This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86e21e1c-ed1a-3ea0-8a46-786ce2c5da47.roa
File: 86e21e1c-ed1a-3ea0-8a46-786ce2c5da47.roa (raw, json)
Hash identifier: gm4LBABLGfedsrU3KZUha1FP8ZUNotJ7YPC0mV+OkUQ=
Subject key identifier: D4:90:B9:EC:EB:EA:48:B0:A7:95:2E:8C:B5:25:BB:08:75:3A:6E:B1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C040B521F1A0E0DA20A9F40C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86e21e1c-ed1a-3ea0-8a46-786ce2c5da47.roa
Signing time: Sat 29 Nov 2025 02:00:31 +0000
ROA not before: Sat 29 Nov 2025 02:00:31 +0000
ROA not after: Fri 27 Feb 2026 02:00:31 +0000
asID: 9498
IP address blocks: 23.50.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:04:0b:52:1f:1a:0e:0d:a2:0a:9f:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 29 02:00:31 2025 GMT
Not After : Feb 27 02:00:31 2026 GMT
Subject: CN=22ee2f4a-7d32-4e61-8d38-346f700c828e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:90:fe:d3:f9:86:c8:ed:b1:a3:42:3c:ae:c4:
79:b8:8e:7a:49:36:63:11:f0:9a:35:c5:97:5a:06:
ae:a4:a5:08:8b:68:08:4e:db:fb:eb:b5:33:5f:03:
63:10:1e:38:64:38:9f:2d:e0:ab:68:ea:a0:cf:06:
ce:38:d6:97:53:42:bd:47:76:08:33:bf:3a:28:6f:
82:d7:48:03:90:c8:13:b9:5b:30:26:a9:a0:08:43:
00:ee:b9:27:04:11:18:d6:ad:90:c6:18:62:e8:5a:
b6:81:7b:c3:7d:9c:5b:2d:c0:a9:3a:ce:11:4e:7e:
44:df:fb:92:47:3b:cb:d2:c5:f6:7e:85:76:72:94:
02:0b:dc:29:f4:05:f1:e0:d6:4f:cd:c4:37:7d:54:
76:0a:ee:54:61:d3:bf:00:98:dc:b4:41:21:d5:0d:
78:32:9e:2f:2c:92:d9:a8:02:dd:f9:45:e6:1a:fe:
c4:e6:9a:26:44:9d:40:70:61:9b:b7:93:40:45:67:
c3:b4:f7:4f:e1:84:5d:30:c9:dd:f0:87:5d:e9:dc:
e0:49:ce:4c:f9:ac:87:31:d8:18:99:95:53:d7:48:
49:29:fb:6a:32:ce:5d:f9:ad:fe:8b:7c:71:09:0a:
75:67:4e:7f:ce:ac:b1:4e:2b:78:e2:e3:d8:b4:3f:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:90:B9:EC:EB:EA:48:B0:A7:95:2E:8C:B5:25:BB:08:75:3A:6E:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86e21e1c-ed1a-3ea0-8a46-786ce2c5da47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.50.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:15:1c:13:60:c7:ff:b8:d9:38:19:08:89:b0:b7:18:08:c4:
2a:56:3c:20:7d:4b:11:75:71:5f:fb:1e:49:00:5e:b8:4a:af:
96:7d:19:18:34:04:33:6f:5a:91:5e:d4:05:fc:c0:eb:cf:b3:
ee:16:c8:02:22:88:70:55:11:9b:97:98:da:25:21:4a:1f:f9:
d1:92:12:d6:66:5c:c8:a6:f7:3e:cf:7e:3b:7c:cd:c2:4f:40:
11:10:dc:04:9f:8c:11:b7:e1:5d:f3:0b:90:3a:ec:fa:7a:17:
6d:cf:a8:1e:f3:a2:05:d8:16:15:f8:5c:6e:86:2b:fd:27:13:
1c:dc:1a:c2:46:73:e6:e3:99:c1:f3:a9:4b:ab:23:bc:93:08:
24:49:51:92:4b:0a:07:49:be:d6:f1:e3:fc:d5:44:5b:2c:2f:
70:5d:40:b0:41:c5:52:89:6c:8a:f7:91:be:15:1d:74:e5:25:
b9:24:73:9c:62:f8:93:35:c6:fe:80:44:78:27:60:82:e9:e2:
27:62:5d:ce:fd:1c:42:a6:99:3a:cf:67:e8:d7:70:fd:6a:ac:
5b:73:3f:5f:50:7d:a0:41:e3:56:7d:fc:cf:11:78:64:d3:e5:
b0:59:24:30:2c:e4:b0:f3:0a:31:06:02:fe:1b:b9:9e:6c:73:
73:98:cf:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwEC1IfGg4NogqfQMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTEyOTAyMDAzMVoXDTI2MDIyNzAyMDAzMVowLzEtMCsGA1UEAxMk
MjJlZTJmNGEtN2QzMi00ZTYxLThkMzgtMzQ2ZjcwMGM4MjhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JD+0/mGyO2xo0I8rsR5uI56STZjEfCaNcWX
WgaupKUIi2gITtv767UzXwNjEB44ZDifLeCraOqgzwbOONaXU0K9R3YIM786KG+C
10gDkMgTuVswJqmgCEMA7rknBBEY1q2Qxhhi6Fq2gXvDfZxbLcCpOs4RTn5E3/uS
RzvL0sX2foV2cpQCC9wp9AXx4NZPzcQ3fVR2Cu5UYdO/AJjctEEh1Q14Mp4vLJLZ
qALd+UXmGv7E5pomRJ1AcGGbt5NARWfDtPdP4YRdMMnd8Idd6dzgSc5M+ayHMdgY
mZVT10hJKftqMs5d+a3+i3xxCQp1Z05/zqyxTit44uPYtD/7KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNSQuezr6kiwp5UujLUluwh1Om6xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZlMjFlMWMtZWQxYS0z
ZWEwLThhNDYtNzg2Y2UyYzVkYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGsVHBNgx/+42TgZCImwtxgIxCpWPCB9SxF1cV/7HkkAXrhKr5Z9GRg0
BDNvWpFe1AX8wOvPs+4WyAIiiHBVEZuXmNolIUof+dGSEtZmXMim9z7Pfjt8zcJP
QBEQ3ASfjBG34V3zC5A67Pp6F23PqB7zogXYFhX4XG6GK/0nExzcGsJGc+bjmcHz
qUurI7yTCCRJUZJLCgdJvtbx4/zVRFssL3BdQLBBxVKJbIr3kb4VHXTlJbkkc5xi
+JM1xv6ARHgnYILp4idiXc79HEKmmTrPZ+jXcP1qrFtzP19QfaBB41Z9/M8ReGTT
5bBZJDAs5LDzCjEGAv4buZ5sc3OYz5w=
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:03:28 2025 by rpki-client