This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/dfdbfc18-aa98-3225-abfe-7e62127b7000.roa File: dfdbfc18-aa98-3225-abfe-7e62127b7000.roa (raw, json) Hash identifier: oj1V7P8U8VvzjLxeEh/9KFhJzoaEnIXYfuvLqzSHGBs= Subject key identifier: 8D:9B:76:A9:BC:DC:5E:C0:46:20:94:F0:B5:50:18:F7:E3:72:20:80 Certificate issuer: /CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Certificate serial: 010D0C9F4328584C1D2B78BB1CE1446874AB73A0 Authority key identifier: BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/dfdbfc18-aa98-3225-abfe-7e62127b7000.roa Signing time: Mon 08 Dec 2025 02:00:31 +0000 ROA not before: Mon 08 Dec 2025 02:00:31 +0000 ROA not after: Sun 08 Mar 2026 02:00:31 +0000 asID: 401990 IP address blocks: 23.145.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1d:2b:78:bb:1c:e1:44:68:74:ab:73:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Validity Not Before: Dec 8 02:00:31 2025 GMT Not After : Mar 8 02:00:31 2026 GMT Subject: CN=44db82e6-3be8-4e77-a0e1-be2e13d82d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5a:ef:33:fe:74:c9:b1:93:64:4f:4c:a7:01: 46:1f:5b:e4:86:ed:70:d6:4b:09:60:59:96:19:27: 48:66:42:bb:97:b1:36:ad:24:29:0e:d1:4a:ea:1c: 3e:66:73:cc:b6:94:f9:21:76:29:b7:13:9d:dd:ff: ca:a4:1d:be:35:80:17:1e:26:29:3d:5a:ad:93:7a: 33:9a:92:22:7c:49:80:68:f1:74:2d:b3:31:a7:25: e4:92:80:c8:a5:00:13:28:54:f4:0c:84:4a:bc:87: 31:35:5f:8c:44:75:8d:48:a9:ea:0e:b7:85:d4:15: 8e:88:93:f7:7a:2e:cb:b0:b7:b7:a4:1c:ce:17:34: 92:d2:c9:67:2c:c3:54:60:5d:6b:a0:f3:70:4f:73: c1:80:0c:44:55:94:7b:30:fd:71:62:22:41:f9:da: fe:94:d7:30:17:52:cc:c0:a2:50:d8:cc:3b:64:0a: 72:eb:d5:5e:36:fd:69:b7:e1:dd:38:ef:ce:64:2d: d8:7f:5c:42:3c:44:f8:26:62:dc:c0:a4:41:16:fa: ea:4a:f7:b8:c8:01:97:de:fb:18:cc:8a:54:25:37: 6d:ea:b9:c3:9e:18:00:d2:e6:4a:36:f6:5e:ef:91: ab:80:27:57:c6:09:bc:db:fc:c0:15:9f:d7:3c:e2: 4a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9B:76:A9:BC:DC:5E:C0:46:20:94:F0:B5:50:18:F7:E3:72:20:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/dfdbfc18-aa98-3225-abfe-7e62127b7000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl X509v3 Authority Key Identifier: keyid:BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer sbgp-ipAddrBlock: critical IPv4: 23.145.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0f:db:bd:6b:ec:ac:55:3d:dc:c6:88:65:a7:ea:84:52:a9: ef:31:e5:b0:c9:3c:62:bc:c1:c9:56:5b:de:ee:fa:90:66:b3: 1e:18:82:02:3e:49:2d:69:81:c9:80:4d:57:bc:c2:0e:ba:de: 1e:56:81:94:6d:5d:f4:2b:fe:f5:a5:9c:c1:f6:26:63:21:5d: 1e:60:a7:f6:87:e7:25:17:a1:f9:88:fa:ab:51:2d:9a:ed:3f: 25:d4:16:ae:2e:cb:ad:7f:fe:95:3f:f6:af:b7:e9:b2:4a:8e: ff:9a:a4:be:eb:b4:29:34:56:ad:3e:19:9f:2e:bd:e6:f8:44: 77:76:eb:2c:ad:6b:e7:3a:dc:a3:d9:60:66:41:fd:35:5e:a3: b3:06:a8:07:63:7e:b6:ae:34:cc:5e:3c:ac:4d:dc:bd:c8:6b: fa:98:1e:2d:c8:a5:6f:df:bd:6b:26:ae:42:2c:d9:8c:fa:0f: 12:ec:ee:12:88:c2:53:b0:63:1b:9f:e4:b1:7e:74:6c:1c:88: 5d:ea:34:29:6d:e9:c5:9d:9d:1d:48:31:f9:7f:96:3a:0d:4a: 07:1e:c7:a2:aa:eb:a2:f8:97:07:8c:9b:1d:f8:a7:dd:f1:6d: 0a:d7:a0:36:f5:b7:7a:8e:bb:09:20:1f:01:36:45:24:74:13: 30:b8:0e:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwdK3i7HOFEaHSrc6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhlOGQzOGItMGI4Ny00OTVhLTk2Y2MtMzQ2ZGRmMGQ1 ODAyMB4XDTI1MTIwODAyMDAzMVoXDTI2MDMwODAyMDAzMVowLzEtMCsGA1UEAxMk NDRkYjgyZTYtM2JlOC00ZTc3LWEwZTEtYmUyZTEzZDgyZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilrvM/50ybGTZE9MpwFGH1vkhu1w1ksJYFmW GSdIZkK7l7E2rSQpDtFK6hw+ZnPMtpT5IXYptxOd3f/KpB2+NYAXHiYpPVqtk3oz mpIifEmAaPF0LbMxpyXkkoDIpQATKFT0DIRKvIcxNV+MRHWNSKnqDreF1BWOiJP3 ei7LsLe3pBzOFzSS0slnLMNUYF1roPNwT3PBgAxEVZR7MP1xYiJB+dr+lNcwF1LM wKJQ2Mw7ZApy69VeNv1pt+HdOO/OZC3Yf1xCPET4JmLcwKRBFvrqSve4yAGX3vsY zIpUJTdt6rnDnhgA0uZKNvZe75GrgCdXxgm82/zAFZ/XPOJKTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2bdqm83F7ARiCU8LVQGPfjciCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4 ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZkZGYwZDU4MDIvZGZkYmZjMTgtYWE5OC0z MjI1LWFiZmUtN2U2MjEyN2I3MDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjhlOGQzOGItMGI4Ny00OTVhLTk2 Y2MtMzQ2ZGRmMGQ1ODAyLzY4ZThkMzhiLTBiODctNDk1YS05NmNjLTM0NmRkZjBk NTgwMi5jcmwwHwYDVR0jBBgwFoAUvYEso06SVZbNE7XZXK6S4E0ZZwQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZk ZGYwZDU4MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwP271r7KxVPdzGiGWn6oRSqe8x5bDJPGK8wclWW97u+pBmsx4YggI+ SS1pgcmATVe8wg663h5WgZRtXfQr/vWlnMH2JmMhXR5gp/aH5yUXofmI+qtRLZrt PyXUFq4uy61//pU/9q+36bJKjv+apL7rtCk0Vq0+GZ8uveb4RHd26yyta+c63KPZ YGZB/TVeo7MGqAdjfrauNMxePKxN3L3Ia/qYHi3IpW/fvWsmrkIs2Yz6DxLs7hKI wlOwYxuf5LF+dGwciF3qNClt6cWdnR1IMfl/ljoNSgcex6Kq66L4lweMmx34p93x bQrXoDb1t3qOuwkgHwE2RSR0EzC4Dlo= -----END CERTIFICATE-----Generated at Sat Jan 10 21:08:30 2026 by rpki-client