This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afca91f2-ee2d-3e67-a450-5371895a5a3c.roa File: afca91f2-ee2d-3e67-a450-5371895a5a3c.roa (raw, json) Hash identifier: KkhnzEJAqDMUoV95pw6HGqFGjXgkWxohOpTUKfm6xYY= Subject key identifier: A8:DD:27:4A:9F:0B:82:C2:81:06:71:CB:AB:FF:12:1D:BA:10:68:B8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C4CA12E10B90DF5B9B4E38520 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afca91f2-ee2d-3e67-a450-5371895a5a3c.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 20940 IP address blocks: 23.221.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:2e:10:b9:0d:f5:b9:b4:e3:85:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=594a1d37-87f1-4ac9-94dc-b953d89ef8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:64:5a:82:bb:9b:e6:e3:9e:aa:1b:b7:b1:32: 6a:d9:7f:d7:c7:68:ca:46:43:7e:e0:d6:7f:f2:c3: 07:33:c3:aa:97:cc:d8:fc:1f:4e:c5:85:86:86:7d: 45:ec:98:5f:b4:d0:31:38:41:81:52:3c:b0:95:74: fd:b6:52:b8:ee:9b:37:e6:6f:9d:b5:04:85:ea:19: 63:91:e5:ff:c6:9d:86:78:61:24:03:41:cb:85:e9: ce:6b:7d:35:7f:c4:52:f6:a9:d4:64:7a:0c:fb:60: cd:3b:32:77:46:0a:a1:65:b4:f5:27:8e:a2:1f:0a: 2c:ea:68:de:83:5f:35:42:86:36:7f:0e:a8:86:c9: 87:8e:04:f3:6c:8f:6d:8d:94:cc:86:9b:1e:c7:dd: 97:2f:a9:de:06:9c:8a:62:f1:df:a4:76:42:f9:de: da:42:ce:0a:05:de:ae:f9:79:d9:b1:5f:e1:5f:4e: 07:6a:99:17:98:a7:18:8d:75:f7:28:e3:d4:50:f5: 0a:dd:08:78:ed:59:56:72:7c:81:64:a6:d7:8f:63: 81:23:7a:21:b6:b0:5c:74:22:78:62:22:d7:3d:e1: 76:14:71:9d:10:4b:3c:b1:19:36:1b:d6:f7:41:9d: 2b:76:db:20:23:d9:ae:05:b5:bc:3d:56:f1:ec:7a: 42:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DD:27:4A:9F:0B:82:C2:81:06:71:CB:AB:FF:12:1D:BA:10:68:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afca91f2-ee2d-3e67-a450-5371895a5a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:8a:3b:c6:e4:53:58:36:e0:4d:5a:20:99:4e:6c:84:85:c4: fa:f1:e9:dc:50:16:6d:d4:4d:ab:38:e5:b6:0f:9b:66:e8:a1: 1d:ef:66:21:f0:47:df:d5:79:f9:2d:52:35:b1:bf:c3:f1:2f: 79:8a:24:0d:66:af:40:d8:0d:1a:a3:df:e3:90:81:80:70:1a: 8b:ac:12:12:80:67:a1:20:94:6d:c4:38:a8:cf:16:f6:d9:3b: 8c:5a:39:79:5b:7a:ec:6d:85:37:b9:75:0a:db:3f:45:fd:44: 1b:27:84:f3:5f:de:d4:b8:a6:2c:07:c1:4a:24:d2:39:d5:a2: 67:0e:3b:99:23:35:08:56:90:ca:36:cf:ad:ef:f5:08:86:d0: 0d:4b:7f:04:83:78:5e:18:2a:73:1b:be:8b:2b:c4:f5:fd:3e: 35:17:ea:79:4b:a8:a7:f4:9c:29:3c:38:59:03:e7:7c:90:37: 24:17:0b:08:c0:82:53:e5:88:c4:9b:c5:f4:2e:52:25:34:52: db:aa:6b:2f:31:56:a5:e1:64:d3:00:eb:52:f7:0b:7a:10:55: 68:05:9f:a6:6c:21:c2:9b:eb:83:b5:28:ef:df:be:9b:4c:63: 14:c6:3e:ab:42:31:7a:ec:96:a2:9b:58:4b:a3:20:00:3d:37: df:48:54:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoS4QuQ31ubTjhSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk NTk0YTFkMzctODdmMS00YWM5LTk0ZGMtYjk1M2Q4OWVmOGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42Ragrub5uOeqhu3sTJq2X/Xx2jKRkN+4NZ/ 8sMHM8Oql8zY/B9OxYWGhn1F7JhftNAxOEGBUjywlXT9tlK47ps35m+dtQSF6hlj keX/xp2GeGEkA0HLhenOa301f8RS9qnUZHoM+2DNOzJ3RgqhZbT1J46iHwos6mje g181QoY2fw6ohsmHjgTzbI9tjZTMhpsex92XL6neBpyKYvHfpHZC+d7aQs4KBd6u +XnZsV/hX04HapkXmKcYjXX3KOPUUPUK3Qh47VlWcnyBZKbXj2OBI3ohtrBcdCJ4 YiLXPeF2FHGdEEs8sRk2G9b3QZ0rdtsgI9muBbW8PVbx7HpCNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjdJ0qfC4LCgQZxy6v/Eh26EGi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZjYTkxZjItZWUyZC0z ZTY3LWE0NTAtNTM3MTg5NWE1YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmKO8bkU1g24E1aIJlObISFxPrx6dxQFm3UTas45bYPm2booR3vZiHw R9/VefktUjWxv8PxL3mKJA1mr0DYDRqj3+OQgYBwGousEhKAZ6EglG3EOKjPFvbZ O4xaOXlbeuxthTe5dQrbP0X9RBsnhPNf3tS4piwHwUok0jnVomcOO5kjNQhWkMo2 z63v9QiG0A1LfwSDeF4YKnMbvosrxPX9PjUX6nlLqKf0nCk8OFkD53yQNyQXCwjA glPliMSbxfQuUiU0Utuqay8xVqXhZNMA61L3C3oQVWgFn6ZsIcKb64O1KO/fvptM YxTGPqtCMXrslqKbWEujIAA9N99IVOQ= -----END CERTIFICATE-----Generated at Tue Jan 20 08:03:10 2026 by rpki-client