This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/cf5393fa-35d4-31bb-8298-3a8383155b2e.roa File: cf5393fa-35d4-31bb-8298-3a8383155b2e.roa (raw, json) Hash identifier: Lt9dNnGZAHSHdvICSLHVjbzBULrQJPY5kay5u8oFvVs= Subject key identifier: 43:CE:6F:B8:DA:C8:DB:2C:5A:67:8B:E9:EB:FD:D9:99:05:87:DB:64 Certificate issuer: /CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c Certificate serial: 010D0C9F4328584BF08087D652A6482F1A004D60 Authority key identifier: 67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/cf5393fa-35d4-31bb-8298-3a8383155b2e.roa Signing time: Sat 22 Nov 2025 02:00:30 +0000 ROA not before: Sat 22 Nov 2025 02:00:30 +0000 ROA not after: Fri 20 Feb 2026 02:00:30 +0000 asID: 212238 IP address blocks: 23.143.68.0/24 maxlen: 24 2602:f5c8::/41 maxlen: 44 2602:f5c8::/44 maxlen: 47 2602:f5c8:20::/44 maxlen: 46 2602:f5c8:80::/41 maxlen: 44 2602:f5c8:e0::/44 maxlen: 46 2602:f5c8:f0::/44 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f0:80:87:d6:52:a6:48:2f:1a:00:4d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c Validity Not Before: Nov 22 02:00:30 2025 GMT Not After : Feb 20 02:00:30 2026 GMT Subject: CN=8b76008e-4c15-4f51-9534-18e016cc1e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:3e:3d:ba:18:3e:dd:d1:8b:26:55:eb:c9: 9c:55:10:8f:e1:7b:ec:28:b7:45:7c:68:a9:89:d9: f8:7f:16:5a:43:b2:1f:17:f1:fb:ec:8e:54:b3:33: 0d:7c:6e:ed:7a:3f:a2:04:70:72:f1:25:bb:a1:91: 01:dd:11:ae:67:0c:d1:1c:cc:48:27:47:22:d9:f7: e2:5f:a0:e7:c6:f4:80:cc:e5:12:41:a5:84:9c:e6: 57:1f:fd:75:25:a4:19:b1:99:8e:86:20:04:26:1c: 7f:d8:d1:d3:d2:37:df:a0:aa:11:96:38:8f:2d:90: 7f:4f:33:71:ca:27:c4:a8:7f:7f:3a:b3:97:b6:c1: f1:a7:61:b8:81:0d:7b:d1:8e:24:29:05:19:db:db: 6e:e6:0c:71:9b:1c:79:03:71:1d:d4:28:f7:5e:91: 9a:6d:83:de:a0:cd:08:14:fb:ab:89:79:b9:69:10: 16:2c:96:05:0e:44:e5:6b:71:cc:e4:c4:6e:da:ed: b0:55:e7:c3:53:90:5d:47:d8:67:94:fd:13:f3:ef: f5:01:99:9e:ef:c4:e0:16:d0:7b:53:f3:60:3c:63: 4d:a9:80:1a:39:b3:06:6f:f4:e2:60:74:a0:91:d1: d6:f1:29:b2:ac:c4:27:d3:94:3f:d7:d3:98:2c:8f: 03:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CE:6F:B8:DA:C8:DB:2C:5A:67:8B:E9:EB:FD:D9:99:05:87:DB:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/cf5393fa-35d4-31bb-8298-3a8383155b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl X509v3 Authority Key Identifier: keyid:67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer sbgp-ipAddrBlock: critical IPv4: 23.143.68.0/24 IPv6: 2602:f5c8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:9a:4b:66:bf:22:65:8c:fc:d5:d0:e8:91:10:c1:9e:3f:11: 97:68:b1:41:54:ba:d6:50:2a:b1:e5:bc:c5:65:bd:2f:ce:88: c9:95:d6:b6:1a:7a:1e:5c:15:c1:81:bd:c2:b3:ad:65:71:b1: 5c:d3:11:70:a9:9f:e9:a5:d9:16:e5:04:80:41:ad:78:d9:9d: e7:8c:84:66:a2:75:da:2f:34:ef:0d:1d:17:9b:cb:fc:50:9a: 8e:e9:90:c4:c3:bc:11:c7:18:5d:81:d4:f8:0b:70:72:ad:5e: 6b:1f:be:e8:2a:b6:7d:21:4e:98:ab:74:1a:b2:e8:33:b1:7e: b0:8d:74:a2:b5:88:95:f3:06:6d:be:06:a9:4a:be:f2:29:9b: 88:9c:7e:ef:b7:cf:2b:4d:32:9a:44:52:38:ae:aa:d7:6b:1a: ce:d9:ab:67:4e:25:cd:dc:34:71:ad:70:f1:68:dd:23:14:7d: f6:7d:d5:d6:7b:a8:90:7c:54:d6:4b:f3:c4:b0:de:ad:b4:68: e0:73:2c:27:4b:c8:b4:65:ee:58:3b:07:63:02:96:37:88:32: a1:ef:ad:14:1a:c4:4c:56:a3:79:41:9f:9b:07:e2:ed:56:57: 07:b9:9a:7b:2d:99:96:44:db:64:09:29:b7:8e:ef:64:1a:fd: 48:41:a8:d3 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEvwgIfWUqZILxoATWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzOWJjOTAtZTljZi00MTI1LWFiZTYtZjc1ZDk5YjFj YTFjMB4XDTI1MTEyMjAyMDAzMFoXDTI2MDIyMDAyMDAzMFowLzEtMCsGA1UEAxMk OGI3NjAwOGUtNGMxNS00ZjUxLTk1MzQtMThlMDE2Y2MxZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvY+PboYPt3RiyZV68mcVRCP4XvsKLdFfGip idn4fxZaQ7IfF/H77I5UszMNfG7tej+iBHBy8SW7oZEB3RGuZwzRHMxIJ0ci2ffi X6DnxvSAzOUSQaWEnOZXH/11JaQZsZmOhiAEJhx/2NHT0jffoKoRljiPLZB/TzNx yifEqH9/OrOXtsHxp2G4gQ170Y4kKQUZ29tu5gxxmxx5A3Ed1Cj3XpGabYPeoM0I FPuriXm5aRAWLJYFDkTla3HM5MRu2u2wVefDU5BdR9hnlP0T8+/1AZme78TgFtB7 U/NgPGNNqYAaObMGb/TiYHSgkdHW8SmyrMQn05Q/19OYLI8D5QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEPOb7jayNssWmeL6ev92ZkFh9tkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZDM5 YmM5MC1lOWNmLTQxMjUtYWJlNi1mNzVkOTliMWNhMWMvY2Y1MzkzZmEtMzVkNC0z MWJiLTgyOTgtM2E4MzgzMTU1YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWQzOWJjOTAtZTljZi00MTI1LWFi ZTYtZjc1ZDk5YjFjYTFjL2FkMzliYzkwLWU5Y2YtNDEyNS1hYmU2LWY3NWQ5OWIx Y2ExYy5jcmwwHwYDVR0jBBgwFoAUZ+GlgVM7SvNBnGzNthnN8x6dX6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZDM5YmM5MC1lOWNmLTQxMjUtYWJlNi1mNzVk OTliMWNhMWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF49EMA4E AgACMAgDBgAmAvXIADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArmktmvyJljPzV0OiREMGePxGXaLFBVLrW UCqx5bzFZb0vzojJlda2GnoeXBXBgb3Cs61lcbFc0xFwqZ/ppdkW5QSAQa142Z3n jIRmonXaLzTvDR0Xm8v8UJqO6ZDEw7wRxxhdgdT4C3ByrV5rH77oKrZ9IU6Yq3Qa sugzsX6wjXSitYiV8wZtvgapSr7yKZuInH7vt88rTTKaRFI4rqrXaxrO2atnTiXN 3DRxrXDxaN0jFH32fdXWe6iQfFTWS/PEsN6ttGjgcywnS8i0Ze5YOwdjApY3iDKh 760UGsRMVqN5QZ+bB+LtVlcHuZp7LZmWRNtkCSm3ju9kGv1IQajT -----END CERTIFICATE-----Generated at Sat Nov 22 21:22:59 2025 by rpki-client