This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7f9546-cc31-32f9-a120-101671b4588c.roa File: 8d7f9546-cc31-32f9-a120-101671b4588c.roa (raw, json) Hash identifier: IDi7/6jF/vWh3M7LH5tL+h2PiJ6Q4qOkj2RLtNeXWmw= Subject key identifier: 8D:4B:AC:2D:50:D2:65:D8:43:12:5E:D7:08:92:EF:CE:34:63:96:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C4CA13AD7C7598B55DCCD0940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7f9546-cc31-32f9-a120-101671b4588c.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 9498 IP address blocks: 23.223.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:3a:d7:c7:59:8b:55:dc:cd:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=5422aa89-c276-4616-bc26-dfe6dd8f59ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1e:ac:94:f0:ae:20:0a:ed:9c:b5:3a:77:17: e9:b7:5d:dd:dd:88:0d:7d:78:1e:9d:08:33:6b:7a: e1:00:33:03:67:71:a1:c2:06:b1:55:3d:7a:a0:40: 4d:09:70:a4:9b:bf:a9:5a:11:53:1b:ef:68:1e:11: 9a:4d:92:b6:c6:64:78:35:0e:78:f4:0f:1b:4b:c4: 98:71:cb:b4:70:4d:25:c2:de:9c:1f:56:91:56:2a: 09:e5:3e:d2:19:be:16:70:21:03:c8:f4:29:91:d9: a2:d5:8e:c5:53:35:42:78:22:71:ff:ba:17:66:b3: ed:bb:55:a8:8e:b3:6c:8e:69:f8:d0:8a:38:ed:5e: 2a:14:30:ee:9a:28:42:eb:06:28:d6:b8:f2:5f:60: 84:20:3a:c9:d4:ec:2f:af:99:ca:24:6f:d2:99:0a: 98:4e:35:aa:74:a8:fa:c7:79:c2:43:59:bc:a9:9c: c9:f7:62:11:26:fe:45:ed:ec:67:af:92:49:e9:65: d4:f0:fc:e0:59:78:04:5a:3c:a8:82:5e:65:50:fe: fb:ae:49:fd:36:ea:ff:5a:6f:25:93:f9:55:1a:b7: 1b:c2:22:2f:56:6a:79:46:f3:65:e1:be:2d:6c:bb: d8:f0:e2:dd:3a:82:14:18:1c:04:e0:4a:8f:4e:16: dd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4B:AC:2D:50:D2:65:D8:43:12:5E:D7:08:92:EF:CE:34:63:96:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7f9546-cc31-32f9-a120-101671b4588c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e5:98:c2:48:a1:06:01:98:9f:fd:f9:07:ad:ea:56:a1:8c: 61:44:36:60:ef:44:8e:24:8f:a1:b3:2c:4e:77:9b:b8:ad:69: b7:12:46:f3:53:25:fd:44:7e:7c:b0:ee:e6:84:40:65:8d:8a: 9b:df:fd:74:5e:c6:fa:b8:6f:0c:0c:6c:7e:54:84:67:08:1d: c3:35:46:cb:8a:bc:7b:ad:2a:08:1c:78:74:5d:fe:91:8e:04: 6f:75:69:94:0a:75:23:c6:72:2a:5d:66:11:08:ea:ed:38:77: 7f:53:cd:2f:af:c4:e6:1f:62:57:f3:a2:88:a2:68:bc:27:6d: ae:34:01:07:a4:6e:6c:53:c2:3a:07:ab:45:f1:08:30:fc:42: 24:50:07:af:b6:1b:42:97:1e:34:9b:1c:f2:8d:6a:21:08:fe: af:49:2b:16:05:bb:bf:3c:28:be:ed:32:88:bb:72:e1:13:aa: ea:20:8d:b4:a7:45:06:05:e5:26:09:c4:61:bf:fb:a3:ba:41: 65:80:ae:e6:bf:5d:b0:90:ab:b7:32:76:a4:b0:3f:2b:e0:db: d7:fb:0d:d8:41:7a:b5:79:b6:2b:fb:60:8d:1c:0d:26:d3:19: f2:18:24:1f:88:7f:b5:df:52:99:f6:95:d1:a8:e9:7e:38:f2: 69:d1:cd:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoTrXx1mLVdzNCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk NTQyMmFhODktYzI3Ni00NjE2LWJjMjYtZGZlNmRkOGY1OWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR6slPCuIArtnLU6dxfpt13d3YgNfXgenQgz a3rhADMDZ3GhwgaxVT16oEBNCXCkm7+pWhFTG+9oHhGaTZK2xmR4NQ549A8bS8SY ccu0cE0lwt6cH1aRVioJ5T7SGb4WcCEDyPQpkdmi1Y7FUzVCeCJx/7oXZrPtu1Wo jrNsjmn40Io47V4qFDDumihC6wYo1rjyX2CEIDrJ1Owvr5nKJG/SmQqYTjWqdKj6 x3nCQ1m8qZzJ92IRJv5F7exnr5JJ6WXU8PzgWXgEWjyogl5lUP77rkn9Nur/Wm8l k/lVGrcbwiIvVmp5RvNl4b4tbLvY8OLdOoIUGBwE4EqPThbdrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1LrC1Q0mXYQxJe1wiS7840Y5aQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ3Zjk1NDYtY2MzMS0z MmY5LWExMjAtMTAxNjcxYjQ1ODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITlmMJIoQYBmJ/9+Qet6lahjGFENmDvRI4kj6GzLE53m7itabcSRvNT Jf1Efnyw7uaEQGWNipvf/XRexvq4bwwMbH5UhGcIHcM1RsuKvHutKggceHRd/pGO BG91aZQKdSPGcipdZhEI6u04d39TzS+vxOYfYlfzooiiaLwnba40AQekbmxTwjoH q0XxCDD8QiRQB6+2G0KXHjSbHPKNaiEI/q9JKxYFu788KL7tMoi7cuETquogjbSn RQYF5SYJxGG/+6O6QWWArua/XbCQq7cydqSwPyvg29f7DdhBerV5tiv7YI0cDSbT GfIYJB+If7XfUpn2ldGo6X448mnRzdc= -----END CERTIFICATE-----Generated at Wed Jan 28 17:09:18 2026 by rpki-client