This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/debd32b7-8df2-350c-a725-ce5a858ed872.roa File: debd32b7-8df2-350c-a725-ce5a858ed872.roa (raw, json) Hash identifier: Zp5nU7hCE8mhsBSGjCoxLnWxBb4F51NlhfgTA3uvVCo= Subject key identifier: C0:12:11:A7:E8:17:1B:A4:E5:0A:07:13:65:B8:6C:AD:01:56:4E:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C4CA136B965C41F76C03C4880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/debd32b7-8df2-350c-a725-ce5a858ed872.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 16625 IP address blocks: 23.221.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:36:b9:65:c4:1f:76:c0:3c:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=ffc42300-dc86-465a-ac5c-1264ffaa21df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:22:ec:75:01:ad:86:40:bf:d0:5f:fc:7a:93: d3:91:49:0d:b5:8a:e7:e6:1e:2d:45:e7:64:75:17: b1:1c:a5:26:f5:2e:ad:95:d0:76:3d:c5:8c:25:57: ac:b0:fb:30:4f:0c:2c:26:d7:fa:7e:7d:08:19:45: 02:2e:1e:6d:a7:c2:44:37:b2:cb:22:5b:4e:2f:ee: 3a:4a:02:8e:c7:85:d3:3a:42:27:74:77:e9:11:06: 5b:63:0d:c9:b5:e3:12:2a:bd:db:a1:ca:69:9b:3a: 6f:c9:10:c6:38:73:8b:00:f6:80:c5:f9:1e:a7:b2: 5f:90:5a:d8:89:fd:20:70:a1:53:be:04:c8:8c:76: 1c:79:e7:38:cd:3f:36:93:75:b3:2c:5e:fc:fe:cd: a2:00:2d:21:d2:b0:b4:a2:8c:e7:6d:78:2f:fb:f6: f7:7b:2c:f5:b7:c1:7e:5a:a5:ab:e3:ad:76:0d:9a: fa:06:be:4e:d8:9b:57:64:fa:99:1c:59:bb:bb:51: cd:2b:b2:d8:6d:3a:20:26:67:7b:b2:d3:58:61:b1: 9f:49:7f:f2:85:00:06:ba:c3:6e:08:54:16:de:8a: 4d:06:ed:07:37:d9:47:b2:7f:55:83:79:12:75:18: 06:40:53:13:51:a4:40:dc:bb:27:a8:49:ea:e3:b0: 0f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:12:11:A7:E8:17:1B:A4:E5:0A:07:13:65:B8:6C:AD:01:56:4E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/debd32b7-8df2-350c-a725-ce5a858ed872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d9:84:c2:60:7e:5e:b6:4f:99:51:a0:70:26:8e:39:5a:49: 52:61:11:22:04:51:72:3e:8b:ab:f3:e4:eb:c0:c6:e9:d3:36: b5:c5:3d:1b:f7:12:40:be:9b:82:4b:83:2c:9a:25:b6:a6:34: 31:24:cc:61:d1:90:cb:cf:c7:d2:2f:2b:08:aa:82:ea:0b:ca: ab:6d:09:47:80:4b:bf:de:87:8f:46:6c:6e:68:01:76:4f:43: c5:17:37:c1:50:63:e5:fb:9d:6b:da:b8:6a:c2:9f:ec:3f:03: 74:02:fb:cc:43:b0:b7:e5:c5:4d:9b:33:09:dc:5a:f2:7e:35: 71:1e:28:a6:47:18:07:b5:17:6c:74:05:fb:a8:df:2f:7b:3f: 3a:f7:07:94:29:e0:49:b9:94:02:33:65:6e:74:dd:ff:f3:01: a4:69:cf:eb:18:a7:d4:f5:90:ca:14:db:09:5a:fa:43:98:72: a1:12:57:44:b1:f4:24:09:42:9b:88:6a:65:3b:27:a6:45:5b: bb:7e:7a:0f:95:9f:9c:3c:f9:d3:84:01:fc:9d:c5:62:d5:65: 38:20:88:89:6e:ed:86:f2:bb:b6:19:fc:18:b4:4b:7c:41:93: 4e:e2:b5:ce:00:d4:b4:ba:6f:a5:fd:c3:d3:49:4a:81:e5:26: 02:b9:02:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoTa5ZcQfdsA8SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZmZjNDIzMDAtZGM4Ni00NjVhLWFjNWMtMTI2NGZmYWEyMWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CLsdQGthkC/0F/8epPTkUkNtYrn5h4tRedk dRexHKUm9S6tldB2PcWMJVessPswTwwsJtf6fn0IGUUCLh5tp8JEN7LLIltOL+46 SgKOx4XTOkIndHfpEQZbYw3JteMSKr3bocppmzpvyRDGOHOLAPaAxfkep7JfkFrY if0gcKFTvgTIjHYceec4zT82k3WzLF78/s2iAC0h0rC0ooznbXgv+/b3eyz1t8F+ WqWr4612DZr6Br5O2JtXZPqZHFm7u1HNK7LYbTogJmd7stNYYbGfSX/yhQAGusNu CFQW3opNBu0HN9lHsn9Vg3kSdRgGQFMTUaRA3LsnqEnq47APWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMASEafoFxuk5QoHE2W4bK0BVk7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGViZDMyYjctOGRmMi0z NTBjLWE3MjUtY2U1YTg1OGVkODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF90gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrZhMJgfl62T5lRoHAmjjlaSVJhESIEUXI+i6vz5OvAxunTNrXFPRv3 EkC+m4JLgyyaJbamNDEkzGHRkMvPx9IvKwiqguoLyqttCUeAS7/eh49GbG5oAXZP Q8UXN8FQY+X7nWvauGrCn+w/A3QC+8xDsLflxU2bMwncWvJ+NXEeKKZHGAe1F2x0 Bfuo3y97Pzr3B5Qp4Em5lAIzZW503f/zAaRpz+sYp9T1kMoU2wla+kOYcqESV0Sx 9CQJQpuIamU7J6ZFW7t+eg+Vn5w8+dOEAfydxWLVZTggiIlu7Ybyu7YZ/Bi0S3xB k07itc4A1LS6b6X9w9NJSoHlJgK5Ag4= -----END CERTIFICATE-----Generated at Tue Feb 10 04:24:58 2026 by rpki-client