This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa File: f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa (raw, json) Hash identifier: oKyj/9YW/eYZ2Hmjjsk6bWNuK0AHStxkq9ES1eiEQgg= Subject key identifier: 3C:3D:20:B6:0A:40:69:0B:CE:99:A6:AF:D8:B0:AB:5D:79:4D:44:B5 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584BEDB5D29FC32A920D06358040 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 13445 IP address blocks: 23.89.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:d2:9f:c3:2a:92:0d:06:35:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=edcbeb60-d38f-44d7-8079-6222063ede7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:02:42:42:fa:b0:2e:ca:cf:60:56:1d:b4: bd:23:38:bf:af:97:53:db:83:59:fc:e4:02:1b:aa: 53:94:47:fe:28:ef:fd:cd:a3:b6:c3:3d:28:7f:93: af:10:33:41:4d:e4:bc:54:ff:14:5c:64:30:9e:f2: 9d:dd:3c:be:75:d4:0f:26:25:b5:98:6a:86:fd:b0: 33:de:51:ec:c6:b3:67:41:46:c6:96:b7:f6:c4:1e: 88:e4:4b:c5:7a:f3:60:d8:23:26:0b:dd:fc:a1:1b: 4a:2a:2c:a2:3e:6a:a2:d4:ad:bf:2a:53:0f:17:1e: 31:91:62:17:a5:97:9b:90:0d:a0:68:cd:ec:0c:3d: ac:c0:a1:11:5e:0f:c8:cc:60:01:44:fb:ef:88:ec: f6:79:5e:fe:56:a3:47:fc:9d:3c:dc:7a:a3:a0:a3: be:94:96:cb:7c:27:65:17:c8:dd:b4:45:9a:19:55: 7c:0b:51:d2:30:b1:d2:cf:37:f9:0a:d4:88:69:ba: 81:40:74:48:38:99:7a:f3:49:7f:cd:3b:bb:ee:54: 4f:38:1a:16:86:9b:25:b7:26:e7:a0:27:97:73:46: 18:d4:c4:7b:44:37:19:f9:68:cc:44:6a:c6:5f:90: c4:9c:74:45:d1:1d:b1:22:8a:80:40:ed:ed:59:0c: cf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3D:20:B6:0A:40:69:0B:CE:99:A6:AF:D8:B0:AB:5D:79:4D:44:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f88ffbb9-f86a-36c3-ad20-333e7fa84114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 23.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:83:90:9d:45:be:fe:d5:f1:43:c9:74:be:52:e2:ee:21:8f: 81:4f:32:f6:1c:e1:61:7d:3b:0d:69:0c:33:88:8c:eb:aa:de: 08:2b:a1:0d:a9:6a:d4:eb:c3:18:9d:91:de:80:c5:bf:c7:30: 8c:0e:35:14:aa:5c:c2:6d:9a:4c:f7:9e:ed:f8:b3:29:36:b4: 9e:43:67:b9:74:f4:01:d2:c5:a4:a1:2a:a6:b5:88:4b:60:1b: 73:b5:15:a9:6a:2f:7b:17:61:4c:16:b8:1a:e2:56:1a:bc:22: 76:f0:fc:a1:8f:57:3a:6d:1a:fe:b5:68:8a:c3:04:c7:3e:90: d2:a8:39:2e:f2:e1:89:1c:fd:34:25:5c:7b:1a:b3:c1:8d:34: f5:13:7a:aa:b8:00:f3:6f:fd:c7:9a:4b:8e:d4:92:07:7a:ec: 11:a8:0c:7f:9b:ec:53:92:93:09:de:eb:dd:93:f7:fa:cd:dd: f5:5c:63:d3:a0:4c:a6:d5:59:3e:e4:38:4e:31:6d:8c:00:69: e0:82:29:0a:ac:36:73:77:10:3f:81:3b:06:59:31:6a:d7:51: 05:0e:27:98:d3:10:fd:b7:ed:dd:ee:cd:ba:3a:f1:e4:b3:52: f4:83:89:a3:39:dc:b7:e4:c8:68:9c:31:b7:63:24:0a:fe:f7: 86:44:4c:2d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEvttdKfwyqSDQY1gEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk ZWRjYmViNjAtZDM4Zi00NGQ3LTgwNzktNjIyMjA2M2VkZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgYCQkL6sC7Kz2BWHbS9Izi/r5dT24NZ/OQC G6pTlEf+KO/9zaO2wz0of5OvEDNBTeS8VP8UXGQwnvKd3Ty+ddQPJiW1mGqG/bAz 3lHsxrNnQUbGlrf2xB6I5EvFevNg2CMmC938oRtKKiyiPmqi1K2/KlMPFx4xkWIX pZebkA2gaM3sDD2swKERXg/IzGABRPvviOz2eV7+VqNH/J083HqjoKO+lJbLfCdl F8jdtEWaGVV8C1HSMLHSzzf5CtSIabqBQHRIOJl680l/zTu77lRPOBoWhpsltybn oCeXc0YY1MR7RDcZ+WjMRGrGX5DEnHRF0R2xIoqAQO3tWQzPoQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDw9ILYKQGkLzpmmr9iwq115TUS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZjg4ZmZiYjktZjg2YS0z NmMzLWFkMjAtMzMzZTdmYTg0MTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAF1kwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAooOQnUW+/tXxQ8l0vlLi7iGPgU8y9hzhYX07DWkMM4iM66reCCuhDalq 1OvDGJ2R3oDFv8cwjA41FKpcwm2aTPee7fizKTa0nkNnuXT0AdLFpKEqprWIS2Ab c7UVqWovexdhTBa4GuJWGrwidvD8oY9XOm0a/rVoisMExz6Q0qg5LvLhiRz9NCVc exqzwY009RN6qrgA82/9x5pLjtSSB3rsEagMf5vsU5KTCd7r3ZP3+s3d9Vxj06BM ptVZPuQ4TjFtjABp4IIpCqw2c3cQP4E7BlkxatdRBQ4nmNMQ/bft3e7Nujrx5LNS 9IOJoznct+TIaJwxt2MkCv73hkRMLQ== -----END CERTIFICATE-----Generated at Tue Nov 25 11:40:23 2025 by rpki-client