This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb42aa41-b4cc-363e-a433-23bc89e8d059.roa File: bb42aa41-b4cc-363e-a433-23bc89e8d059.roa (raw, json) Hash identifier: kcmIIO/D6ALsyTCeiwpR0Qxi7DURQh4jDGwvmIRf8JY= Subject key identifier: 55:4C:61:D2:14:3F:65:52:BF:0C:C3:AE:B2:E7:1E:56:18:96:80:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BFD1107167AA10F1ABB764220 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb42aa41-b4cc-363e-a433-23bc89e8d059.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.44.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:11:07:16:7a:a1:0f:1a:bb:76:42:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=40068df7-dac4-4984-852a-428be35a0def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ef:d6:1d:ab:fb:e5:f6:84:1c:98:4d:74:cd: d6:8c:c6:0c:67:c4:43:5c:89:53:d0:38:c3:31:ab: c6:ce:c8:05:23:da:0b:94:81:8e:16:30:14:a9:5f: 65:72:e9:f7:34:55:03:73:e3:aa:d6:cb:b6:aa:88: 0c:ae:82:c0:c1:ec:e0:ed:4e:0f:d2:c7:10:e6:0d: 0f:c2:ac:dd:fa:24:8c:91:df:ce:5d:88:d5:ce:13: 37:ce:6e:18:a5:23:e5:ad:75:57:20:e2:18:4c:c6: 02:b9:78:c6:a9:9c:02:38:75:a6:5c:f3:80:b7:f1: 5a:be:0f:05:0b:67:4d:a9:f3:43:05:86:73:3e:07: 46:43:87:fe:38:74:15:d5:93:52:f5:70:3e:34:24: 10:38:28:f2:81:81:29:30:c5:25:f1:c5:b1:7b:d6: 5a:15:84:71:3e:7a:4d:75:5d:f6:0a:9e:30:60:65: 84:fe:3a:08:90:15:f5:e8:5d:5d:95:30:e6:0f:09: a9:44:c1:e5:19:51:c9:4e:0c:c3:ad:f3:2b:89:0b: 8c:d1:9d:2f:4d:3f:11:f0:5f:00:0d:90:d7:63:22: b1:35:98:4d:5c:bc:06:5c:c5:b0:e1:e2:49:c0:c2: c2:db:cb:79:42:7b:38:50:2d:d7:96:2a:1e:b7:47: e5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4C:61:D2:14:3F:65:52:BF:0C:C3:AE:B2:E7:1E:56:18:96:80:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb42aa41-b4cc-363e-a433-23bc89e8d059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4e:b8:00:cd:7a:87:22:59:d3:02:be:9a:67:bb:af:f0:fe: e9:7f:34:7f:72:90:8d:e2:d0:03:7e:64:91:f3:4d:38:fc:1f: d7:c0:a5:f7:42:a4:1f:c4:fe:cf:fe:26:e5:84:04:84:af:71: d6:27:a3:03:bf:5a:b3:80:db:fd:47:4b:bc:36:55:78:88:82: ae:b6:7e:d9:f9:7b:5f:10:90:f3:e4:35:03:d5:7d:f4:23:d7: 34:41:71:63:c9:88:49:d6:db:f2:04:ab:12:e6:b8:d7:f2:8f: dd:10:0c:50:5b:79:90:4e:e7:f1:f0:7f:55:0a:9a:fa:81:b0: 07:90:f1:7d:10:99:e9:79:57:03:0a:29:33:77:3c:52:f0:d1: 6e:25:ab:90:3c:d4:cd:43:a6:e4:7d:82:50:e3:0f:9e:91:2a: 86:19:b4:96:1f:34:71:10:31:21:71:9c:43:d7:0a:29:25:be: 16:d8:01:46:20:0d:a6:ec:07:d2:36:2b:15:d0:e0:d1:17:9a: 1e:c4:5e:7c:93:10:27:60:b1:b6:66:14:22:9d:00:58:94:60: 12:aa:18:7d:8f:64:99:92:69:54:75:9d:ff:79:1b:b9:d1:e8: 2c:02:74:35:12:f0:bf:93:55:60:47:64:6c:32:f5:9e:9f:15: 3d:fb:f8:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EQcWeqEPGrt2QiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk NDAwNjhkZjctZGFjNC00OTg0LTg1MmEtNDI4YmUzNWEwZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe/WHav75faEHJhNdM3WjMYMZ8RDXIlT0DjD MavGzsgFI9oLlIGOFjAUqV9lcun3NFUDc+Oq1su2qogMroLAwezg7U4P0scQ5g0P wqzd+iSMkd/OXYjVzhM3zm4YpSPlrXVXIOIYTMYCuXjGqZwCOHWmXPOAt/Favg8F C2dNqfNDBYZzPgdGQ4f+OHQV1ZNS9XA+NCQQOCjygYEpMMUl8cWxe9ZaFYRxPnpN dV32Cp4wYGWE/joIkBX16F1dlTDmDwmpRMHlGVHJTgzDrfMriQuM0Z0vTT8R8F8A DZDXYyKxNZhNXLwGXMWw4eJJwMLC28t5Qns4UC3Xlioet0flXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVMYdIUP2VSvwzDrrLnHlYYloCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmI0MmFhNDEtYjRjYy0z NjNlLWE0MzMtMjNiYzg5ZThkMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdOuADNeociWdMCvppnu6/w/ul/NH9ykI3i0AN+ZJHzTTj8H9fApfdC pB/E/s/+JuWEBISvcdYnowO/WrOA2/1HS7w2VXiIgq62ftn5e18QkPPkNQPVffQj 1zRBcWPJiEnW2/IEqxLmuNfyj90QDFBbeZBO5/Hwf1UKmvqBsAeQ8X0Qmel5VwMK KTN3PFLw0W4lq5A81M1DpuR9glDjD56RKoYZtJYfNHEQMSFxnEPXCiklvhbYAUYg DabsB9I2KxXQ4NEXmh7EXnyTECdgsbZmFCKdAFiUYBKqGH2PZJmSaVR1nf95G7nR 6CwCdDUS8L+TVWBHZGwy9Z6fFT37+Hg= -----END CERTIFICATE-----Generated at Sat Dec 6 01:53:48 2025 by rpki-client