This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa File: b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa (raw, json) Hash identifier: BMNO9HZRNKziaHjU8W7yrR94zu5gDhaXs9pCov+Lqs4= Subject key identifier: D0:D6:17:98:73:6D:2E:DF:CC:B1:B6:5E:29:47:28:A8:52:E7:5E:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C55012E915727F5602BC91198 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa Signing time: Sun 28 Dec 2025 02:00:30 +0000 ROA not before: Sun 28 Dec 2025 02:00:30 +0000 ROA not after: Sat 28 Mar 2026 01:00:30 +0000 asID: 20940 IP address blocks: 23.222.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:55:01:2e:91:57:27:f5:60:2b:c9:11:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 28 02:00:30 2025 GMT Not After : Mar 28 01:00:30 2026 GMT Subject: CN=e0e4b7dc-9ee9-4d90-8047-e28fa3fd01a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:45:df:82:6c:b2:2d:a2:31:c8:38:d4:fd: fd:64:97:92:5e:7e:b1:59:61:12:56:f0:0c:e3:01: 40:b4:a4:02:6a:18:29:5f:40:14:84:35:56:55:63: 1d:d4:d5:79:68:cf:c5:58:ba:0d:78:1b:54:94:1d: fa:60:1c:d5:c9:6f:fd:27:ec:1c:3f:0e:01:27:30: 9f:75:5e:e0:78:71:a3:f6:01:d2:87:f4:10:95:4f: d8:42:fa:05:33:6a:f4:ff:1d:0b:7f:d0:91:a6:04: 3c:26:27:90:ef:62:7c:cd:ae:c9:e5:db:fe:be:f6: 1a:13:3f:fb:c8:d6:b1:3c:8f:e5:a7:52:43:f4:b4: 65:82:be:6e:75:27:88:78:56:6d:e5:92:c4:b3:be: 28:58:01:fa:95:64:e7:86:ce:8f:c2:6f:3c:a4:99: f5:05:ba:ca:c6:24:97:3b:55:2d:62:9e:1a:9d:d0: 30:01:a9:c0:01:71:fc:65:d1:8c:7d:89:c4:e2:d1: 93:ba:c8:7b:c3:b9:8e:fc:3f:72:16:ba:2f:77:fb: a0:07:9a:01:aa:d1:cb:2c:31:e7:62:49:81:63:fa: 0b:29:de:db:9c:f7:40:b4:c3:c9:cc:15:e3:e1:22: 57:ed:ea:dd:f5:46:74:1e:3d:35:9e:02:07:86:80: b8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D6:17:98:73:6D:2E:DF:CC:B1:B6:5E:29:47:28:A8:52:E7:5E:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f1:4f:51:ac:e9:8b:e5:b0:95:67:69:62:08:19:2f:8b:62: f5:6d:ef:b6:b1:c0:ba:47:2f:7d:df:98:87:4c:4f:73:a5:24: 0e:0f:9b:f3:2f:db:86:09:3d:2c:67:2a:ee:ec:6a:bb:d7:ad: ab:f1:a4:08:54:0b:1f:dc:53:54:7f:49:71:fc:2d:a5:44:15: 6b:a7:ec:e8:b8:49:4e:43:59:65:1c:0c:06:90:7c:be:68:d4: 88:d0:38:1e:9d:c9:07:1b:2d:24:3f:7e:36:c2:c7:f4:d6:b6: 76:cf:49:29:80:dc:0b:87:0a:ad:4c:e7:a5:fd:44:34:bf:ad: 07:54:b0:0d:c7:01:c5:b6:e7:5e:d9:90:96:0f:3a:39:19:1c: 98:aa:38:c0:4b:a5:66:2f:ee:b3:0e:ff:d7:47:2d:c9:fe:6b: ee:92:28:33:3e:c7:a3:39:93:2c:27:d2:c7:f0:d7:04:fa:65: 85:20:d2:54:b5:29:57:06:dc:fd:1e:71:c9:df:5a:cf:82:65: e9:d1:b4:dd:0f:de:5d:cf:d0:4e:cf:96:0a:70:ed:0b:45:87: a0:31:f2:db:bf:fc:a6:c3:6a:27:c2:a0:11:13:e1:70:aa:bd: 8a:f6:c3:a4:de:4e:48:42:10:36:57:7a:50:d6:71:13:80:6c: d8:1c:07:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExVAS6RVyf1YCvJEZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyODAyMDAzMFoXDTI2MDMyODAxMDAzMFowLzEtMCsGA1UEAxMk ZTBlNGI3ZGMtOWVlOS00ZDkwLTgwNDctZTI4ZmEzZmQwMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8xF34Jssi2iMcg41P39ZJeSXn6xWWESVvAM 4wFAtKQCahgpX0AUhDVWVWMd1NV5aM/FWLoNeBtUlB36YBzVyW/9J+wcPw4BJzCf dV7geHGj9gHSh/QQlU/YQvoFM2r0/x0Lf9CRpgQ8JieQ72J8za7J5dv+vvYaEz/7 yNaxPI/lp1JD9LRlgr5udSeIeFZt5ZLEs74oWAH6lWTnhs6Pwm88pJn1BbrKxiSX O1UtYp4andAwAanAAXH8ZdGMfYnE4tGTush7w7mO/D9yFrovd/ugB5oBqtHLLDHn YkmBY/oLKd7bnPdAtMPJzBXj4SJX7erd9UZ0Hj01ngIHhoC4ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDWF5hzbS7fzLG2XilHKKhS517OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjBjNjZjYmEtYTFmYS0z ZmViLTliYWUtMWM2YTBkNzM3YjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjxT1Gs6YvlsJVnaWIIGS+LYvVt77axwLpHL33fmIdMT3OlJA4Pm/Mv 24YJPSxnKu7sarvXravxpAhUCx/cU1R/SXH8LaVEFWun7Oi4SU5DWWUcDAaQfL5o 1IjQOB6dyQcbLSQ/fjbCx/TWtnbPSSmA3AuHCq1M56X9RDS/rQdUsA3HAcW2517Z kJYPOjkZHJiqOMBLpWYv7rMO/9dHLcn+a+6SKDM+x6M5kywn0sfw1wT6ZYUg0lS1 KVcG3P0eccnfWs+CZenRtN0P3l3P0E7Plgpw7QtFh6Ax8tu//KbDaifCoBET4XCq vYr2w6TeTkhCEDZXelDWcROAbNgcB4A= -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:10 2026 by rpki-client