This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4db4f439-cf3e-3f8d-89ae-8e77e0980ea5.roa File: 4db4f439-cf3e-3f8d-89ae-8e77e0980ea5.roa (raw, json) Hash identifier: iWn9wP7PZGkjYkywuQtwSNsn7sdtyhgovsNwlK0faQQ= Subject key identifier: 58:08:CA:B7:30:D8:3F:DD:4A:54:88:09:E9:FF:E1:86:08:0E:B5:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BDCF5DAE4EF2705D7C820F480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4db4f439-cf3e-3f8d-89ae-8e77e0980ea5.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 16625 IP address blocks: 23.35.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:da:e4:ef:27:05:d7:c8:20:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=e9aa8aff-8cc9-4b27-a170-14bef5f3c99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:74:6d:89:f5:fb:c8:09:fc:42:d1:39:12:1f: d6:6c:a8:4a:54:89:fc:39:cd:d5:03:28:ef:83:de: 30:b5:83:fd:9c:92:d2:99:fe:42:d6:57:18:9b:0a: d3:f0:05:86:0b:7c:c4:dc:3c:9c:f1:67:c0:2b:72: 92:cc:73:11:14:38:df:21:10:5b:3b:75:bc:8a:b3: 2d:52:83:3b:dc:da:eb:8b:80:32:ee:d6:e0:69:1e: 54:cf:29:58:f4:bb:69:c9:64:68:46:ad:bd:de:51: 27:af:21:e0:18:c3:e9:d2:fd:3e:ae:e7:a9:e4:93: b6:0c:d3:fa:bb:ee:73:07:ff:c3:1f:87:f5:6e:58: c5:0e:6e:57:00:ce:af:2d:63:d4:83:7a:20:53:bf: 7f:d6:5b:bd:40:c1:44:3f:c2:54:9c:2f:af:20:cb: c2:9b:48:20:c0:a8:e6:ca:6d:46:ed:0f:6d:ae:01: 07:ae:18:c4:7f:40:07:e3:ea:43:ff:79:0e:39:78: f0:e0:69:f5:fa:c7:51:37:47:5e:12:72:8a:43:c7: af:a3:a2:51:b9:19:e7:b9:de:5c:37:9b:b6:76:4d: 3c:41:90:94:fe:12:a6:7d:9f:81:0e:81:d3:dc:fa: 59:ef:67:cf:bd:5d:31:28:ae:65:a4:6d:27:56:7e: 65:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:08:CA:B7:30:D8:3F:DD:4A:54:88:09:E9:FF:E1:86:08:0E:B5:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4db4f439-cf3e-3f8d-89ae-8e77e0980ea5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:79:46:e9:a5:35:e6:75:af:ce:3f:44:af:0e:28:f4:da:63: f8:d3:d3:e5:b9:95:90:fb:51:61:b0:47:73:bc:ba:48:bb:7d: ea:41:e5:03:1d:71:ab:a4:a2:2d:84:10:d8:44:1c:7a:fe:09: c0:ed:6e:7e:f2:10:43:37:35:6f:81:a1:dc:38:75:c7:93:fb: 08:d2:96:e8:46:ed:88:d5:99:15:90:2e:c5:e4:53:7e:f8:16: e3:e6:35:70:dc:79:e5:ca:a1:8d:d4:9c:04:31:2c:34:b0:ce: 85:50:b1:5c:b4:9d:48:63:cc:5b:5c:4a:fb:9f:c6:e5:04:00: f4:9b:45:c8:e7:e5:fb:f3:e3:ed:3f:3b:cd:17:7f:6b:52:7e: 78:0e:86:72:36:c6:0b:33:40:bf:9d:b8:26:8f:8a:d6:4f:f9: 83:76:e8:8c:95:bf:cd:46:79:d4:a5:e9:ca:36:4c:30:4b:e5: fe:5a:b2:fa:01:bf:08:d8:9c:0d:3b:57:fc:61:6d:36:56:4a: ba:67:c7:97:9d:ee:06:ab:0c:68:0a:18:8b:e9:a0:76:67:b9: ab:d4:8a:8c:6a:93:1a:db:67:ca:0e:63:a3:26:41:62:37:ab: 6e:fc:a8:68:6b:9c:1d:48:2d:11:de:65:74:00:3b:26:6d:33: 41:e2:38:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9drk7ycF18gg9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk ZTlhYThhZmYtOGNjOS00YjI3LWExNzAtMTRiZWY1ZjNjOTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHRtifX7yAn8QtE5Eh/WbKhKVIn8Oc3VAyjv g94wtYP9nJLSmf5C1lcYmwrT8AWGC3zE3Dyc8WfAK3KSzHMRFDjfIRBbO3W8irMt UoM73Nrri4Ay7tbgaR5UzylY9LtpyWRoRq293lEnryHgGMPp0v0+ruep5JO2DNP6 u+5zB//DH4f1bljFDm5XAM6vLWPUg3ogU79/1lu9QMFEP8JUnC+vIMvCm0ggwKjm ym1G7Q9trgEHrhjEf0AH4+pD/3kOOXjw4Gn1+sdRN0deEnKKQ8evo6JRuRnnud5c N5u2dk08QZCU/hKmfZ+BDoHT3PpZ72fPvV0xKK5lpG0nVn5l7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgIyrcw2D/dSlSICen/4YYIDrWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGRiNGY0MzktY2YzZS0z ZjhkLTg5YWUtOGU3N2UwOTgwZWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ5RumlNeZ1r84/RK8OKPTaY/jT0+W5lZD7UWGwR3O8uki7fepB5QMd caukoi2EENhEHHr+CcDtbn7yEEM3NW+Bodw4dceT+wjSluhG7YjVmRWQLsXkU374 FuPmNXDceeXKoY3UnAQxLDSwzoVQsVy0nUhjzFtcSvufxuUEAPSbRcjn5fvz4+0/ O80Xf2tSfngOhnI2xgszQL+duCaPitZP+YN26IyVv81GedSl6co2TDBL5f5asvoB vwjYnA07V/xhbTZWSrpnx5ed7garDGgKGIvpoHZnuavUioxqkxrbZ8oOY6MmQWI3 q278qGhrnB1ILRHeZXQAOyZtM0HiOKs= -----END CERTIFICATE-----Generated at Sat Dec 6 23:33:41 2025 by rpki-client