b9:00:93:91:7a:a5:34:37:7a: 59:86:09:01:d0:f0:4e:5c:5d:22:8a:24:3f:63:c2:1d:e3:5f: cb:b4:1b:07 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEv44KgpHyTSJnRdgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY4YTJkMWQtMmMzNi00YTFkLTg4YTctMGMzMGQyNTdm Mzg2MB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk OTg2N2MxOWEtMWFmYi00MjVlLThhMWEtODEyY2IxMjdmMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx9GOLapvqvGG+K9Jfh/8JhvBcoBOKCN7uHr OeipsEwjdkSjNL7sHcYWzn7kLKIYDioix6Q8TG5HHBLuoHoxEo/WB80XUPabuDUK fofmEsep2IDF2FKwhCjn4Lg4AZMBMcYcdCs1D3L4Q0IX7CjZ0fcXseOYmXfsirXA z7022d/DtnSnDzO75OFMJUBrxcdosHJR30EOe4ww+8YJ3cjZBR1X7RXq+EoIUQWo nO1Y6n3wCVH1U88IqSTV3h9xEtOiRUnwysvXJQEVdyhHuqCLqFX699jFrJbtma2W WBvdHXJX094vlpS3B39OuHojcZHD4eW3nER157Z8TZFVzaaACwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEi103t59I3+wMXDOjQarRgZrzAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjhh MmQxZC0yYzM2LTRhMWQtODhhNy0wYzMwZDI1N2YzODYvMTRiMzhlMzctYjVmZS0z ZDAxLTk3ZGItM2I3ZGUxY2ViNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY4YTJkMWQtMmMzNi00YTFkLTg4 YTctMGMzMGQyNTdmMzg2L2Q2OGEyZDFkLTJjMzYtNGExZC04OGE3LTBjMzBkMjU3 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUtQ9QgY04B+AhOdH40Z4gI+5guyowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjhhMmQxZC0yYzM2LTRhMWQtODhhNy0wYzMw ZDI1N2YzODYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4MUMA4E AgACMAgDBgQmAvdpADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6bdWIOsMHzNh5r0WdHGbn7s+qCLmzXlne Jdf6pE71C/ZJcrhTI0gthr8PLDwsL7ZHdI999Taq4T/e2ZQC4L03C40ER52dRrXu lj5OZ8C8fNUJbrAsNE8C90hZOS4hIX0d3slFmPAPh8unkVLFmtCnf3wq9omGonHL zlm7PWMpcwd+pv4xTW+QMcdjb6K2+yYochqsR+OlnhrHhLbsjn1Lsc+oury5mjl9 K7qWqhToz/uJA3m2aJTqievTE/feUL8JTDyY8B87LIfE6GVDpCASQ3ts1FuDd6FS rruiQcSrkd+5AJOReqU0N3pZhgkB0PBOXF0iiiQ/Y8Id41/LtBsH -----END CERTIFICATE-----Generated at Tue Nov 25 09:47:22 2025 by rpki-client