This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85905f9c-4520-3d42-98dd-c97d2bd3947f.roa
File: 85905f9c-4520-3d42-98dd-c97d2bd3947f.roa (raw, json)
Hash identifier: 79NB+jWttZrmDC+ftBlBZwKRFqCeYEhCHveQD/3aQ2I=
Subject key identifier: 30:24:75:94:32:20:F7:CD:12:00:BC:47:2F:B3:E8:40:C5:ED:13:9A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584BC53B13F864BDD84FA9172BC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85905f9c-4520-3d42-98dd-c97d2bd3947f.roa
Signing time: Thu 06 Nov 2025 14:00:41 +0000
ROA not before: Thu 06 Nov 2025 14:00:41 +0000
ROA not after: Wed 04 Feb 2026 14:00:41 +0000
asID: 16625
IP address blocks: 23.2.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c5:3b:13:f8:64:bd:d8:4f:a9:17:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 6 14:00:41 2025 GMT
Not After : Feb 4 14:00:41 2026 GMT
Subject: CN=b9ec569e-bf86-45d4-a6ad-0aa5ebb07f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:86:f5:68:9e:f9:03:86:4c:ee:fa:5c:0f:
0a:74:4a:82:c2:c2:c1:90:2d:fd:b3:81:45:d6:cc:
f9:9b:aa:b5:c8:a9:57:06:bb:b6:c7:b4:06:1f:96:
e3:4f:a7:28:7f:c1:21:69:80:7a:0c:5a:87:0a:83:
69:3d:6a:b9:c8:9e:d3:ff:45:be:82:6c:11:11:dc:
a0:1d:51:83:54:aa:0a:46:3f:a2:e6:49:e3:3d:77:
bd:fe:7d:58:27:c9:ac:2d:9d:fe:2e:af:09:73:0b:
10:34:88:43:a8:0e:32:3f:b2:b4:83:54:f5:35:cc:
8d:84:87:49:37:2d:fc:8e:9a:4b:d0:9a:7c:cc:30:
d3:63:8f:03:a3:a1:2d:dc:fc:9d:d7:98:89:a8:7e:
74:8e:c4:e7:82:cc:6d:9a:f2:33:34:08:15:fd:ea:
c3:da:85:21:d0:94:b4:95:65:19:dc:5d:cc:ef:24:
9e:5a:b7:c3:de:44:c9:4e:a9:f0:37:97:19:76:c2:
8a:b0:7a:48:47:71:c4:29:f0:d2:7b:cb:f3:30:e2:
5f:b0:5a:b5:20:5f:17:da:12:9a:7a:92:c8:21:2a:
52:f8:54:5a:16:7e:f8:18:db:cf:62:f9:d4:f9:37:
77:37:eb:50:3d:f0:d7:2c:6a:cc:8d:85:af:bb:05:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:24:75:94:32:20:F7:CD:12:00:BC:47:2F:B3:E8:40:C5:ED:13:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85905f9c-4520-3d42-98dd-c97d2bd3947f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.2.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:25:60:44:6e:e1:b0:08:33:dc:19:93:dd:9b:c4:31:ad:f3:
77:50:3a:94:8d:94:ef:4e:8b:2e:b0:c9:d4:a9:de:cf:53:ce:
da:8c:cf:42:b2:42:e8:7d:ad:fa:ae:81:cf:93:95:7e:c8:a5:
86:38:30:d7:14:20:ef:e1:d2:46:8f:08:04:93:86:90:11:87:
48:2f:14:8e:7a:ac:9b:90:d8:84:43:53:18:32:0b:82:36:0a:
5c:ea:d1:90:3c:dc:1e:64:86:9d:55:94:a6:3b:75:c5:7d:a5:
72:f2:dc:a0:88:ad:50:2f:41:43:c3:92:a7:d8:1e:16:8f:96:
d7:33:ef:e4:fc:f9:d4:07:01:12:ca:61:90:43:0b:30:85:d4:
bd:b2:a8:54:5c:be:e8:31:61:fc:99:63:41:7f:f5:8a:16:1a:
cf:df:81:98:36:5a:04:c7:66:b6:29:ad:84:fa:b1:8a:66:57:
7b:74:38:20:d2:21:65:03:bf:79:a2:e9:01:b1:ba:51:20:13:
c6:77:9f:8d:32:f6:57:0a:d1:83:88:a6:4c:99:09:d5:c3:68:
8a:03:bf:5a:d9:4b:cf:48:45:09:08:49:a3:f2:db:6b:78:54:
8e:60:d8:ea:39:8e:43:aa:62:2e:42:d4:fc:22:17:06:54:7f:
6e:44:1b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:54:49 2025 by rpki-client