This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4be70d3f-516d-3b05-b892-1b653b7341ba.roa
File: 4be70d3f-516d-3b05-b892-1b653b7341ba.roa (raw, json)
Hash identifier: TrGSdrVq1c4BcOLXQYvQw8HdxRKnjecp33vJilAcVJk=
Subject key identifier: 7D:6C:E2:65:73:6B:66:C0:0C:FA:4F:92:37:3F:FF:D8:F4:9F:1E:C0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C4CA12E9B7DEDE2C8C4DECB38
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4be70d3f-516d-3b05-b892-1b653b7341ba.roa
Signing time: Thu 25 Dec 2025 02:00:31 +0000
ROA not before: Thu 25 Dec 2025 02:00:31 +0000
ROA not after: Wed 25 Mar 2026 01:00:31 +0000
asID: 16625
IP address blocks: 23.221.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4c:a1:2e:9b:7d:ed:e2:c8:c4:de:cb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 02:00:31 2025 GMT
Not After : Mar 25 01:00:31 2026 GMT
Subject: CN=d35f593c-08c2-4af9-8913-220739b29cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:c2:e6:6b:ef:37:ed:17:bf:e6:fc:ec:ce:
e2:41:ff:cf:41:29:8d:5c:ad:1c:02:d9:5f:ac:26:
7e:32:2e:98:87:06:01:db:dc:e8:27:48:62:ff:ed:
d7:f8:76:28:8c:13:85:d9:16:86:f1:4e:80:83:e9:
82:87:94:34:aa:8c:11:5f:53:46:89:b5:3e:4c:c2:
e3:2f:9c:f5:aa:dc:49:b0:cd:9d:5e:d6:bf:bc:88:
1c:a2:e6:7d:6f:e0:99:7d:41:1b:0d:56:9f:9c:c5:
ec:81:31:ca:a7:b9:3a:a3:d1:77:05:86:f5:58:04:
8b:4b:a1:f3:2c:8e:57:9a:1c:ac:97:c0:24:e4:34:
16:88:37:79:75:80:9c:b9:6b:05:e9:13:83:61:ae:
40:0d:e1:d7:c0:b2:51:cf:ca:06:5d:a4:a0:fd:5b:
d2:67:fa:92:1c:8d:66:c7:d7:fb:0d:2f:a8:84:3d:
a8:1b:d6:40:55:35:cc:3a:2e:09:44:80:8d:1a:d8:
3e:e4:48:e9:32:07:8d:1b:a8:4c:de:54:7f:5e:5f:
bb:2d:a4:7e:d7:37:0c:4b:70:43:e1:5e:55:54:c1:
8a:71:66:9b:ba:59:c1:a3:30:d5:95:e5:4c:3f:6a:
db:7f:fd:23:01:0f:60:ab:2f:7c:b5:32:62:0c:d4:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6C:E2:65:73:6B:66:C0:0C:FA:4F:92:37:3F:FF:D8:F4:9F:1E:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4be70d3f-516d-3b05-b892-1b653b7341ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.221.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:75:a3:e0:c0:30:64:0c:c6:9c:ac:73:f4:cd:53:be:45:11:
0c:c5:f4:a7:18:89:60:52:eb:c0:83:16:0a:b2:c9:fb:c3:91:
c7:bc:fb:43:65:fd:d5:93:1c:80:ab:c2:55:af:cc:5b:ee:7b:
0d:74:6a:a8:6e:7f:5c:cc:bc:fd:f7:5c:8b:5a:60:68:1d:cf:
36:90:52:29:2f:f0:03:9c:44:0a:59:4b:5d:59:f7:49:f2:35:
2c:44:92:9d:13:cd:84:2c:3a:03:6f:b7:c6:59:88:65:25:04:
d1:e9:55:ee:33:6f:65:68:a0:d7:6d:64:d9:c5:2f:30:f9:53:
34:e2:06:28:cb:71:15:f0:bf:a1:c3:71:a4:04:4e:c3:50:f4:
21:6b:cd:88:08:94:74:93:f0:4e:68:5d:6c:6a:60:c0:8b:40:
6c:a4:16:b6:62:4f:68:16:41:10:4b:aa:96:d1:4b:48:c5:f4:
cb:f6:89:ce:8e:06:7e:68:33:51:6f:17:b8:df:10:fd:6a:30:
a7:43:cf:fa:97:2e:ca:b5:06:db:19:1b:90:f1:9d:38:fe:45:
a2:ff:ee:eb:06:88:80:dd:51:31:8a:80:ce:d5:5f:a9:81:d3:
6b:fa:6f:0a:17:5e:97:ba:16:69:53:3a:56:1e:cd:e8:40:2f:
e3:2d:7f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:10:05 2026 by rpki-client