This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa
File: 1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa (raw, json)
Hash identifier: RRhJnjKkEekcmPNhZ185exKoxl1MvrlGS6ChxrResac=
Subject key identifier: 2D:10:E7:28:65:3E:08:A9:CD:64:D5:79:9D:00:2F:49:B7:FA:F2:DE
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584BCD9B13EC9D7EA75CED249500
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa
Signing time: Sun 09 Nov 2025 14:00:38 +0000
ROA not before: Sun 09 Nov 2025 14:00:38 +0000
ROA not after: Sat 07 Feb 2026 14:00:38 +0000
asID: 25645
IP address blocks: 23.249.96.0/21 maxlen: 21
23.249.104.0/21 maxlen: 21
23.249.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cd:9b:13:ec:9d:7e:a7:5c:ed:24:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Nov 9 14:00:38 2025 GMT
Not After : Feb 7 14:00:38 2026 GMT
Subject: CN=506a5f38-3616-461e-8dc6-857354b30cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:85:e4:ef:8c:41:0d:ad:32:c2:d8:72:70:b8:
63:92:7a:52:9f:20:06:7f:e0:fd:99:42:37:2d:be:
ac:26:fb:63:a0:d2:1a:5b:1e:b5:84:7a:ba:8d:fc:
af:3c:04:d0:39:63:0c:09:b6:59:75:64:42:1e:b0:
52:50:b3:95:96:84:f8:3e:80:f4:85:7b:e1:cf:62:
0f:24:fe:c0:8b:98:aa:1e:ea:37:12:a5:bb:b6:a3:
62:31:ad:18:b5:ac:59:af:68:72:df:4f:7a:38:7a:
dc:9b:7d:7e:81:59:db:a9:fa:d3:4b:7b:c8:6c:6c:
91:59:f3:ff:9c:66:af:0f:0c:18:22:f1:17:fb:ef:
b1:c7:35:23:5d:dd:fa:a0:72:e3:e4:a1:8d:ea:ba:
c0:be:09:95:b5:47:0c:77:0d:9b:aa:81:50:21:04:
ab:c5:2b:56:bb:49:36:35:bd:9e:66:01:41:46:e5:
f4:52:fa:44:3e:e5:c8:ed:e1:83:57:97:dd:cc:b8:
78:09:a9:e9:a8:6f:67:7c:a8:78:03:12:f1:9d:42:
46:dd:c3:22:c1:c9:46:dd:c8:96:ba:e8:0d:00:74:
22:de:1a:6b:dc:ad:91:41:8a:bb:01:7b:71:dd:c4:
29:bf:d7:a0:a2:80:c6:30:65:62:14:96:a5:ef:d7:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:10:E7:28:65:3E:08:A9:CD:64:D5:79:9D:00:2F:49:B7:FA:F2:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:92:ac:24:04:a8:ce:69:84:c4:39:8f:56:6e:cf:ad:98:40:
2e:94:67:f1:06:33:ad:69:98:15:cb:6c:14:72:ca:c1:a3:d9:
21:10:b0:95:db:1f:bd:7d:c3:d9:44:72:51:83:71:34:e1:92:
a5:07:d3:31:47:2b:2a:89:d1:2f:a7:39:7e:8e:3b:5d:d3:eb:
1a:b2:fc:24:ba:b8:ff:50:c7:73:a9:18:bc:b2:48:05:f1:84:
85:7b:11:6e:60:37:3b:62:5e:3b:cb:11:5c:86:7d:52:4b:c6:
e4:ed:e0:70:7f:77:8c:9c:ad:21:8c:9a:64:d1:dd:89:a6:a0:
25:dd:e0:ef:60:01:b1:4f:6b:f3:78:04:b1:c9:4c:be:ed:05:
06:cb:f6:e0:23:ef:39:48:c5:04:0a:31:f3:3d:21:dc:81:4e:
bb:cb:2c:73:2c:6f:4c:21:12:93:fe:83:e3:95:4a:62:d9:c8:
8d:58:3f:0c:10:c6:4b:6e:60:00:f8:89:99:9b:1a:5a:8d:40:
8f:0b:e5:13:96:a9:54:1f:37:bf:b3:c3:9e:4b:3e:75:6c:00:
90:d6:e7:bb:85:d7:bf:77:4a:ac:cd:b3:ca:bf:2c:5f:bc:4b:
88:ba:83:48:c6:60:c4:96:ef:81:d6:69:f7:00:72:70:ee:db:
94:a4:4e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:30:42 2025 by rpki-client