This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa File: a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa (raw, json) Hash identifier: uOPTgFFl4Wn/nifQoExI/aXM8DoSwRPZLhM1RBr23AI= Subject key identifier: E7:50:A9:D3:16:EA:CB:DB:EB:D3:5C:62:77:A5:32:C6:62:CD:B4:B6 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584C593156E30D6DDB26D5ECB900 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 5645 IP address blocks: 23.233.0.0/17 maxlen: 17 23.233.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:56:e3:0d:6d:db:26:d5:ec:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=754b3254-8954-4716-b7bf-21513e3b6a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:4f:9a:9b:0b:ac:db:bf:35:3a:46:45:2e: b8:91:5f:69:7d:0a:21:6a:d8:1b:e1:eb:3b:f6:84: 5d:be:f3:f0:85:a5:2e:a8:2b:9f:44:79:e4:46:af: 57:99:d3:d9:d5:54:7a:aa:49:64:18:95:df:ab:ad: 63:be:8d:fe:94:f6:f5:2c:64:8d:d3:c9:e7:3f:6e: 04:0b:2e:5e:9c:32:81:97:90:61:03:7e:8b:c7:66: ae:ad:04:ab:07:2c:4d:1e:03:8b:7c:e3:73:cd:ed: 92:0f:07:1a:f1:7e:9b:f2:2d:0f:64:60:73:6a:60: ef:e6:88:d0:ef:67:a6:96:98:e7:2c:10:51:4a:7f: a2:dc:d1:b9:64:af:6a:30:9e:bf:8f:01:4e:c2:d6: 03:cc:b0:a4:a0:6b:9c:2a:c2:de:ef:11:1b:bd:d5: 74:07:06:d9:34:99:95:d2:20:bc:f0:b5:57:33:84: c0:a3:43:ae:e9:e1:a6:90:65:ba:52:db:c2:3c:b4: 8d:1b:68:c8:73:a4:65:0b:90:10:14:0d:ae:64:eb: b1:6f:d8:31:c4:35:a2:84:45:74:30:f8:51:38:c7: bf:64:27:19:ee:41:3a:81:ff:b8:b3:cb:52:7f:15: 37:78:d2:ce:20:86:7b:79:62:74:71:b1:ac:42:f1: c1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:50:A9:D3:16:EA:CB:DB:EB:D3:5C:62:77:A5:32:C6:62:CD:B4:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/a2c5eb7d-3715-3ee0-988c-e51cfb57a945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 23.233.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:12:50:c6:3c:a1:26:d6:95:95:31:2a:07:f2:01:d0:78:3c: 89:33:05:1e:fc:98:a2:c0:c0:f7:a4:76:e0:ab:1e:fb:06:cb: e7:47:fd:92:1f:04:b3:74:19:e6:9d:5a:ca:af:57:8b:92:5a: 95:2e:04:75:f6:db:25:ac:d1:da:df:1a:36:7b:b9:65:80:a5: 19:49:2f:70:68:22:e1:60:84:77:3e:b7:2a:69:6b:43:d4:86: 0e:df:54:8a:99:6e:6a:fe:0f:75:18:bf:7d:8a:b9:76:8d:d8: fa:f2:78:e8:b9:d1:88:f0:4c:54:16:21:00:9a:79:50:38:0a: 75:ef:44:5c:26:b7:58:49:5c:ec:56:0b:67:b3:22:74:94:69: 08:fe:29:eb:50:d5:4c:1a:c9:67:bb:f4:0e:a6:3d:38:24:eb: 25:39:cd:28:ff:2c:3c:b2:ff:b7:a6:8d:a8:47:fa:4b:32:41: dd:d2:d1:df:b1:93:94:3f:f5:4d:6b:96:22:35:76:ab:bd:69: 9d:18:3c:69:5d:b1:a7:72:0a:6d:d0:7d:d5:46:3e:1c:ba:d3: 49:3f:8d:b2:fd:0f:77:ab:17:7d:8f:84:f6:01:2e:36:ae:a4: 19:73:1f:07:c3:64:49:88:a1:20:d6:86:1a:3d:61:cc:20:9b: 19:d6:c5:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZMVbjDW3bJtXsuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk NzU0YjMyNTQtODk1NC00NzE2LWI3YmYtMjE1MTNlM2I2YTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE1PmpsLrNu/NTpGRS64kV9pfQohatgb4es7 9oRdvvPwhaUuqCufRHnkRq9XmdPZ1VR6qklkGJXfq61jvo3+lPb1LGSN08nnP24E Cy5enDKBl5BhA36Lx2aurQSrByxNHgOLfONzze2SDwca8X6b8i0PZGBzamDv5ojQ 72emlpjnLBBRSn+i3NG5ZK9qMJ6/jwFOwtYDzLCkoGucKsLe7xEbvdV0BwbZNJmV 0iC88LVXM4TAo0Ou6eGmkGW6UtvCPLSNG2jIc6RlC5AQFA2uZOuxb9gxxDWihEV0 MPhROMe/ZCcZ7kE6gf+4s8tSfxU3eNLOIIZ7eWJ0cbGsQvHB5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdQqdMW6svb69NcYnelMsZizbS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvYTJjNWViN2QtMzcxNS0z ZWUwLTk4OGMtZTUxY2ZiNTdhOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHF+kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4SUMY8oSbWlZUxKgfyAdB4PIkzBR78mKLAwPekduCrHvsGy+dH/ZIf BLN0GeadWsqvV4uSWpUuBHX22yWs0drfGjZ7uWWApRlJL3BoIuFghHc+typpa0PU hg7fVIqZbmr+D3UYv32KuXaN2PryeOi50YjwTFQWIQCaeVA4CnXvRFwmt1hJXOxW C2ezInSUaQj+KetQ1UwayWe79A6mPTgk6yU5zSj/LDyy/7emjahH+ksyQd3S0d+x k5Q/9U1rliI1dqu9aZ0YPGldsadyCm3QfdVGPhy600k/jbL9D3erF32PhPYBLjau pBlzHwfDZEmIoSDWhho9YcwgmxnWxfU= -----END CERTIFICATE-----Generated at Fri Jan 30 15:07:47 2026 by rpki-client