This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22796a0f-a11f-3d7e-b81b-18b853665ad4.roa
File: 22796a0f-a11f-3d7e-b81b-18b853665ad4.roa (raw, json)
Hash identifier: ECgnlT0G4kBUvBgAOwCF3gQUt6Z9GjuX29BChNARdUU=
Subject key identifier: E1:20:D8:26:A1:03:1F:3E:91:E1:2C:B4:3E:31:D3:6A:5D:B5:BD:3A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C4CA12DFE4D7EF7B36D0CB580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22796a0f-a11f-3d7e-b81b-18b853665ad4.roa
Signing time: Thu 25 Dec 2025 02:00:31 +0000
ROA not before: Thu 25 Dec 2025 02:00:31 +0000
ROA not after: Wed 25 Mar 2026 01:00:31 +0000
asID: 34984
IP address blocks: 23.221.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4c:a1:2d:fe:4d:7e:f7:b3:6d:0c:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 02:00:31 2025 GMT
Not After : Mar 25 01:00:31 2026 GMT
Subject: CN=09cb7943-a1b9-47be-8916-ca8a62f782d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:e2:ba:eb:81:5b:a2:c7:23:2e:0a:a0:21:
4a:e4:67:b3:e7:34:5e:95:f2:69:d8:96:aa:bc:7a:
7b:5e:aa:5a:05:76:31:9b:17:fe:61:cc:8a:20:e6:
d6:9d:ce:c8:b9:7c:47:ef:dd:b8:0b:3a:36:99:81:
e9:c2:bf:40:aa:e5:2b:d9:6c:36:89:19:a6:20:0c:
62:c6:2d:dc:49:4f:a4:35:80:5e:f5:1a:60:02:4b:
41:12:44:8b:93:6d:89:61:89:b3:43:c6:64:58:f4:
d1:81:62:ae:b9:e4:ba:a3:5b:41:86:c7:00:d8:76:
ec:5d:22:71:5c:1b:2a:63:ba:54:5c:61:aa:47:5f:
68:7f:fa:36:c3:0d:b3:75:c2:ca:9c:61:9a:5d:06:
33:5b:1b:eb:2c:a5:3a:e2:4a:0a:62:ed:01:13:68:
85:13:f1:68:34:8c:64:19:98:6b:b9:13:f0:f1:60:
43:e1:4f:34:e2:6d:3a:01:4b:9b:02:be:80:b9:82:
26:d8:81:c4:9c:bb:10:d8:d2:ae:b3:46:5f:04:fe:
de:d4:ce:b5:e7:c9:2e:ca:7f:22:23:11:17:a5:5a:
85:f4:3f:2d:aa:c5:f0:92:72:96:06:a6:cc:b3:d6:
d2:92:a5:a0:82:ec:26:97:a2:3d:1b:c9:13:99:6e:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:20:D8:26:A1:03:1F:3E:91:E1:2C:B4:3E:31:D3:6A:5D:B5:BD:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22796a0f-a11f-3d7e-b81b-18b853665ad4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.221.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:de:d5:a7:21:8b:23:45:8d:38:6b:31:0d:99:f7:5b:fd:fb:
b5:18:d6:78:bb:e0:da:13:e5:2d:5e:5b:a4:01:36:4c:09:66:
dd:11:65:8d:27:41:b1:1e:37:5c:44:e0:4c:c9:63:e1:9a:bb:
0e:ac:6e:41:98:94:39:c1:48:83:71:33:82:a4:b8:8c:91:03:
1e:86:1d:44:c6:15:ba:86:d3:24:e1:33:52:4e:16:e2:08:e7:
39:df:da:f8:ed:13:e9:74:a1:3d:9e:9d:40:a2:c1:a7:ce:62:
d7:d9:d0:54:93:c7:3f:1b:6b:5f:42:f6:18:25:2b:ee:91:9e:
23:98:56:aa:9a:20:65:93:c8:33:fd:7b:bf:55:08:04:0b:62:
69:e0:43:f3:a5:38:eb:09:f7:0f:68:a4:5a:33:e9:b5:9a:03:
c5:be:aa:a6:b0:ec:84:f3:7a:fb:e3:5a:06:3a:a7:4a:4b:20:
39:94:ca:cb:1b:52:6b:a6:03:a2:40:53:c7:0d:8b:fd:a9:ce:
b9:29:c1:92:1c:70:45:75:41:29:39:61:2d:ae:c1:aa:fb:48:
f7:10:6e:1f:b6:68:69:f0:71:19:73:8c:66:a9:d6:da:16:bb:
2b:7c:03:15:ac:20:aa:b9:78:b3:84:62:ff:5b:a6:84:5a:d8:
12:96:14:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:18:01 2026 by rpki-client