This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa
File: d68b1747-8766-30c7-9761-0368f3106f64.roa (raw, json)
Hash identifier: 73/ZepcJnKnp+w/TOlKW+ftnhoI5BVTV7zwB0l6bzKw=
Subject key identifier: FD:EA:8E:FC:0D:6E:C9:42:36:1F:3F:9D:25:E4:A1:86:32:5C:6B:14
Certificate issuer: /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial: 010D0C9F4328584BD3306927D4F1FAC849E606E0
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa
Signing time: Tue 11 Nov 2025 14:00:38 +0000
ROA not before: Tue 11 Nov 2025 14:00:38 +0000
ROA not after: Mon 09 Feb 2026 14:00:38 +0000
asID: 30690
IP address blocks: 23.171.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d3:30:69:27:d4:f1:fa:c8:49:e6:06:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Validity
Not Before: Nov 11 14:00:38 2025 GMT
Not After : Feb 9 14:00:38 2026 GMT
Subject: CN=a90acf34-c1fe-4b4a-8065-457077048950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:8b:1d:b3:8e:5c:eb:2e:6c:d5:45:6c:01:
2d:c6:2b:c2:27:70:34:80:62:e8:1d:9d:ac:b4:e2:
67:80:23:28:2f:87:29:e7:7c:40:ff:5f:ce:66:9b:
6b:6b:fe:99:d9:1e:7f:f2:a6:b0:6d:59:f1:9e:f1:
e5:51:3f:a1:25:65:b0:51:3b:dd:01:ec:f7:d5:58:
37:94:d2:18:8c:af:c3:88:88:76:1c:22:cf:b1:ca:
de:eb:e9:4d:74:12:0a:eb:bb:7e:e6:73:5d:95:59:
3d:f8:b1:6e:b5:71:e3:2c:9a:45:76:a8:89:9b:5b:
97:3d:9e:43:e0:6b:a8:d9:c8:c0:2e:9e:27:8d:19:
97:ae:93:59:14:69:88:11:48:35:29:2e:0c:32:34:
57:f1:14:b1:74:f2:13:87:e4:80:38:84:67:03:a9:
89:c8:41:9e:cb:3f:05:6c:7d:58:5a:48:3b:13:be:
16:c4:f3:81:c3:7a:de:2f:3a:8f:ff:98:e1:c0:5f:
51:e7:d3:13:13:65:1d:c8:6f:f7:dc:02:c7:cd:e6:
30:8f:69:09:16:69:e6:6a:10:46:fd:f3:5f:c3:6a:
e6:7d:cf:b1:e6:f1:af:bc:0a:72:37:0b:02:e1:92:
b2:ea:bf:a2:b0:50:cf:78:ae:08:06:a8:f3:d4:03:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EA:8E:FC:0D:6E:C9:42:36:1F:3F:9D:25:E4:A1:86:32:5C:6B:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
X509v3 Authority Key Identifier:
keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:c1:fc:09:88:77:61:5d:d0:6d:2b:91:01:73:a7:8d:4f:0f:
b3:45:2d:5b:d4:01:f2:ac:bf:5c:fa:dd:29:a0:72:81:0e:30:
f5:52:a4:b2:1c:d6:5c:e5:44:bb:64:f4:f5:6c:25:86:66:45:
81:77:96:76:e0:f2:5f:d8:9c:23:d1:eb:b5:e1:e4:ab:c9:e6:
20:60:59:1e:cf:15:12:8d:88:2b:8a:42:d1:3e:51:0d:f6:65:
b5:13:2e:46:3b:b6:9b:60:2f:a3:f6:14:7e:07:3e:53:f5:4b:
cc:bf:10:9b:9b:ba:63:04:b3:7b:5c:aa:66:8b:ae:c2:92:50:
58:b3:57:52:9c:c4:84:c4:f7:0d:24:77:a8:76:ac:4e:3c:3f:
b5:d5:34:59:97:68:34:82:ad:b8:f4:5e:34:56:b3:d4:4c:d2:
12:c6:12:df:29:24:a9:6d:05:a9:93:93:9a:8c:73:35:b0:8c:
8f:7b:d6:70:71:37:6c:4c:34:ab:e9:5f:c5:76:f7:9c:7b:56:
a7:78:37:08:f9:2f:ce:98:89:f7:1b:bd:d8:b0:09:a0:f4:20:
a2:1d:f5:d6:22:03:48:a3:8f:87:1c:7b:31:82:30:98:3b:55:
03:48:6b:85:cd:6c:be:39:da:bc:e6:97:73:37:27:91:76:88:
ec:f7:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:49:27 2025 by rpki-client