This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/947751db-0039-3f12-b796-fdf7d3c8cae5.roa File: 947751db-0039-3f12-b796-fdf7d3c8cae5.roa (raw, json) Hash identifier: 12HoJMaqoj7BWtojUAW3v8R0SlguzvTMOcUHhceeCec= Subject key identifier: 76:CB:56:EB:08:46:7E:44:02:75:A6:40:01:98:2E:BE:3D:21:49:FD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C401106FAF24819504B3ADBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/947751db-0039-3f12-b796-fdf7d3c8cae5.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 20940 IP address blocks: 23.214.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:06:fa:f2:48:19:50:4b:3a:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=16dbe1e9-b899-4d4a-adb1-cd7aed55885b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f4:fa:9c:d5:d0:df:54:18:d6:ef:b9:ca:2d: f4:f9:3e:35:f8:82:27:82:f1:79:95:b4:ab:66:db: 6f:fc:f4:ea:48:cb:81:f8:9a:b1:8c:9c:a3:8f:b6: 47:8c:eb:31:7d:57:71:6a:92:04:e2:01:55:04:a8: 34:1b:e4:1a:46:51:85:6f:45:19:c8:f2:88:57:ca: 9e:42:2f:51:48:c9:fb:4e:ae:82:58:30:c2:2f:9d: ab:85:0e:cc:18:df:17:c0:ca:10:f9:dc:eb:77:97: c6:f2:de:ef:81:b4:5a:9f:c2:32:02:88:18:58:2e: 7b:61:b3:a2:98:20:b7:16:ba:8a:90:79:61:02:f7: 52:f6:d4:c2:c5:3b:19:96:06:5c:15:2d:8d:38:e5: 9f:4e:fa:c4:6f:b0:37:d3:8c:35:3a:e3:f2:8f:e4: 75:8e:ed:c1:78:40:dd:7f:c9:38:02:4a:01:32:4c: f8:03:ca:73:dd:9b:1c:60:36:16:58:3d:50:81:93: cf:b1:66:a0:c8:47:cf:02:2f:47:53:87:46:7e:9c: b1:e3:00:21:36:9e:d5:85:60:ff:08:97:fb:ad:36: 88:1d:85:35:7d:8b:42:e0:13:50:43:9a:14:6c:37: b0:c1:bb:60:c1:6c:ec:46:84:54:47:88:c8:a7:a2: 60:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CB:56:EB:08:46:7E:44:02:75:A6:40:01:98:2E:BE:3D:21:49:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/947751db-0039-3f12-b796-fdf7d3c8cae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:09:09:36:86:f4:b3:21:ce:10:ba:5b:ba:72:a0:3d:0b:a3: 30:b6:d8:7a:4f:cc:d9:43:08:2f:44:0c:6c:61:dc:81:aa:0c: df:49:11:00:6e:ce:67:a3:2f:16:e2:22:cf:7e:7b:ad:f4:64: f3:11:ce:3e:be:ed:5a:db:d2:42:6a:9b:20:f6:7c:42:d7:75: 0e:40:2c:61:8f:57:20:e7:26:2f:c9:5b:70:a0:81:16:8b:9d: 4c:96:82:79:75:22:07:c8:a7:b9:96:71:69:76:e6:f6:7d:7a: 5a:86:a4:25:04:0c:33:b2:53:27:1a:a2:db:cb:ae:eb:72:a3: c3:25:a4:ae:a4:30:d0:f9:6f:63:2d:62:52:6f:30:92:2f:55: 99:70:e2:98:e4:6f:53:dc:78:7b:91:ad:4a:d5:e2:b8:96:59: de:9d:9b:28:0a:8b:1f:f4:91:9a:03:43:0d:f2:d0:1b:85:4f: a3:85:29:e8:52:d1:cb:a2:f5:2b:f1:98:3a:76:fd:fe:8b:81: 35:a8:0e:5d:ec:9a:5a:d9:ab:64:65:a4:df:20:66:1b:21:37: 71:f0:8b:5e:c2:a9:6f:90:17:7a:fc:c2:45:0e:cc:b4:22:1f: b6:e4:41:a9:82:ee:dc:07:e5:c1:0d:da:f7:4c:78:7c:ac:c4: 9d:f6:19:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEQb68kgZUEs628AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk MTZkYmUxZTktYjg5OS00ZDRhLWFkYjEtY2Q3YWVkNTU4ODViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvT6nNXQ31QY1u+5yi30+T41+IIngvF5lbSr Zttv/PTqSMuB+JqxjJyjj7ZHjOsxfVdxapIE4gFVBKg0G+QaRlGFb0UZyPKIV8qe Qi9RSMn7Tq6CWDDCL52rhQ7MGN8XwMoQ+dzrd5fG8t7vgbRan8IyAogYWC57YbOi mCC3FrqKkHlhAvdS9tTCxTsZlgZcFS2NOOWfTvrEb7A304w1OuPyj+R1ju3BeEDd f8k4AkoBMkz4A8pz3ZscYDYWWD1QgZPPsWagyEfPAi9HU4dGfpyx4wAhNp7VhWD/ CJf7rTaIHYU1fYtC4BNQQ5oUbDewwbtgwWzsRoRUR4jIp6JgaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbLVusIRn5EAnWmQAGYLr49IUn9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQ3NzUxZGItMDAzOS0z ZjEyLWI3OTYtZmRmN2QzYzhjYWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9YVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYJCTaG9LMhzhC6W7pyoD0LozC22HpPzNlDCC9EDGxh3IGqDN9JEQBu zmejLxbiIs9+e630ZPMRzj6+7Vrb0kJqmyD2fELXdQ5ALGGPVyDnJi/JW3CggRaL nUyWgnl1IgfIp7mWcWl25vZ9elqGpCUEDDOyUycaotvLrutyo8MlpK6kMND5b2Mt YlJvMJIvVZlw4pjkb1PceHuRrUrV4riWWd6dmygKix/0kZoDQw3y0BuFT6OFKehS 0cui9SvxmDp2/f6LgTWoDl3smlrZq2RlpN8gZhshN3Hwi17CqW+QF3r8wkUOzLQi H7bkQamC7twH5cEN2vdMeHysxJ32Gfs= -----END CERTIFICATE-----Generated at Tue Jan 20 09:44:37 2026 by rpki-client