This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/d34dc38a-07ce-3e37-9cd0-a31173f32136.roa File: d34dc38a-07ce-3e37-9cd0-a31173f32136.roa (raw, json) Hash identifier: P0LpCXusCIQ8flgdHZcLbAy09/n3oDyvgDmGyZdtvYk= Subject key identifier: C5:1D:E4:2D:8E:DB:8F:D6:C2:E2:A0:0E:43:38:31:D8:CF:43:9E:99 Certificate issuer: /CN=f5f37851-5580-4893-8a07-8693f2521f18 Certificate serial: 010D0C9F4328584C76818BD52FB3EB82A043B480 Authority key identifier: 67:1F:8C:A5:35:19:41:56:92:F6:96:DF:FA:31:37:A8:8C:0B:DB:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/d34dc38a-07ce-3e37-9cd0-a31173f32136.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 401897 IP address blocks: 23.143.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:8b:d5:2f:b3:eb:82:a0:43:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f37851-5580-4893-8a07-8693f2521f18 Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=70a283dd-287a-4553-8373-54d19fd08cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:09:00:bf:bb:a8:d1:45:65:e0:1c:17:3c: 4c:01:f3:bb:60:53:b6:c5:cb:c6:2a:ec:1b:eb:7c: 0b:3e:6d:d4:57:22:cc:c3:d2:a4:71:a6:48:1b:30: 73:e2:24:49:90:fd:53:ee:6e:45:ef:d8:b9:cd:47: 82:e1:3a:97:d9:48:8e:c7:8c:72:b1:a4:80:a6:13: 96:4e:7d:bc:ef:09:fd:62:cd:9d:f2:28:6d:79:d7: 8f:db:a4:9e:9d:1f:b3:c1:44:27:08:2e:5b:9b:96: 85:2a:a6:37:0b:dd:aa:66:3d:c5:67:95:5e:99:94: 0f:1e:87:69:03:cd:85:13:71:e8:4b:83:27:e5:b1: a9:b0:a2:31:67:f6:f0:21:98:86:cb:5d:ff:cc:04: de:d7:41:72:fb:83:b4:d7:4b:80:42:d4:52:c7:bb: 23:46:0a:e9:16:91:3c:2c:f6:44:59:a2:d9:d9:02: bd:f0:d7:4b:96:97:60:92:02:28:85:23:54:bb:14: 13:b2:88:4f:9f:c6:88:75:fb:56:28:4f:e1:05:fc: 52:ca:21:b6:a2:07:45:76:ff:83:6e:95:6b:92:95: 33:cb:8c:3b:58:f6:8b:3f:61:66:65:c7:b6:1c:0e: e5:af:67:8f:16:ae:af:52:8d:97:f7:5a:a5:fb:e8: cc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1D:E4:2D:8E:DB:8F:D6:C2:E2:A0:0E:43:38:31:D8:CF:43:9E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/d34dc38a-07ce-3e37-9cd0-a31173f32136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18/f5f37851-5580-4893-8a07-8693f2521f18.crl X509v3 Authority Key Identifier: keyid:67:1F:8C:A5:35:19:41:56:92:F6:96:DF:FA:31:37:A8:8C:0B:DB:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5f37851-5580-4893-8a07-8693f2521f18.cer sbgp-ipAddrBlock: critical IPv4: 23.143.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d6:f1:24:da:90:c5:d8:bf:c9:5f:ce:ec:2a:88:27:22:39: 0d:7a:75:e4:8a:c3:df:2f:1b:8a:25:9e:dd:bb:3f:c2:fd:08: 09:11:c5:b1:a7:ef:e3:34:c2:c8:3e:bd:dc:e9:57:9a:cf:06: e6:8f:d7:01:b0:2c:f8:f6:95:ab:e1:48:5e:55:a1:c5:64:f7: 38:59:93:50:0f:da:2f:3a:ae:f5:86:c5:1c:36:7e:46:88:eb: 36:6d:6a:e6:4a:b8:e0:a5:1d:53:45:21:08:e1:f6:b1:8b:22: 69:0d:5d:6f:f3:c5:ef:05:0b:fc:01:95:e1:66:2a:39:8f:8e: 3d:80:62:e6:fc:4b:08:78:17:47:77:cb:2b:4d:97:3f:33:dc: a8:7b:bf:55:8c:8b:35:be:e3:8b:5c:84:c7:70:03:27:39:fb: 1d:ee:f2:3f:8f:0e:5e:3c:69:99:46:0a:16:bd:65:8f:a2:bc: 48:5e:7b:cd:d4:fb:38:df:b4:69:c8:fe:27:54:f6:9b:ca:8f: 02:17:2f:9f:9a:5d:22:66:8c:0f:df:02:95:0e:8d:14:da:3d: 96:cf:b5:4a:de:fd:3a:4c:3b:61:f7:00:a3:2b:41:40:83:0a: 08:36:02:99:e3:23:8d:d2:b3:a0:e1:38:38:3a:dc:15:83:ef: af:bf:7d:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx2gYvVL7PrgqBDtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMzc4NTEtNTU4MC00ODkzLThhMDctODY5M2YyNTIx ZjE4MB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk NzBhMjgzZGQtMjg3YS00NTUzLTgzNzMtNTRkMTlmZDA4Y2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf8JAL+7qNFFZeAcFzxMAfO7YFO2xcvGKuwb 63wLPm3UVyLMw9KkcaZIGzBz4iRJkP1T7m5F79i5zUeC4TqX2UiOx4xysaSAphOW Tn287wn9Ys2d8ihtedeP26SenR+zwUQnCC5bm5aFKqY3C92qZj3FZ5VemZQPHodp A82FE3HoS4Mn5bGpsKIxZ/bwIZiGy13/zATe10Fy+4O010uAQtRSx7sjRgrpFpE8 LPZEWaLZ2QK98NdLlpdgkgIohSNUuxQTsohPn8aIdftWKE/hBfxSyiG2ogdFdv+D bpVrkpUzy4w7WPaLP2FmZce2HA7lr2ePFq6vUo2X91ql++jMWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUd5C2O24/WwuKgDkM4MdjPQ56ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mNWYz Nzg1MS01NTgwLTQ4OTMtOGEwNy04NjkzZjI1MjFmMTgvZDM0ZGMzOGEtMDdjZS0z ZTM3LTljZDAtYTMxMTczZjMyMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjVmMzc4NTEtNTU4MC00ODkzLThh MDctODY5M2YyNTIxZjE4L2Y1ZjM3ODUxLTU1ODAtNDg5My04YTA3LTg2OTNmMjUy MWYxOC5jcmwwHwYDVR0jBBgwFoAUZx+MpTUZQVaS9pbf+jE3qIwL2zgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mNWYzNzg1MS01NTgwLTQ4OTMtOGEwNy04Njkz ZjI1MjFmMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF48UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvW8STakMXYv8lfzuwqiCciOQ16deSKw98vG4olnt27P8L9CAkRxbGn 7+M0wsg+vdzpV5rPBuaP1wGwLPj2lavhSF5VocVk9zhZk1AP2i86rvWGxRw2fkaI 6zZtauZKuOClHVNFIQjh9rGLImkNXW/zxe8FC/wBleFmKjmPjj2AYub8Swh4F0d3 yytNlz8z3Kh7v1WMizW+44tchMdwAyc5+x3u8j+PDl48aZlGCha9ZY+ivEhee83U +zjftGnI/idU9pvKjwIXL5+aXSJmjA/fApUOjRTaPZbPtUre/TpMO2H3AKMrQUCD Cgg2ApnjI43Ss6DhODg63BWD76+/fTA= -----END CERTIFICATE-----Generated at Sat Jan 10 14:13:36 2026 by rpki-client