This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2de1c838-7a88-324a-b0b4-4ac7f94f4bb1.roa File: 2de1c838-7a88-324a-b0b4-4ac7f94f4bb1.roa (raw, json) Hash identifier: pIqPRrGPYEC8Gfez7TwCO78TjtJivCaMW3GnVsebO5I= Subject key identifier: 43:CA:D6:26:DA:07:0F:1C:41:5E:E4:D1:89:94:36:20:92:45:BA:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C24266B7AAF8B77443BE393C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2de1c838-7a88-324a-b0b4-4ac7f94f4bb1.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 20940 IP address blocks: 23.193.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:6b:7a:af:8b:77:44:3b:e3:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=00e77126-ffb0-4648-ba9b-1d4aceb5d908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c8:44:d4:06:6a:05:8a:13:9a:b1:1f:00:86: c7:d9:81:f1:56:f2:25:a4:18:06:40:d5:d7:5f:c0: 88:be:1b:c2:48:e4:af:5b:e0:b4:52:c5:50:6d:00: 03:d3:89:18:8c:76:38:83:fe:43:29:4b:4e:bf:5a: 94:13:e8:45:8b:38:cd:0e:4d:21:96:17:f0:b1:83: 2d:89:f4:fd:55:4f:d7:90:20:cd:11:eb:60:80:5a: f9:0e:23:4b:dd:ef:b5:f1:cc:4a:06:c4:7e:15:db: fa:77:11:7f:a0:4d:44:69:33:18:f0:ac:1e:6c:04: df:b3:3d:78:b0:3b:b5:9e:4b:f7:ab:15:3b:89:19: a1:9f:fb:6c:05:71:d2:f2:f9:41:65:26:d6:84:23: 5b:45:51:c3:03:87:9d:0e:40:bc:8f:41:85:d2:93: 68:14:36:5d:cb:f8:91:87:7d:b5:1f:5b:8c:d4:e6: 85:2c:df:42:f9:5b:64:96:44:10:a1:aa:cb:3c:49: 41:ef:ff:63:b4:cd:3a:b2:1e:52:97:02:52:ec:59: 5d:2f:9e:e4:ed:da:4e:91:a2:40:e9:68:48:0d:48: a6:c5:d2:9f:b5:27:25:2f:c5:29:56:3d:47:fc:25: fc:2b:13:68:5f:04:77:29:92:8f:3c:ac:62:02:76: b7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CA:D6:26:DA:07:0F:1C:41:5E:E4:D1:89:94:36:20:92:45:BA:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2de1c838-7a88-324a-b0b4-4ac7f94f4bb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fb:c4:c6:32:d2:bf:cd:cf:81:7e:31:4b:93:eb:17:81:d1: 5a:16:e5:f4:ac:1e:69:45:05:88:c1:eb:bc:c4:31:d7:c2:97: 3b:5b:a7:23:58:34:9f:6f:d3:fe:0a:6d:ff:89:98:13:b5:0d: f3:96:82:97:eb:3a:25:e6:19:1d:ee:78:15:aa:a1:ed:6e:d9: 54:c0:3e:6f:6b:cf:99:7b:46:90:60:da:a8:5a:2b:dd:bb:8f: e3:fd:cb:d7:73:d1:09:6b:f3:34:43:3e:a7:20:1d:3f:55:71: 42:c8:f2:78:97:c9:e9:61:0d:13:b2:15:be:ec:d4:11:ce:f5: c3:ac:94:17:cc:bd:77:48:92:f0:ad:20:d7:e8:13:2e:31:b4: 8b:a2:39:d2:89:cd:11:0e:25:85:87:dc:00:a5:f3:70:45:1f: c0:5f:5f:e5:d6:83:33:90:63:82:1e:68:0f:04:69:16:f9:7d: 40:64:25:da:89:fd:ac:e2:57:d9:2a:c6:ff:58:84:c9:7b:21: 55:a7:3b:3b:a2:9b:e2:cd:6f:ec:b5:a8:d3:55:16:28:bd:83: 5c:fe:5e:46:97:6c:f2:89:74:47:a3:76:15:c0:c1:73:91:28: a6:50:37:23:d5:ad:f7:db:9c:43:b5:65:fb:ec:4d:4a:2c:a4: 9f:2b:bd:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJmt6r4t3RDvjk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk MDBlNzcxMjYtZmZiMC00NjQ4LWJhOWItMWQ0YWNlYjVkOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnshE1AZqBYoTmrEfAIbH2YHxVvIlpBgGQNXX X8CIvhvCSOSvW+C0UsVQbQAD04kYjHY4g/5DKUtOv1qUE+hFizjNDk0hlhfwsYMt ifT9VU/XkCDNEetggFr5DiNL3e+18cxKBsR+Fdv6dxF/oE1EaTMY8KwebATfsz14 sDu1nkv3qxU7iRmhn/tsBXHS8vlBZSbWhCNbRVHDA4edDkC8j0GF0pNoFDZdy/iR h321H1uM1OaFLN9C+VtklkQQoarLPElB7/9jtM06sh5SlwJS7FldL57k7dpOkaJA 6WhIDUimxdKftSclL8UpVj1H/CX8KxNoXwR3KZKPPKxiAna36wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPK1ibaBw8cQV7k0YmUNiCSRboVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmRlMWM4MzgtN2E4OC0z MjRhLWIwYjQtNGFjN2Y5NGY0YmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8GsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP7xMYy0r/Nz4F+MUuT6xeB0VoW5fSsHmlFBYjB67zEMdfClztbpyNY NJ9v0/4Kbf+JmBO1DfOWgpfrOiXmGR3ueBWqoe1u2VTAPm9rz5l7RpBg2qhaK927 j+P9y9dz0Qlr8zRDPqcgHT9VcULI8niXyelhDROyFb7s1BHO9cOslBfMvXdIkvCt INfoEy4xtIuiOdKJzREOJYWH3ACl83BFH8BfX+XWgzOQY4IeaA8EaRb5fUBkJdqJ /aziV9kqxv9YhMl7IVWnOzuim+LNb+y1qNNVFii9g1z+XkaXbPKJdEejdhXAwXOR KKZQNyPVrffbnEO1ZfvsTUospJ8rvc4= -----END CERTIFICATE-----Generated at Tue Jan 20 08:03:00 2026 by rpki-client