This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2356829e-5caa-32f9-8881-a4cf0655095f.roa
File: 2356829e-5caa-32f9-8881-a4cf0655095f.roa (raw, json)
Hash identifier: XFftOPBbE+F8bJq9Tt/AoITXtFWc6CdWI/Vyjw/y9Q8=
Subject key identifier: 2E:72:96:EF:0F:FE:3B:45:34:24:AF:F9:FB:0E:A1:FE:D2:55:9B:49
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C0570C607AAE80242D4A7DD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2356829e-5caa-32f9-8881-a4cf0655095f.roa
Signing time: Sat 29 Nov 2025 14:00:39 +0000
ROA not before: Sat 29 Nov 2025 14:00:39 +0000
ROA not after: Fri 27 Feb 2026 14:00:39 +0000
asID: 20940
IP address blocks: 23.52.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:05:70:c6:07:aa:e8:02:42:d4:a7:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 29 14:00:39 2025 GMT
Not After : Feb 27 14:00:39 2026 GMT
Subject: CN=01a61ac2-b8a9-4996-b1f3-956e1b9c5361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:f3:4b:f5:81:76:f9:58:92:7f:95:ed:76:
ae:94:5e:2b:e6:0c:0c:c6:03:80:bc:16:23:f1:19:
87:d2:dc:0a:83:d4:65:3b:d5:e0:f2:ff:f4:e9:1d:
57:04:1e:d1:4d:63:f1:2f:c7:18:d9:98:57:14:0c:
d0:6a:c6:b0:87:6c:e3:e4:66:fd:ac:9a:ac:25:d2:
59:d6:46:6c:9b:67:73:e2:16:7b:8f:d5:41:4f:75:
b9:57:2a:5d:82:ec:a0:e8:e3:71:e7:b2:07:4a:9a:
54:8f:81:e5:4e:46:ef:85:3d:6e:e4:ba:8b:bd:18:
ea:28:28:56:97:05:fc:93:d4:a5:cd:d6:e3:fe:2e:
b6:d2:51:d5:70:04:fb:1e:30:78:0d:09:d8:41:7a:
8c:e0:46:f4:95:f8:a7:0b:c1:0e:c1:0b:d5:6e:64:
b9:5b:52:62:e8:22:be:c5:94:b2:0f:00:c9:20:1b:
d5:e8:0f:89:56:0d:61:f6:e5:98:cc:69:28:43:45:
52:98:cd:b9:fa:c9:18:f0:b0:e0:40:5b:8b:89:0a:
f4:16:b0:7c:8e:91:4f:05:6d:5f:2b:dd:86:86:88:
13:5f:e5:1d:9b:d8:77:12:d0:27:15:12:a1:01:50:
f7:c6:17:02:3f:5f:b3:30:93:bd:c7:f3:e1:af:7e:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:72:96:EF:0F:FE:3B:45:34:24:AF:F9:FB:0E:A1:FE:D2:55:9B:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2356829e-5caa-32f9-8881-a4cf0655095f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.52.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:04:76:1e:77:f6:d2:14:ef:34:5e:87:c1:c1:f8:db:67:5a:
62:e3:57:57:3d:92:de:55:c6:dd:da:09:d8:5e:3b:6e:6e:cc:
81:aa:9d:68:c5:13:55:0c:aa:11:ec:b5:49:50:da:0d:88:dd:
43:1c:07:c9:45:5b:8f:3c:60:43:98:63:57:d7:f9:54:bf:bb:
0d:73:64:dc:04:a5:8a:3e:bc:0c:60:1f:4f:1a:7d:13:5e:28:
da:16:7c:61:e2:7c:8c:b2:60:37:fd:f4:08:d2:a8:ed:88:47:
8c:a1:73:21:61:f5:a7:3f:47:6a:87:35:23:4f:7e:f8:a1:ae:
b8:3a:34:75:f5:0e:4b:2e:13:08:f5:26:4e:63:ef:de:58:b6:
69:a0:70:a9:95:70:86:fa:f2:61:8b:96:1b:65:ae:be:92:76:
fd:28:85:b0:e4:e7:72:1c:7e:86:86:a9:d7:54:88:3b:2e:9f:
fd:0f:1d:2e:78:fa:9f:b8:d1:bd:5a:ee:c1:d3:ef:71:70:9f:
67:96:08:cb:d9:41:76:7f:a1:d9:2a:9f:45:b2:87:34:b3:08:
24:e9:b8:b6:de:06:a7:cb:67:fa:db:c2:60:0d:90:6c:c1:bc:
4a:04:95:26:70:0a:40:ab:b1:0f:83:60:0a:be:06:35:38:bc:
08:25:e5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:06:32 2025 by rpki-client