This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e00799e-629b-3788-9e92-4ff512455321.roa
File: 8e00799e-629b-3788-9e92-4ff512455321.roa (raw, json)
Hash identifier: MC5v3Qc6yw2el/OhsfDK8P1qvNWR8+aNrxKn9dR58Sw=
Subject key identifier: C1:F4:D8:8C:2B:DB:7D:33:7C:BD:D5:85:F4:C9:49:83:B1:81:75:97
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C1630DB71AE704EB4D74430A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e00799e-629b-3788-9e92-4ff512455321.roa
Signing time: Fri 05 Dec 2025 14:00:38 +0000
ROA not before: Fri 05 Dec 2025 14:00:38 +0000
ROA not after: Thu 05 Mar 2026 14:00:38 +0000
asID: 35994
IP address blocks: 23.219.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:16:30:db:71:ae:70:4e:b4:d7:44:30:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 5 14:00:38 2025 GMT
Not After : Mar 5 14:00:38 2026 GMT
Subject: CN=8786543d-7e35-48b9-86ca-3a67a56c74f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:96:4a:30:9c:a5:c9:48:0c:8e:53:d6:d0:
a8:ca:e3:ec:1e:d8:1a:f0:56:d6:0f:09:82:e5:22:
98:4c:7b:f8:f1:9c:86:4a:20:2e:64:2d:94:a8:69:
75:e4:b1:b2:60:e1:a0:4d:4c:4a:78:63:21:cc:61:
a4:16:53:70:d4:78:41:06:1c:80:62:21:44:ac:dd:
bc:9d:f5:36:13:ae:0f:5b:23:9d:0a:9e:c8:92:19:
67:69:1c:38:d8:25:4c:51:5f:2b:f3:f4:19:1e:0d:
6b:60:c8:60:f4:88:b0:aa:1f:e3:e0:73:15:47:a5:
9a:93:6d:2a:c1:ac:27:d6:5f:9c:f5:f9:63:21:8c:
96:f6:fb:7e:b1:87:55:9e:31:4d:6a:fe:e0:ec:75:
4e:ad:4d:26:8c:f3:09:09:6b:31:74:b2:a1:2c:4f:
78:6f:56:60:a0:ab:17:bd:80:03:a1:bc:61:5b:04:
c3:5d:3f:29:2f:29:23:90:61:8c:e9:8c:4b:7f:ba:
8f:9a:c0:5e:d3:79:d5:3e:33:3c:ce:fa:12:97:b5:
6c:bd:03:e4:10:fc:cd:f4:af:17:4f:d1:1e:9b:3c:
bd:09:a8:c7:c6:d3:c6:0f:5b:07:58:ee:29:b0:0c:
b6:89:a2:0e:36:11:d9:dd:cd:2d:bb:43:36:07:fd:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F4:D8:8C:2B:DB:7D:33:7C:BD:D5:85:F4:C9:49:83:B1:81:75:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e00799e-629b-3788-9e92-4ff512455321.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.219.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:20:47:70:63:c1:06:ef:4f:e0:0d:26:2e:f1:be:08:1e:9d:
e1:06:25:e5:77:cc:13:10:3c:7b:3e:df:76:f1:fd:4f:ba:55:
24:5e:0a:1c:d6:84:c3:0b:29:16:ef:6a:f2:69:58:3d:ff:e0:
3f:49:eb:99:5f:94:00:57:1f:2f:8d:ce:38:36:f8:cc:e2:32:
a3:eb:50:01:2c:5b:a0:71:80:2b:57:c4:b8:9c:7f:2d:32:95:
ef:80:b1:77:96:53:41:1e:6c:69:7c:f5:5d:b1:33:29:90:0a:
a9:74:a2:e3:fa:7d:07:43:48:70:41:6b:9d:b3:9f:b1:a0:e5:
b0:59:27:f3:85:41:a0:f5:ba:cb:14:27:28:9d:3d:71:cc:55:
83:ef:73:58:79:97:52:d3:f3:56:be:27:a2:a7:a3:90:97:fa:
03:f5:18:89:03:5f:c5:e6:c4:b1:ae:b6:5f:59:31:ef:f4:fe:
f3:3d:60:32:fa:6b:0a:d9:78:98:63:53:a4:74:b7:99:c7:26:
59:6a:e9:e7:ff:49:d5:93:55:0f:72:a0:65:62:9e:03:ec:1f:
f0:25:8b:9b:0f:68:c5:38:ce:63:f9:1d:ab:71:62:1f:a5:b4:
0b:88:eb:fc:22:89:50:b2:67:c3:82:25:f7:2e:53:d8:fd:59:
03:f3:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:18:02 2025 by rpki-client