This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70af8ef2-4e52-368a-a50c-aa4fc74ac17e.roa File: 70af8ef2-4e52-368a-a50c-aa4fc74ac17e.roa (raw, json) Hash identifier: mxiWWgpp72qXgd6FRs7R/a25lJd0xB8fkSPTeABJ67o= Subject key identifier: 06:D3:6F:23:59:2D:2A:CA:3F:72:87:63:28:F3:DB:24:0E:62:17:BB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C4CA130954D05A60396A03580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70af8ef2-4e52-368a-a50c-aa4fc74ac17e.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.223.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:30:95:4d:05:a6:03:96:a0:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=ad1d09f2-a69a-49ee-8156-c3bb2bd56191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3e:e1:45:44:b5:af:10:97:6b:30:1e:9b:7e: 9e:34:1e:77:b1:32:2e:bc:1c:94:e4:13:82:1e:21: 69:cd:ee:b5:b1:e8:ea:6e:be:8d:38:02:be:55:71: 51:05:a0:69:42:a2:d3:e6:4a:e1:f0:85:bf:98:e9: c8:57:17:04:43:f9:16:4e:4b:13:6c:85:ba:a5:dc: a6:cc:2c:76:b8:12:85:b9:6f:5b:3a:98:5f:01:88: 75:81:51:7a:95:90:1f:5c:0b:28:c4:d9:3c:41:21: 4e:4d:2b:be:21:b0:70:92:06:44:a5:66:66:14:d9: a9:f7:30:2c:2e:19:9c:fb:f4:86:7b:b7:db:53:ad: 20:6c:10:68:fb:e1:ea:af:42:5b:cf:04:74:f3:05: 36:6f:85:cc:0f:04:fa:2b:93:7e:96:d3:9e:70:81: 6a:5d:2a:b3:fe:6d:dd:13:06:df:23:35:c7:e5:21: 52:29:fa:fc:cc:04:77:28:55:61:86:fd:4f:bf:73: df:a7:22:f2:53:90:55:a7:bb:57:be:0e:19:d8:1b: 1b:f2:8d:f9:80:8e:af:70:1c:a3:a2:fa:0d:78:c3: 46:34:fc:64:aa:80:10:a9:d6:f0:5b:0d:80:ac:3f: ca:ab:f7:4b:f7:48:32:4a:c9:35:a1:78:bb:b9:aa: b7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D3:6F:23:59:2D:2A:CA:3F:72:87:63:28:F3:DB:24:0E:62:17:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70af8ef2-4e52-368a-a50c-aa4fc74ac17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7b:c8:b7:97:7d:94:db:44:bf:95:b2:69:73:4d:52:eb:2d: aa:84:10:7b:08:73:54:68:4b:be:e5:39:49:10:64:46:70:bd: ae:da:62:17:6e:5c:62:af:8f:49:f2:f5:79:77:da:4c:d9:77: 01:4b:72:8b:f5:eb:04:1d:ec:de:4f:fd:3f:5e:36:ec:dd:7a: 57:51:9e:8a:94:59:53:8f:af:15:21:5c:da:e4:ac:99:2a:f4: d2:a8:d6:f7:5c:ce:cf:0d:2d:1b:c7:ba:97:fa:53:5c:ee:ad: 9c:7f:fe:84:04:61:ea:bd:cc:6c:c5:de:86:9f:0d:96:9b:53: 17:ef:06:c3:cf:a5:9d:e0:31:c5:22:a8:d5:a5:3c:e7:50:07: a8:78:4d:a6:23:09:2d:9c:96:6d:a9:6f:c4:65:09:ba:83:c9: 04:07:c6:43:19:e6:45:01:b9:76:8e:14:25:13:1b:a9:15:d5: 46:66:ac:4a:22:cc:a5:ab:76:7f:90:53:9b:86:92:e8:e6:02: 0d:12:8b:64:fe:2b:38:33:e3:cc:54:98:af:fd:cb:bd:3f:61: 00:ab:8a:11:f4:a1:47:91:e6:29:02:eb:94:cc:e3:85:9e:30: 17:e0:7f:c8:eb:80:ba:1d:42:0e:18:c6:ca:8d:f5:0f:8c:2c: 2e:93:78:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoTCVTQWmA5agNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk YWQxZDA5ZjItYTY5YS00OWVlLTgxNTYtYzNiYjJiZDU2MTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD7hRUS1rxCXazAem36eNB53sTIuvByU5BOC HiFpze61sejqbr6NOAK+VXFRBaBpQqLT5krh8IW/mOnIVxcEQ/kWTksTbIW6pdym zCx2uBKFuW9bOphfAYh1gVF6lZAfXAsoxNk8QSFOTSu+IbBwkgZEpWZmFNmp9zAs Lhmc+/SGe7fbU60gbBBo++Hqr0JbzwR08wU2b4XMDwT6K5N+ltOecIFqXSqz/m3d EwbfIzXH5SFSKfr8zAR3KFVhhv1Pv3PfpyLyU5BVp7tXvg4Z2Bsb8o35gI6vcByj ovoNeMNGNPxkqoAQqdbwWw2ArD/Kq/dL90gySsk1oXi7uaq3nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbTbyNZLSrKP3KHYyjz2yQOYhe7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzBhZjhlZjItNGU1Mi0z NjhhLWE1MGMtYWE0ZmM3NGFjMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp7yLeXfZTbRL+VsmlzTVLrLaqEEHsIc1RoS77lOUkQZEZwva7aYhdu XGKvj0ny9Xl32kzZdwFLcov16wQd7N5P/T9eNuzdeldRnoqUWVOPrxUhXNrkrJkq 9NKo1vdczs8NLRvHupf6U1zurZx//oQEYeq9zGzF3oafDZabUxfvBsPPpZ3gMcUi qNWlPOdQB6h4TaYjCS2clm2pb8RlCbqDyQQHxkMZ5kUBuXaOFCUTG6kV1UZmrEoi zKWrdn+QU5uGkujmAg0Si2T+Kzgz48xUmK/9y70/YQCrihH0oUeR5ikC65TM44We MBfgf8jrgLodQg4YxsqN9Q+MLC6TeIQ= -----END CERTIFICATE-----Generated at Tue Jan 20 08:02:54 2026 by rpki-client