This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa
File: 724dc813-9136-3075-bcba-f77834af4133.roa (raw, json)
Hash identifier: UpfuBk8ZyEz54Wbh1Z1MK5JmFynKm2iQk7trbh7BAjU=
Subject key identifier: 12:75:4D:BE:C2:EA:52:AC:50:18:08:D5:15:0D:33:7E:73:0D:C3:2E
Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001
Certificate serial: 010D0C9F4328584BE555BEFC29312659073AF8C0
Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa
Signing time: Tue 18 Nov 2025 02:00:30 +0000
ROA not before: Tue 18 Nov 2025 02:00:30 +0000
ROA not after: Mon 16 Feb 2026 02:00:30 +0000
asID: 923
IP address blocks: 23.144.156.0/24 maxlen: 24
207.167.121.0/24 maxlen: 24
2602:fbf5::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e5:55:be:fc:29:31:26:59:07:3a:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001
Validity
Not Before: Nov 18 02:00:30 2025 GMT
Not After : Feb 16 02:00:30 2026 GMT
Subject: CN=c3532ed5-9580-4272-bcfc-64f533a72235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:93:7e:36:af:b3:98:78:6d:30:94:c5:a1:30:
cf:3c:11:6b:3b:0c:93:ac:c2:8a:61:42:92:ab:18:
66:65:b4:cf:6e:4f:8e:57:ad:0d:70:24:85:e6:91:
c0:29:90:28:b4:71:64:c8:d8:2a:5c:ff:5a:0b:8f:
f6:df:aa:90:ab:f6:af:6b:7d:13:a8:8f:fc:48:55:
d8:b6:18:39:c0:a0:02:55:cc:a0:ef:bc:d1:14:69:
a8:85:95:d4:ad:0d:ff:b0:8a:9c:39:99:24:e5:59:
3e:f4:28:ff:7a:3b:e0:fa:48:1c:89:5c:63:d1:ad:
ff:34:6b:81:0f:51:d6:84:71:87:c7:1a:6e:00:20:
b1:9d:41:26:cf:79:3b:ff:8a:67:02:f8:13:a6:5c:
11:95:6d:83:e4:b4:b1:5e:b1:fc:df:b7:17:ad:37:
77:6b:16:af:ad:6b:70:3b:ee:a9:4d:9d:19:d2:34:
2c:bc:0c:c9:48:c2:5f:0f:fe:d2:ed:7c:06:0a:cb:
b7:25:bd:05:ee:d1:ad:60:e1:9b:47:17:ad:81:81:
41:83:1d:76:24:69:dc:e0:55:d8:d4:43:d0:80:dd:
89:5e:c4:80:d9:0d:51:0a:ad:55:7e:34:00:c6:b5:
98:62:08:97:9b:ae:00:6c:eb:4d:e2:b1:a0:ce:e0:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:75:4D:BE:C2:EA:52:AC:50:18:08:D5:15:0D:33:7E:73:0D:C3:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl
X509v3 Authority Key Identifier:
keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.156.0/24
207.167.121.0/24
IPv6:
2602:fbf5::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:54:81:39:94:45:7a:5f:75:2d:5a:a5:35:96:ca:aa:73:50:
f2:c9:a3:8f:e5:a5:cd:bf:db:c4:22:85:cc:74:4b:7c:79:ff:
6a:90:63:f1:31:5b:f2:6b:a3:3b:6a:ac:46:2d:5d:8c:8f:0f:
ee:84:51:16:d3:35:04:08:e6:3f:ee:a0:2f:03:e1:d9:c0:af:
a8:02:ae:12:08:15:55:71:9c:35:3a:5b:68:1f:32:73:fe:0e:
dd:42:60:8c:9e:51:f0:7e:d9:37:f7:4a:8d:73:9f:08:62:45:
51:2e:11:bb:df:aa:76:f2:33:6a:9b:f7:d3:fc:00:8a:39:61:
f9:ee:37:f6:89:1c:df:e2:ba:75:70:28:f7:7c:eb:52:26:a9:
18:ff:63:2c:c4:75:47:b4:eb:13:6a:bd:28:a2:92:c6:bf:b9:
d6:fb:1f:4a:5b:8d:f0:4f:0e:50:85:a8:87:1c:72:c8:16:0a:
98:c5:c9:dc:4d:d4:51:13:e6:17:bd:95:49:d5:20:d7:41:d2:
33:15:0a:c1:7d:4d:6e:22:ff:10:da:f6:0f:80:fd:37:1e:82:
35:5c:c8:77:d3:a6:e7:71:b8:b5:62:c4:c7:ad:42:a5:b0:7d:
eb:d5:cb:c8:84:19:28:b4:f8:87:7d:db:dc:d4:20:a7:2e:ba:
30:17:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:55:05 2025 by rpki-client