This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22fe71ac-4030-3145-827c-318fba1cab01.roa File: 22fe71ac-4030-3145-827c-318fba1cab01.roa (raw, json) Hash identifier: mYzXZn5KDiIFvoG7C/Asv96vAJmTG0CMWFYIlTB32BU= Subject key identifier: 08:34:2C:FD:2A:43:8F:3E:76:34:59:E5:1D:57:56:30:57:04:BA:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C4CA138755E288B8DDE0B85C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22fe71ac-4030-3145-827c-318fba1cab01.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.222.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:38:75:5e:28:8b:8d:de:0b:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=df3f5029-e713-4610-9ffd-eeb8b8f84021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:01:dd:fe:a6:e9:71:1a:cf:fe:ed:eb:bd: 2b:ac:f3:38:61:86:26:f2:36:a2:47:20:6c:5d:61: 4c:7f:2b:fb:cb:17:40:b0:53:54:ec:19:f4:23:d1: 8c:87:f6:65:da:9d:d8:6c:0a:1a:0e:3a:1d:91:7d: 3d:6d:b5:75:3a:b8:e6:5a:45:2a:94:26:ca:74:87: fb:f8:64:82:fe:12:ac:9f:32:a7:e4:9b:18:9c:17: 0e:7e:bd:bb:58:0d:88:e0:d1:83:0c:07:00:22:16: 00:52:4f:85:f7:9b:9e:ae:2a:37:28:45:b1:66:df: e6:f0:e7:86:61:f2:e2:e7:41:e7:c3:2d:67:fd:32: 1c:ef:56:9c:b3:e5:81:ee:0a:42:42:13:3d:6e:e1: 92:ba:af:1e:49:6f:0a:0b:8c:f6:80:87:65:6d:d6: 07:e6:11:a1:84:56:92:91:24:e6:5c:a0:12:c8:2b: 62:a7:67:38:e1:27:54:4e:0e:08:65:34:b1:49:e6: 45:ae:fd:2e:3a:c8:6d:8c:59:7d:09:86:9d:d7:7e: 88:a5:40:e1:60:36:0f:89:3a:e7:a4:36:15:3b:6a: 77:88:71:02:7c:b4:c2:c5:31:5a:81:18:18:09:20: f8:61:86:62:89:77:a5:29:92:e4:0f:50:8e:b9:a0: 70:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:34:2C:FD:2A:43:8F:3E:76:34:59:E5:1D:57:56:30:57:04:BA:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22fe71ac-4030-3145-827c-318fba1cab01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:50:a9:35:45:96:e2:be:cd:e5:88:0c:37:c5:e0:9d:3d:65: 65:13:7b:0d:0f:3c:4d:3d:2b:c7:3e:45:6e:cc:85:09:8c:49: 07:d3:a3:e0:60:7e:3b:76:2a:1e:d5:97:af:36:d4:d6:60:76: 6d:79:0d:dc:b1:26:63:7f:8c:54:76:83:99:c0:e3:61:7e:34: 83:ff:ce:12:eb:f1:0a:e7:dd:d9:2a:ba:74:1c:11:4f:42:50: 27:a0:99:b5:aa:e2:4c:c9:71:35:39:d7:a1:c0:11:c5:7d:92: 47:63:32:0a:56:5c:a0:57:ab:39:6f:9d:b7:fb:e1:d9:b6:61: b3:3f:0d:d7:14:93:a0:1a:77:1c:ad:93:65:42:26:cd:ea:bb: 72:23:c8:8d:66:3e:9e:96:af:50:bc:dc:00:17:63:5f:61:6a: 04:9f:5b:1f:66:81:fb:28:0e:2b:91:3f:fa:c8:c2:25:e2:8a: 40:45:74:13:d7:fb:87:24:49:39:62:38:9c:78:5a:58:10:d7: 1f:db:0d:65:02:da:04:aa:c7:77:05:fc:e3:92:97:0b:b4:ee: f8:16:c2:db:b1:dd:9f:9d:6d:92:45:45:bb:1e:b1:76:79:f3: 7d:37:a9:f9:04:e4:ec:f1:48:94:88:b0:62:6f:b2:e5:d7:41: db:52:5a:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoTh1XiiLjd4LhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZGYzZjUwMjktZTcxMy00NjEwLTlmZmQtZWViOGI4Zjg0MDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr28B3f6m6XEaz/7t670rrPM4YYYm8jaiRyBs XWFMfyv7yxdAsFNU7Bn0I9GMh/Zl2p3YbAoaDjodkX09bbV1OrjmWkUqlCbKdIf7 +GSC/hKsnzKn5JsYnBcOfr27WA2I4NGDDAcAIhYAUk+F95uerio3KEWxZt/m8OeG YfLi50Hnwy1n/TIc71acs+WB7gpCQhM9buGSuq8eSW8KC4z2gIdlbdYH5hGhhFaS kSTmXKASyCtip2c44SdUTg4IZTSxSeZFrv0uOshtjFl9CYad136IpUDhYDYPiTrn pDYVO2p3iHECfLTCxTFagRgYCSD4YYZiiXelKZLkD1COuaBwEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg0LP0qQ48+djRZ5R1XVjBXBLqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjJmZTcxYWMtNDAzMC0z MTQ1LTgyN2MtMzE4ZmJhMWNhYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhQqTVFluK+zeWIDDfF4J09ZWUTew0PPE09K8c+RW7MhQmMSQfTo+Bg fjt2Kh7Vl6821NZgdm15DdyxJmN/jFR2g5nA42F+NIP/zhLr8Qrn3dkqunQcEU9C UCegmbWq4kzJcTU516HAEcV9kkdjMgpWXKBXqzlvnbf74dm2YbM/DdcUk6Aadxyt k2VCJs3qu3IjyI1mPp6Wr1C83AAXY19hagSfWx9mgfsoDiuRP/rIwiXiikBFdBPX +4ckSTliOJx4WlgQ1x/bDWUC2gSqx3cF/OOSlwu07vgWwtux3Z+dbZJFRbsesXZ5 8303qfkE5OzxSJSIsGJvsuXXQdtSWrE= -----END CERTIFICATE-----Generated at Tue Jan 20 11:13:57 2026 by rpki-client