This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca9d0057-dd74-3699-a83e-e4521709a189.roa File: ca9d0057-dd74-3699-a83e-e4521709a189.roa (raw, json) Hash identifier: xu5O7C3X+qKmb6xWTJvWWZlKfKuopFWkLUJtQM4h1s4= Subject key identifier: 22:00:D7:15:9F:A6:91:A2:37:B2:91:9D:D5:33:79:03:9A:76:E6:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C401108A2DDA597B3D1D4D9E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca9d0057-dd74-3699-a83e-e4521709a189.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 20940 IP address blocks: 23.63.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:08:a2:dd:a5:97:b3:d1:d4:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=b3e2e130-3bf8-4204-b1b9-4e33062e60b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:3c:02:8b:65:d4:2a:27:05:db:1b:4f:46: 57:eb:29:93:ac:af:53:e2:f1:75:11:39:65:29:1f: 18:c9:fe:79:5b:f4:c6:f2:2d:c5:26:2c:c2:37:ad: 5f:1a:93:b4:5f:33:12:ff:b5:65:ec:bf:da:5b:0e: d4:b9:af:e5:61:78:10:5b:6c:9a:95:c6:a0:a4:77: 14:b5:68:13:70:fe:8a:b9:8a:7e:42:fd:15:ec:56: 30:dc:77:01:cc:78:29:1f:ca:da:98:90:6b:01:d1: 41:97:81:71:5a:f4:f5:c3:ae:2d:4e:2b:90:7e:44: 0b:79:fe:0f:13:ea:e1:eb:7f:53:aa:1e:e3:7e:8c: 32:1a:09:e1:b7:08:1b:ff:6c:6e:a0:c8:aa:1a:a0: 5f:f7:a9:ad:e5:75:fb:b4:ec:dc:9f:6a:c4:c5:7c: 56:e5:15:96:2f:0b:96:39:22:9f:ec:f6:90:40:35: 6c:9c:9c:aa:3c:d1:d6:93:1a:00:b1:18:71:aa:4c: 5a:fc:69:c4:39:87:1e:2b:00:f7:20:4a:d2:9f:f3: bc:75:9e:e1:42:0e:76:77:bb:0d:aa:59:ab:23:ce: 55:af:b5:e6:1b:0b:56:ad:d3:6f:ba:37:c7:17:e7: 35:af:0d:54:ec:62:a2:98:69:9f:74:2e:de:23:50: 88:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:00:D7:15:9F:A6:91:A2:37:B2:91:9D:D5:33:79:03:9A:76:E6:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca9d0057-dd74-3699-a83e-e4521709a189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:49:eb:22:86:06:42:26:61:bd:1c:61:a5:8c:f8:c2:6f:a5: 52:79:80:cc:11:2d:a0:26:fe:fa:12:9b:52:25:a0:c9:c3:97: 32:41:fd:61:db:dd:a5:cc:35:d9:c2:4c:60:01:6a:e7:e6:a3: 4b:d9:83:74:7e:15:d3:10:8f:74:02:75:57:ab:5e:58:4e:23: ef:24:93:71:ae:6b:63:7e:41:0a:56:55:14:ed:33:a3:5c:0c: e8:4d:30:58:a4:9c:ad:8d:c6:91:cb:5d:dd:0f:30:fd:5a:5c: 7c:62:5b:79:a9:0d:cb:af:e3:6f:4e:ae:8e:12:f2:4d:6d:e1: 2f:37:d9:8e:33:c1:27:00:42:a9:b3:12:af:ce:08:f1:0e:a3: b0:48:51:85:c5:28:21:8f:5e:54:e8:c9:7a:a9:b5:44:e1:b4: cd:f9:4d:02:99:9f:0d:36:c2:76:84:67:1b:66:5e:83:a0:bd: 6f:39:d8:5c:eb:4e:04:12:dc:b2:69:66:86:45:2b:e8:93:d4: f3:cf:fd:2c:20:0a:04:90:db:04:15:4e:1f:1a:0f:c9:cb:ff: c0:ee:b3:d8:c2:64:c4:d4:77:78:d2:9f:15:ee:9a:c2:92:8f: 0b:ba:eb:5e:97:d2:4f:db:ff:e2:2f:8f:a1:aa:ad:02:05:b1: 17:cb:9c:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEQii3aWXs9HU2eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk YjNlMmUxMzAtM2JmOC00MjA0LWIxYjktNGUzMzA2MmU2MGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQc8Aotl1ConBdsbT0ZX6ymTrK9T4vF1ETll KR8Yyf55W/TG8i3FJizCN61fGpO0XzMS/7Vl7L/aWw7Uua/lYXgQW2yalcagpHcU tWgTcP6KuYp+Qv0V7FYw3HcBzHgpH8ramJBrAdFBl4FxWvT1w64tTiuQfkQLef4P E+rh639Tqh7jfowyGgnhtwgb/2xuoMiqGqBf96mt5XX7tOzcn2rExXxW5RWWLwuW OSKf7PaQQDVsnJyqPNHWkxoAsRhxqkxa/GnEOYceKwD3IErSn/O8dZ7hQg52d7sN qlmrI85Vr7XmGwtWrdNvujfHF+c1rw1U7GKimGmfdC7eI1CICwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIA1xWfppGiN7KRndUzeQOaduazMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2E5ZDAwNTctZGQ3NC0z Njk5LWE4M2UtZTQ1MjE3MDlhMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVJ6yKGBkImYb0cYaWM+MJvpVJ5gMwRLaAm/voSm1IloMnDlzJB/WHb 3aXMNdnCTGABaufmo0vZg3R+FdMQj3QCdVerXlhOI+8kk3Gua2N+QQpWVRTtM6Nc DOhNMFiknK2NxpHLXd0PMP1aXHxiW3mpDcuv429Oro4S8k1t4S832Y4zwScAQqmz Eq/OCPEOo7BIUYXFKCGPXlToyXqptUThtM35TQKZnw02wnaEZxtmXoOgvW852Fzr TgQS3LJpZoZFK+iT1PPP/SwgCgSQ2wQVTh8aD8nL/8Dus9jCZMTUd3jSnxXumsKS jwu6616X0k/b/+Ivj6GqrQIFsRfLnKk= -----END CERTIFICATE-----Generated at Tue Jan 20 11:11:20 2026 by rpki-client