This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bfae50f-5968-30fb-b05e-4af7b53bc731.roa File: 8bfae50f-5968-30fb-b05e-4af7b53bc731.roa (raw, json) Hash identifier: xffz1p0f6SrhKO7/mEP9u5O0zygo3aBP2qtr8Aoc0G4= Subject key identifier: 32:86:E8:64:FE:8A:23:20:65:31:0B:0E:05:6E:03:45:37:45:C0:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C4CA138BAC601DFF60EFAC080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bfae50f-5968-30fb-b05e-4af7b53bc731.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.222.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:38:ba:c6:01:df:f6:0e:fa:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=dd15b443-ed46-4d56-b574-8e29a5ebb438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:6f:05:bf:db:aa:6c:25:85:62:7f:db:a5: fc:b9:60:13:79:64:3f:4d:9e:79:a1:89:b2:a4:20: 35:99:8a:02:e5:ec:f0:ab:35:65:21:bb:8d:6e:1d: 7a:dc:5d:0d:ad:c7:f1:14:7e:d3:4e:68:14:56:93: 18:78:a5:6c:cc:04:f9:ce:cc:e2:ef:0f:bc:cb:1a: 45:30:55:bc:25:69:b3:a3:c2:4b:ea:3a:29:85:b6: ee:1b:37:be:6e:dd:a5:4a:67:5d:02:f4:14:bd:5d: 98:62:54:56:16:46:55:c1:b4:b9:a4:5a:f3:f0:5e: 71:ad:f7:dd:ac:01:3a:e8:bf:66:b4:a9:1f:e9:a8: 59:8d:d2:2a:91:12:a8:5f:a8:69:8d:38:55:0c:6d: f9:a2:71:0a:f4:51:28:5e:b4:77:65:3e:b2:0e:c9: cd:6b:04:22:8c:16:05:95:72:43:77:84:2b:27:04: 78:58:a5:de:84:02:55:a3:83:ef:f4:91:2f:5e:39: a1:42:f6:c1:68:96:13:74:cf:8a:74:1d:e8:4b:1d: a2:dd:98:57:b9:da:b9:67:44:f7:72:3b:af:f7:a7: c1:b8:14:40:a2:98:8b:a9:45:ed:7f:fd:1d:c4:70: b1:cd:9b:91:2c:65:b9:0f:55:22:53:ed:b9:fc:72: 4c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:86:E8:64:FE:8A:23:20:65:31:0B:0E:05:6E:03:45:37:45:C0:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bfae50f-5968-30fb-b05e-4af7b53bc731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:90:0d:a0:a2:c8:97:7b:35:d0:15:7d:64:24:54:45:36:28: a3:c1:67:12:f6:e3:29:99:cb:e7:17:ab:c3:5a:63:dd:80:74: ad:8e:1f:4f:ec:ce:47:7f:86:8e:06:88:0b:e2:50:09:7f:b6: 8b:db:d0:07:9b:e8:75:34:29:d9:c0:53:e5:0a:68:52:ce:99: ee:6b:7f:6a:96:d3:39:e7:91:24:88:8b:66:e3:3f:ae:ce:3c: 98:e4:db:18:96:62:15:7d:de:ce:00:d0:e9:b1:2d:a1:be:d3: e4:37:63:cc:24:96:83:36:c7:cc:5d:36:77:ca:1d:d4:61:e1: 2b:df:f2:9a:a3:13:82:4d:ee:b5:90:e1:4a:aa:91:2c:97:86: 7f:93:ed:55:62:7a:c5:cf:58:63:9e:fb:e4:81:70:81:ce:ff: b2:2a:c3:ce:7a:ee:0b:1f:50:24:21:16:74:d1:64:91:c3:c5: 15:d8:85:2a:bd:77:5a:9c:53:82:bb:ec:00:7f:99:8b:44:d3: b7:1c:11:f1:5d:2f:a6:ac:01:65:8c:ef:ee:e4:8f:6a:42:5d: 33:59:81:01:51:c5:c5:9b:f6:c0:25:0c:57:3d:da:d4:63:d4: 5d:c2:d6:0f:20:a4:44:44:9a:91:f3:4a:51:bc:7e:f4:17:b9: 7d:35:26:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoTi6xgHf9g76wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZGQxNWI0NDMtZWQ0Ni00ZDU2LWI1NzQtOGUyOWE1ZWJiNDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt51vBb/bqmwlhWJ/26X8uWATeWQ/TZ55oYmy pCA1mYoC5ezwqzVlIbuNbh163F0NrcfxFH7TTmgUVpMYeKVszAT5zszi7w+8yxpF MFW8JWmzo8JL6jophbbuGze+bt2lSmddAvQUvV2YYlRWFkZVwbS5pFrz8F5xrffd rAE66L9mtKkf6ahZjdIqkRKoX6hpjThVDG35onEK9FEoXrR3ZT6yDsnNawQijBYF lXJDd4QrJwR4WKXehAJVo4Pv9JEvXjmhQvbBaJYTdM+KdB3oSx2i3ZhXudq5Z0T3 cjuv96fBuBRAopiLqUXtf/0dxHCxzZuRLGW5D1UiU+25/HJM7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKG6GT+iiMgZTELDgVuA0U3RcCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJmYWU1MGYtNTk2OC0z MGZiLWIwNWUtNGFmN2I1M2JjNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF94cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGQDaCiyJd7NdAVfWQkVEU2KKPBZxL24ymZy+cXq8NaY92AdK2OH0/s zkd/ho4GiAviUAl/tovb0Aeb6HU0KdnAU+UKaFLOme5rf2qW0znnkSSIi2bjP67O PJjk2xiWYhV93s4A0OmxLaG+0+Q3Y8wkloM2x8xdNnfKHdRh4Svf8pqjE4JN7rWQ 4UqqkSyXhn+T7VViesXPWGOe++SBcIHO/7Iqw8567gsfUCQhFnTRZJHDxRXYhSq9 d1qcU4K77AB/mYtE07ccEfFdL6asAWWM7+7kj2pCXTNZgQFRxcWb9sAlDFc92tRj 1F3C1g8gpEREmpHzSlG8fvQXuX01JrU= -----END CERTIFICATE-----Generated at Tue Jan 20 08:04:25 2026 by rpki-client