This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/74daf3ed-8166-3412-9434-e1b8b9031aae.roa File: 74daf3ed-8166-3412-9434-e1b8b9031aae.roa (raw, json) Hash identifier: TMSAHmR8WoXuzgm9I3RwJrAjckMlY1fmLePrg30f9/8= Subject key identifier: 3A:9D:5D:43:E3:60:D3:F8:5A:78:D5:79:81:72:95:A1:39:DA:FF:80 Certificate issuer: /CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214 Certificate serial: 010D0C9F4328584C28565E4D3C4BABB0F6AC880E Authority key identifier: 61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/74daf3ed-8166-3412-9434-e1b8b9031aae.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 402006 IP address blocks: 23.145.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:5e:4d:3c:4b:ab:b0:f6:ac:88:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214 Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=ff4b10e8-1645-4adf-abfb-226c70e83b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3f:ea:db:44:eb:e9:65:c2:bb:8d:c6:62:ce: fb:63:b3:86:b9:55:43:7f:24:ff:bd:cf:0b:e5:74: 1a:02:68:a7:8d:6e:73:b8:ab:9e:c9:37:47:23:ad: 17:e4:db:47:98:44:e8:57:87:a2:e6:c6:7e:a6:3b: 00:4e:1f:cc:fd:f5:f8:90:a2:4c:0b:11:08:0f:6f: dc:c2:ae:58:bd:ea:a2:7d:1b:a8:7f:d7:96:05:1e: 1a:81:9a:8e:d5:00:0f:4c:ea:1a:43:a1:12:00:dd: c1:f5:88:fc:d3:44:9c:d2:55:d7:bd:12:40:2a:56: 83:5a:f7:79:ab:a8:a5:98:3d:f7:1d:17:68:81:d7: 2c:dd:11:80:99:e0:be:a5:b4:67:0e:06:1a:e0:bf: 45:88:b5:a9:ac:dc:d6:5b:c4:7e:e6:56:a4:54:6d: 1c:4c:05:8a:b6:ea:17:c5:d7:f6:fb:e4:81:5d:c3: ac:32:b2:ff:84:c3:bd:c6:38:59:dc:02:9f:1b:cd: 5e:b6:90:4d:b9:c9:34:7f:f4:f1:93:1d:5e:ea:87: 59:7f:e7:cd:95:21:8a:98:35:e2:cb:74:15:91:d8: 37:29:84:c9:bb:0a:73:ba:e7:5d:a8:99:62:f5:9d: 71:39:ea:55:82:2a:fa:5b:13:ff:ac:b6:57:bd:ca: 05:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9D:5D:43:E3:60:D3:F8:5A:78:D5:79:81:72:95:A1:39:DA:FF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/74daf3ed-8166-3412-9434-e1b8b9031aae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl X509v3 Authority Key Identifier: keyid:61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer sbgp-ipAddrBlock: critical IPv4: 23.145.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:61:55:da:7c:eb:46:5f:b4:fd:25:da:cd:bd:75:b1:64:db: 8e:77:d3:3a:7f:cd:18:01:47:7c:bb:40:73:27:a8:55:16:01: 66:4a:93:f4:af:d2:b8:32:4d:45:b6:92:b0:13:1d:8a:e2:6e: 51:5e:b1:6a:f0:96:6e:c3:9f:f4:5b:da:60:e8:a6:56:3a:5c: 3c:13:5d:53:2f:e6:61:ba:e1:e8:9d:39:35:eb:ff:8b:70:6c: 3b:20:65:14:bf:dc:fd:40:b5:16:5a:d3:7a:17:a4:c1:75:09: 47:a2:b3:a7:e9:35:c9:86:54:e5:39:15:0b:66:78:2e:20:b3: dd:41:a6:d8:93:08:5e:7f:b5:ac:f3:01:2d:ff:00:c1:63:f5: d1:c1:25:05:21:77:20:b1:00:e9:49:48:5b:bb:93:fa:af:2b: c5:d0:fc:19:3c:5b:0a:db:e8:c1:e6:64:ff:b5:5d:10:b5:3a: 7f:46:be:f4:25:a0:59:e8:62:e9:96:6b:e4:89:8c:34:8c:b8: 3a:57:65:39:25:39:00:39:4d:04:7a:fe:ea:38:8b:e1:7e:89: 55:e1:ec:8d:bd:69:ef:0b:61:71:73:df:90:ab:10:e9:64:3b: 56:03:12:30:35:a6:b1:06:d5:a0:e7:76:8e:92:68:9c:c1:46: 48:55:36:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwoVl5NPEursPasiA4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNmYWFiNGItN2Q0OS00M2I3LTgwZGQtODRhYjBlYmVi MjE0MB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk ZmY0YjEwZTgtMTY0NS00YWRmLWFiZmItMjI2YzcwZTgzYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9T/q20Tr6WXCu43GYs77Y7OGuVVDfyT/vc8L 5XQaAminjW5zuKueyTdHI60X5NtHmEToV4ei5sZ+pjsATh/M/fX4kKJMCxEID2/c wq5YveqifRuof9eWBR4agZqO1QAPTOoaQ6ESAN3B9Yj800Sc0lXXvRJAKlaDWvd5 q6ilmD33HRdogdcs3RGAmeC+pbRnDgYa4L9FiLWprNzWW8R+5lakVG0cTAWKtuoX xdf2++SBXcOsMrL/hMO9xjhZ3AKfG81etpBNuck0f/Txkx1e6odZf+fNlSGKmDXi y3QVkdg3KYTJuwpzuuddqJli9Z1xOepVgir6WxP/rLZXvcoFzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqdXUPjYNP4WnjVeYFylaE52v+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Y2Zh YWI0Yi03ZDQ5LTQzYjctODBkZC04NGFiMGViZWIyMTQvNzRkYWYzZWQtODE2Ni0z NDEyLTk0MzQtZTFiOGI5MDMxYWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWNmYWFiNGItN2Q0OS00M2I3LTgw ZGQtODRhYjBlYmViMjE0LzljZmFhYjRiLTdkNDktNDNiNy04MGRkLTg0YWIwZWJl YjIxNC5jcmwwHwYDVR0jBBgwFoAUYZ3XubI1BYSlrEpe24EOAMY4JC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85Y2ZhYWI0Yi03ZDQ5LTQzYjctODBkZC04NGFi MGViZWIyMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlhVdp860ZftP0l2s29dbFk24530zp/zRgBR3y7QHMnqFUWAWZKk/Sv 0rgyTUW2krATHYriblFesWrwlm7Dn/Rb2mDoplY6XDwTXVMv5mG64eidOTXr/4tw bDsgZRS/3P1AtRZa03oXpMF1CUeis6fpNcmGVOU5FQtmeC4gs91BptiTCF5/tazz AS3/AMFj9dHBJQUhdyCxAOlJSFu7k/qvK8XQ/Bk8Wwrb6MHmZP+1XRC1On9GvvQl oFnoYumWa+SJjDSMuDpXZTklOQA5TQR6/uo4i+F+iVXh7I29ae8LYXFz35CrEOlk O1YDEjA1prEG1aDndo6SaJzBRkhVNtQ= -----END CERTIFICATE-----Generated at Fri Jan 9 18:09:36 2026 by rpki-client