This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/20d8ae8f-d3e9-3830-99ce-6c904dcf4a7b.roa File: 20d8ae8f-d3e9-3830-99ce-6c904dcf4a7b.roa (raw, json) Hash identifier: qRO1/YRsdhHtq03niDLweU9EE9HG13xAEqrq0kdHgbI= Subject key identifier: 0B:F1:AD:E5:29:2D:60:15:54:B6:C9:4E:25:2D:4C:7C:5E:5D:B5:55 Certificate issuer: /CN=03b593fc-7488-4247-a974-e98b5e2cd5b8 Certificate serial: 010D0C9F4328584C1D2B78D277DDD9B896B20000 Authority key identifier: 8E:AB:9E:26:3D:94:DA:D5:03:63:A4:EF:C3:46:CF:03:FF:B8:8E:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/20d8ae8f-d3e9-3830-99ce-6c904dcf4a7b.roa Signing time: Mon 08 Dec 2025 02:00:31 +0000 ROA not before: Mon 08 Dec 2025 02:00:31 +0000 ROA not after: Sun 08 Mar 2026 02:00:31 +0000 asID: 401990 IP address blocks: 23.145.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/03b593fc-7488-4247-a974-e98b5e2cd5b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/03b593fc-7488-4247-a974-e98b5e2cd5b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1d:2b:78:d2:77:dd:d9:b8:96:b2:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b593fc-7488-4247-a974-e98b5e2cd5b8 Validity Not Before: Dec 8 02:00:31 2025 GMT Not After : Mar 8 02:00:31 2026 GMT Subject: CN=b1452777-a858-43e5-a7c9-8f2272894a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:a0:90:01:1d:0f:5b:69:aa:7f:73:17:4a: e6:a4:ca:30:6a:6c:c1:86:42:85:42:94:f0:a1:fe: 62:fe:e3:20:28:07:d6:d3:53:8a:89:6d:38:6a:04: 1f:45:8b:98:ad:c5:f5:d2:02:5f:76:ef:ff:50:7d: 2d:db:f2:35:45:f2:23:7e:8d:fe:74:4d:cc:80:f0: 7f:e5:a3:72:60:f6:dd:4a:40:29:31:63:28:77:55: db:bf:c8:3d:55:04:e3:f3:ff:62:f0:d7:1c:9a:e9: 9c:0f:e4:f1:ee:09:83:95:30:ba:53:81:8d:99:e0: 6b:92:f4:15:e4:d0:3b:b0:39:f0:9d:17:4e:34:a5: a7:7d:26:08:a5:38:27:00:e6:34:89:7d:0f:61:29: 22:71:dd:68:79:28:5f:e7:e9:88:1b:ad:1a:34:80: 37:d7:91:dc:aa:2a:8c:73:c8:ba:ab:20:3b:c5:63: 64:55:81:3d:5a:2d:09:b9:91:c3:fc:b0:b3:5e:7c: 16:23:20:e2:b5:e0:65:97:b6:59:e3:74:9c:a1:b7: b4:21:1d:15:41:19:df:8d:c6:c3:6b:e2:f3:23:b3: fb:99:5d:5b:5e:72:c7:f8:c2:11:3f:36:66:a0:ae: 5a:b2:91:50:56:d5:84:ba:31:40:8a:c8:6a:59:5b: 01:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F1:AD:E5:29:2D:60:15:54:B6:C9:4E:25:2D:4C:7C:5E:5D:B5:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/20d8ae8f-d3e9-3830-99ce-6c904dcf4a7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8/03b593fc-7488-4247-a974-e98b5e2cd5b8.crl X509v3 Authority Key Identifier: keyid:8E:AB:9E:26:3D:94:DA:D5:03:63:A4:EF:C3:46:CF:03:FF:B8:8E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03b593fc-7488-4247-a974-e98b5e2cd5b8.cer sbgp-ipAddrBlock: critical IPv4: 23.145.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:4d:09:4c:ed:9e:d6:16:f9:33:a0:90:55:e4:f7:0b:50:94: b8:75:ad:1c:40:26:c9:44:a2:36:31:b5:08:c2:16:e9:a2:bd: e3:11:6c:13:a9:d0:bd:d6:cd:f6:ca:fb:3c:11:b5:f6:6f:1f: 37:d1:16:05:bd:23:3d:27:67:43:20:cf:91:a4:c1:c0:cb:87: 3f:6b:94:d2:b8:0d:df:c3:8d:f2:a9:7d:bd:0e:e5:d3:f4:da: 8e:e1:3a:1e:32:54:65:b4:8e:52:ef:90:50:a6:9c:a4:b5:ff: bf:a8:2b:cf:e8:3d:0d:e7:95:11:9e:a0:6c:8e:ed:dc:e5:8a: bf:b6:86:2f:fd:c3:65:54:a5:66:fd:b9:df:2b:ee:fc:99:01: c3:db:be:03:28:04:19:85:2d:2d:53:48:5e:87:f4:43:39:2d: 34:0f:f5:89:ab:a1:2f:2f:76:54:f9:2b:4c:5d:7c:34:77:30: ed:be:e7:16:2c:07:86:07:f2:61:13:a4:ec:91:08:52:d4:b4: 3f:9f:8f:b2:1e:3d:61:20:2a:d3:32:49:48:71:94:ac:e5:5f: 13:af:81:30:5d:ea:d0:51:26:9f:38:e2:8e:46:13:c1:3e:f1: c8:e4:dd:f6:90:9f:d0:1f:fe:39:46:7f:ee:e3:b7:49:10:44: e1:e9:a1:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwdK3jSd93ZuJayAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTkzZmMtNzQ4OC00MjQ3LWE5NzQtZTk4YjVlMmNk NWI4MB4XDTI1MTIwODAyMDAzMVoXDTI2MDMwODAyMDAzMVowLzEtMCsGA1UEAxMk YjE0NTI3NzctYTg1OC00M2U1LWE3YzktOGYyMjcyODk0YTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7OgkAEdD1tpqn9zF0rmpMowamzBhkKFQpTw of5i/uMgKAfW01OKiW04agQfRYuYrcX10gJfdu//UH0t2/I1RfIjfo3+dE3MgPB/ 5aNyYPbdSkApMWMod1Xbv8g9VQTj8/9i8NccmumcD+Tx7gmDlTC6U4GNmeBrkvQV 5NA7sDnwnRdONKWnfSYIpTgnAOY0iX0PYSkicd1oeShf5+mIG60aNIA315HcqiqM c8i6qyA7xWNkVYE9Wi0JuZHD/LCzXnwWIyDiteBll7ZZ43Scobe0IR0VQRnfjcbD a+LzI7P7mV1bXnLH+MIRPzZmoK5aspFQVtWEujFAishqWVsBMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvxreUpLWAVVLbJTiUtTHxeXbVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wM2I1 OTNmYy03NDg4LTQyNDctYTk3NC1lOThiNWUyY2Q1YjgvMjBkOGFlOGYtZDNlOS0z ODMwLTk5Y2UtNmM5MDRkY2Y0YTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDNiNTkzZmMtNzQ4OC00MjQ3LWE5 NzQtZTk4YjVlMmNkNWI4LzAzYjU5M2ZjLTc0ODgtNDI0Ny1hOTc0LWU5OGI1ZTJj ZDViOC5jcmwwHwYDVR0jBBgwFoAUjqueJj2U2tUDY6Tvw0bPA/+4jv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wM2I1OTNmYy03NDg4LTQyNDctYTk3NC1lOThi NWUyY2Q1YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5G8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1NCUztntYW+TOgkFXk9wtQlLh1rRxAJslEojYxtQjCFumiveMRbBOp 0L3WzfbK+zwRtfZvHzfRFgW9Iz0nZ0Mgz5GkwcDLhz9rlNK4Dd/DjfKpfb0O5dP0 2o7hOh4yVGW0jlLvkFCmnKS1/7+oK8/oPQ3nlRGeoGyO7dzlir+2hi/9w2VUpWb9 ud8r7vyZAcPbvgMoBBmFLS1TSF6H9EM5LTQP9YmroS8vdlT5K0xdfDR3MO2+5xYs B4YH8mETpOyRCFLUtD+fj7IePWEgKtMySUhxlKzlXxOvgTBd6tBRJp844o5GE8E+ 8cjk3faQn9Af/jlGf+7jt0kQROHpoQo= -----END CERTIFICATE-----Generated at Fri Jan 9 17:52:15 2026 by rpki-client