This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9257d023-92ed-3962-b590-1b58b2a8e6d1.roa
File: 9257d023-92ed-3962-b590-1b58b2a8e6d1.roa (raw, json)
Hash identifier: B3daDWfz+R5e4Bol+bn7nHRgH8KrHxBjHX97I6E2hG8=
Subject key identifier: BD:C0:41:26:C1:B1:9F:A8:AC:37:A6:F4:A9:DD:E8:25:FF:72:95:BA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C14CB6E6FCF58F6D8846E9570
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9257d023-92ed-3962-b590-1b58b2a8e6d1.roa
Signing time: Fri 05 Dec 2025 02:00:30 +0000
ROA not before: Fri 05 Dec 2025 02:00:30 +0000
ROA not after: Thu 05 Mar 2026 02:00:30 +0000
asID: 20940
IP address blocks: 23.219.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:14:cb:6e:6f:cf:58:f6:d8:84:6e:95:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 5 02:00:30 2025 GMT
Not After : Mar 5 02:00:30 2026 GMT
Subject: CN=5c7e50bb-f222-4536-930b-c9cd5b4f323f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:bf:f0:2c:a5:0b:94:e4:37:1d:4b:a7:9c:
5d:0d:d7:e8:f4:f9:7d:11:34:a6:68:31:db:c0:87:
94:5e:d5:48:9b:60:d0:66:53:20:ad:9b:07:a6:b3:
3c:bc:cf:f4:fa:a4:4a:37:d3:a7:41:8f:2a:da:c5:
41:b9:42:e2:bc:0e:f3:69:2c:b4:03:08:7a:23:65:
25:97:73:92:a1:13:ee:c5:46:23:8f:bc:b1:cc:e4:
cf:cb:38:b4:bb:42:49:03:d5:c2:53:66:8e:36:12:
60:2d:03:3f:2c:35:bc:83:85:0c:bc:66:02:aa:b5:
25:ab:72:c5:e0:63:0b:60:5c:93:db:81:bf:c6:6b:
76:6f:96:a3:3c:8e:7e:d3:25:67:19:c0:77:15:c6:
ca:05:7f:1d:44:6c:2d:3b:6e:4d:10:ba:68:42:d2:
b9:5f:8b:1c:82:d8:d9:18:e0:19:2b:95:7f:9b:90:
1c:db:94:a8:26:1a:e8:96:c6:80:28:80:6f:a9:7c:
b4:c7:96:c0:29:5c:56:38:37:af:9f:57:39:92:8b:
c8:fa:d9:f6:6b:7e:16:1f:88:e0:fe:7e:03:66:62:
60:9f:ae:83:fa:5a:f2:7d:29:27:8b:ee:57:7d:f1:
b2:73:1b:91:e4:97:69:77:76:9f:8e:3b:93:61:50:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C0:41:26:C1:B1:9F:A8:AC:37:A6:F4:A9:DD:E8:25:FF:72:95:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9257d023-92ed-3962-b590-1b58b2a8e6d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.219.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:d5:51:c1:ee:0c:76:f0:c6:a9:ab:be:2c:fb:50:1b:01:ae:
8c:85:70:76:6c:86:5b:17:75:19:95:b1:51:0f:4a:f0:6d:45:
eb:aa:dc:ef:0f:a4:69:0f:bf:6a:8e:c6:39:0c:15:ee:63:fd:
85:65:fc:93:47:c5:68:b2:8f:41:1c:11:59:5e:d5:f1:26:7b:
b1:cd:3c:c5:23:a4:c8:86:19:cc:0a:ab:b2:ba:f5:3e:b8:2b:
5a:b0:3b:23:5d:c9:80:f3:c4:1f:54:48:b4:d5:75:31:aa:69:
08:2c:e2:7a:55:cb:5c:be:a9:5b:99:b1:54:ed:ae:58:89:91:
b0:18:57:12:ba:47:62:a1:97:97:cc:c1:21:62:6e:59:a2:b1:
0b:0f:13:e3:25:cb:d6:fc:65:fb:29:a9:d9:e1:3a:02:c3:17:
5d:f9:b8:09:84:9d:86:4b:55:c3:52:ed:43:6a:f7:42:64:4a:
28:8b:24:cb:04:ba:e5:fe:62:05:c3:36:ba:fb:a7:fb:ac:07:
f8:4b:c2:0a:a0:04:b1:9c:98:3e:a8:48:16:ae:39:39:8e:20:
77:fc:85:c4:d7:09:07:7e:f7:b2:3b:66:f7:73:85:76:0c:d3:
9b:90:02:00:07:d1:eb:8a:cd:16:14:67:15:8c:50:ad:7f:38:
b7:f8:21:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:22:31 2025 by rpki-client