This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa
File: 2b98512f-e781-3b9a-b954-6bbdae3b43de.roa (raw, json)
Hash identifier: U9IQa07ZK6MK/hCXDuhNAlRFwFw/YZV1IKoZvfldKK4=
Subject key identifier: 60:81:CE:1C:A5:50:56:A6:5E:8F:F4:71:3F:C1:7D:88:AD:AF:A5:B2
Certificate issuer: /CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5
Certificate serial: 010D0C9F4328584BFBAB52057C7DF20799D02B80
Authority key identifier: ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa
Signing time: Wed 26 Nov 2025 02:00:31 +0000
ROA not before: Wed 26 Nov 2025 02:00:31 +0000
ROA not after: Tue 24 Feb 2026 02:00:31 +0000
asID: 19415
IP address blocks: 23.166.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fb:ab:52:05:7c:7d:f2:07:99:d0:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5
Validity
Not Before: Nov 26 02:00:31 2025 GMT
Not After : Feb 24 02:00:31 2026 GMT
Subject: CN=52086a25-bbe1-4f62-8d6a-2db620edbfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:16:78:5c:92:2e:1d:18:4a:2d:5f:03:d0:
da:9f:be:1c:3e:61:db:bb:8b:14:d0:17:91:dc:78:
1c:78:4a:eb:f0:8c:e4:e5:02:fa:18:a4:2e:5e:e6:
7f:27:d2:5a:07:96:df:7f:f0:05:8d:24:15:67:0d:
df:23:49:b3:b6:3f:5c:31:4a:0b:48:ce:d6:ab:0e:
61:e3:17:8b:33:3e:66:1c:83:e7:fe:8f:34:29:10:
eb:d3:6b:f5:2f:d7:a7:0b:15:de:1b:77:02:3b:25:
0c:12:e6:c5:8c:e9:e4:55:22:64:98:c2:b4:14:e3:
68:f7:d8:e9:58:90:57:6c:e4:e8:57:80:61:d7:6d:
26:83:87:e6:3b:3d:e1:01:c1:65:d0:e5:54:de:74:
99:53:53:0e:48:0b:3a:fb:5b:0b:17:96:19:3b:c3:
77:f2:54:b1:f4:88:38:f4:5d:06:4e:ae:84:d3:55:
53:9e:c4:5f:2f:9f:01:da:9b:58:9f:04:d9:f5:be:
2a:c0:7a:2f:03:5a:0c:b2:50:a5:df:e7:a3:f8:e9:
33:b9:bc:f2:56:2a:66:28:1d:03:48:bb:d8:44:98:
ba:13:13:bd:07:bb:29:9c:1c:c7:3d:48:f3:8a:16:
93:c4:e7:31:93:e2:f5:36:36:a1:e9:e9:88:fe:97:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:81:CE:1C:A5:50:56:A6:5E:8F:F4:71:3F:C1:7D:88:AD:AF:A5:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl
X509v3 Authority Key Identifier:
keyid:ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:f1:c5:52:69:97:40:b7:07:d4:02:0c:12:d1:d7:84:a2:13:
4b:42:2e:4e:2e:95:bb:53:44:2d:59:3c:fd:f0:3f:41:22:a0:
56:e6:f9:f3:b4:9a:ca:b7:49:68:3a:45:5a:94:f3:a3:67:f5:
44:80:9a:1f:a4:61:58:48:41:dc:dd:c6:3b:07:cb:2e:a1:17:
5d:c1:50:4b:56:d5:83:4a:31:41:a7:91:35:4a:32:92:44:65:
65:78:05:00:b1:71:4f:c6:d3:5b:ba:e3:58:65:8e:42:9d:71:
c6:87:a9:86:9b:7c:14:e7:81:43:68:25:c6:16:f7:b7:f4:80:
c8:ab:f2:2e:34:35:c4:5f:5d:39:c9:87:2a:07:1d:81:bf:f3:
b3:b9:6a:d7:2f:ac:90:ab:65:65:8d:69:a3:33:4a:a8:41:5b:
8d:e3:dd:34:d4:a9:56:eb:f3:f1:05:32:33:f1:3c:97:c1:69:
cb:39:c8:19:42:d2:96:55:af:2a:8b:ab:bd:55:4c:70:a7:bf:
5f:c9:97:a2:21:cf:18:02:bf:b7:92:ef:19:5b:d8:21:b7:d0:
f3:b4:3e:ce:64:b6:7f:9d:b5:37:55:77:63:c6:32:51:8c:69:
b4:3d:e5:34:2c:8a:e6:33:d5:4b:8b:44:06:63:4b:94:9e:b0:
0c:e3:b5:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7q1IFfH3yB5nQK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY2YjIzYjEtYzE5Ny00ZGIyLWI0ZDQtYTgxYWRjZDZm
MGU1MB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk
NTIwODZhMjUtYmJlMS00ZjYyLThkNmEtMmRiNjIwZWRiZmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8MWeFySLh0YSi1fA9Dan74cPmHbu4sU0BeR
3HgceErr8Izk5QL6GKQuXuZ/J9JaB5bff/AFjSQVZw3fI0mztj9cMUoLSM7Wqw5h
4xeLMz5mHIPn/o80KRDr02v1L9enCxXeG3cCOyUMEubFjOnkVSJkmMK0FONo99jp
WJBXbOToV4Bh120mg4fmOz3hAcFl0OVU3nSZU1MOSAs6+1sLF5YZO8N38lSx9Ig4
9F0GTq6E01VTnsRfL58B2ptYnwTZ9b4qwHovA1oMslCl3+ej+OkzubzyVipmKB0D
SLvYRJi6ExO9B7spnBzHPUjzihaTxOcxk+L1Njah6emI/pdqtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGCBzhylUFamXo/0cT/BfYitr6WyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZi
MjNiMS1jMTk3LTRkYjItYjRkNC1hODFhZGNkNmYwZTUvMmI5ODUxMmYtZTc4MS0z
YjlhLWI5NTQtNmJiZGFlM2I0M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGY2YjIzYjEtYzE5Ny00ZGIyLWI0
ZDQtYTgxYWRjZDZmMGU1LzhmNmIyM2IxLWMxOTctNGRiMi1iNGQ0LWE4MWFkY2Q2
ZjBlNS5jcmwwHwYDVR0jBBgwFoAU7X7Nfu+u7KZM9e2wRMrEAv3aQ8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZiMjNiMS1jMTk3LTRkYjItYjRkNC1hODFh
ZGNkNmYwZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6b4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETxxVJpl0C3B9QCDBLR14SiE0tCLk4ulbtTRC1ZPP3wP0EioFbm+fO0
msq3SWg6RVqU86Nn9USAmh+kYVhIQdzdxjsHyy6hF13BUEtW1YNKMUGnkTVKMpJE
ZWV4BQCxcU/G01u641hljkKdccaHqYabfBTngUNoJcYW97f0gMir8i40NcRfXTnJ
hyoHHYG/87O5atcvrJCrZWWNaaMzSqhBW43j3TTUqVbr8/EFMjPxPJfBacs5yBlC
0pZVryqLq71VTHCnv1/Jl6IhzxgCv7eS7xlb2CG30PO0Ps5ktn+dtTdVd2PGMlGM
abQ95TQsiuYz1UuLRAZjS5SesAzjtb8=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:53:04 2025 by rpki-client