This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/217ba6b5-b7e8-3d6c-9975-92587608296b.roa File: 217ba6b5-b7e8-3d6c-9975-92587608296b.roa (raw, json) Hash identifier: pU7V4IlBOsL979vW2tvCt+7haZ7Jd/f45e8fz8g3PVw= Subject key identifier: 01:B3:32:18:28:3C:6D:6E:28:84:73:65:5E:16:7A:95:DB:30:CC:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C4CA13A5FF230B37F21319B1C Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/217ba6b5-b7e8-3d6c-9975-92587608296b.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.223.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:3a:5f:f2:30:b3:7f:21:31:9b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=7828e477-8e5d-4f80-882b-bb7c8bf5b58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:63:0c:1d:f5:bb:3a:d0:13:c1:5e:21:f2:05: 17:72:dc:b0:be:54:23:bc:f3:c0:0d:f2:8e:ac:35: 21:4a:c9:6a:46:f4:04:77:cd:6f:92:90:97:8f:66: 70:b9:7d:0e:24:76:e3:a7:9e:1b:15:bc:7a:55:16: 41:96:b0:67:47:e5:bb:70:8e:89:47:12:e9:69:a7: 16:a1:be:1e:66:7b:c3:10:f4:69:db:e1:6a:ea:1e: b9:69:0e:f7:a2:4a:f5:bf:5b:25:47:26:e6:d2:07: dd:1a:0c:16:c8:2b:ca:72:a6:77:e0:6f:93:17:fc: cc:fc:1f:f6:d8:06:c6:69:cd:a6:f3:7a:7b:09:6b: 93:d9:2f:88:61:4c:dd:83:f7:36:6a:68:49:3f:20: 0d:8d:2c:e4:87:6d:90:68:d1:3f:57:8a:75:2e:ed: 19:b6:6b:94:26:d7:c4:d0:fa:11:35:b1:67:47:92: 92:3d:c7:66:1d:81:47:83:6d:a8:a4:35:02:59:a4: a0:06:0c:ce:7a:84:32:d6:f8:2a:50:c5:02:35:9f: 79:20:92:09:df:c4:c2:d5:3c:4d:a0:7d:d3:72:d0: 77:23:76:3c:b3:bd:20:b9:16:b8:af:bc:a8:33:c2: dc:6e:d9:31:cc:ce:f7:65:e5:6f:36:43:b5:4f:ef: d4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B3:32:18:28:3C:6D:6E:28:84:73:65:5E:16:7A:95:DB:30:CC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/217ba6b5-b7e8-3d6c-9975-92587608296b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:72:42:05:5c:84:05:67:a0:ba:2b:54:95:94:df:19:9e:92: ec:dc:49:7d:e3:1e:8e:ad:1e:09:84:96:f6:63:88:89:35:a8: 46:0d:e7:3d:4e:85:98:fd:03:41:38:43:94:fd:e0:7d:f5:65: 96:b8:b6:5d:c2:e5:ff:7e:4b:d8:00:af:52:a0:94:6c:cd:02: 0e:d8:11:4b:bf:b2:61:97:54:df:1f:12:c8:03:03:53:9e:48: 26:2a:27:0f:9c:00:41:04:7b:f2:1f:ee:78:3b:a0:2f:8a:45: 50:4e:44:ff:72:19:1d:b3:7d:ef:b4:c0:4c:77:2f:6a:dd:ab: cc:97:41:59:b1:05:dc:23:47:34:b5:4f:59:7a:84:c9:7a:43: 57:1a:cb:6c:b4:75:a7:07:2b:63:89:ff:cd:22:df:8c:a5:8b: 8b:7c:68:e4:c4:87:20:c3:54:72:55:49:f5:2c:f4:b5:6b:b8: 54:e4:ab:02:a0:e6:5b:b5:56:0b:33:51:f8:76:ce:1d:dc:59: 67:94:a1:96:d2:37:eb:5e:df:4e:20:b5:10:c6:5a:29:06:04: 76:f4:7f:8a:8a:5f:9a:2e:c6:81:56:f6:c4:05:16:ed:e5:d8: 9d:9e:be:2e:ff:2c:cf:7d:4f:e4:42:25:21:75:c4:40:e6:3b: c4:25:52:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoTpf8jCzfyExmxwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk NzgyOGU0NzctOGU1ZC00ZjgwLTg4MmItYmI3YzhiZjViNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGMMHfW7OtATwV4h8gUXctywvlQjvPPADfKO rDUhSslqRvQEd81vkpCXj2ZwuX0OJHbjp54bFbx6VRZBlrBnR+W7cI6JRxLpaacW ob4eZnvDEPRp2+Fq6h65aQ73okr1v1slRybm0gfdGgwWyCvKcqZ34G+TF/zM/B/2 2AbGac2m83p7CWuT2S+IYUzdg/c2amhJPyANjSzkh22QaNE/V4p1Lu0ZtmuUJtfE 0PoRNbFnR5KSPcdmHYFHg22opDUCWaSgBgzOeoQy1vgqUMUCNZ95IJIJ38TC1TxN oH3TctB3I3Y8s70guRa4r7yoM8LcbtkxzM73ZeVvNkO1T+/U2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGzMhgoPG1uKIRzZV4WepXbMMxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE3YmE2YjUtYjdlOC0z ZDZjLTk5NzUtOTI1ODc2MDgyOTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF994MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1yQgVchAVnoLorVJWU3xmekuzcSX3jHo6tHgmElvZjiIk1qEYN5z1O hZj9A0E4Q5T94H31ZZa4tl3C5f9+S9gAr1KglGzNAg7YEUu/smGXVN8fEsgDA1Oe SCYqJw+cAEEEe/If7ng7oC+KRVBORP9yGR2zfe+0wEx3L2rdq8yXQVmxBdwjRzS1 T1l6hMl6Q1cay2y0dacHK2OJ/80i34yli4t8aOTEhyDDVHJVSfUs9LVruFTkqwKg 5lu1VgszUfh2zh3cWWeUoZbSN+te304gtRDGWikGBHb0f4qKX5ouxoFW9sQFFu3l 2J2evi7/LM99T+RCJSF1xEDmO8QlUuc= -----END CERTIFICATE-----Generated at Tue Feb 10 08:41:12 2026 by rpki-client