This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a84df5d8-4635-354c-8b40-a24cdd0b7288.roa
File: a84df5d8-4635-354c-8b40-a24cdd0b7288.roa (raw, json)
Hash identifier: eHP+CfjZsG9DiCklduFFakeTV1zPpNZb1yHBtZiDq+g=
Subject key identifier: B7:36:6D:6B:CA:A7:00:72:FA:6B:9D:36:A5:A6:A3:BE:FD:99:37:B7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584BC53B11560C5990AD0CAA7D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a84df5d8-4635-354c-8b40-a24cdd0b7288.roa
Signing time: Thu 06 Nov 2025 14:00:41 +0000
ROA not before: Thu 06 Nov 2025 14:00:41 +0000
ROA not after: Wed 04 Feb 2026 14:00:41 +0000
asID: 16625
IP address blocks: 23.7.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c5:3b:11:56:0c:59:90:ad:0c:aa:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 6 14:00:41 2025 GMT
Not After : Feb 4 14:00:41 2026 GMT
Subject: CN=1c0bf4e4-91eb-4f6f-9e3b-c213fce6b47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:08:2d:d2:cb:d7:6d:66:f2:35:89:5f:5d:
9d:3f:9e:ff:10:89:f7:0d:d1:39:38:46:50:a5:26:
57:1c:fa:63:83:63:1f:46:9c:cb:27:b8:08:68:8a:
67:23:97:f4:65:41:f4:82:84:05:e0:9c:59:f1:d6:
6e:64:ad:f5:52:61:99:e6:a5:35:79:03:d6:ea:7f:
fc:66:d3:27:41:64:ff:d6:3b:5f:66:ec:85:83:4c:
59:17:76:17:a6:7a:d2:15:a3:41:39:3c:ef:ee:f1:
86:d4:ea:06:da:f3:c3:9d:31:d6:6a:f3:b9:22:d2:
6c:00:e7:2b:5d:00:67:a7:5c:c8:8f:b7:fb:02:69:
32:2e:50:74:d2:8e:08:3d:39:dc:d8:9a:b2:f2:ae:
cc:c1:34:0c:f8:7d:64:bf:d7:75:97:44:81:f2:2a:
d3:3a:a9:6a:7e:a5:6f:06:34:1e:43:c6:53:8a:aa:
89:66:8f:2c:a2:bc:15:ed:0a:2f:90:7b:7a:6e:a2:
e4:bd:f3:fe:ed:f9:98:99:14:69:eb:fa:22:56:65:
43:16:13:18:ed:bd:68:19:f3:d2:86:a8:a1:ec:b9:
d0:46:1f:db:71:df:c4:a1:86:83:48:0c:48:d9:7d:
f8:f5:50:99:dc:29:33:33:76:e9:5b:7b:e3:2e:40:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:36:6D:6B:CA:A7:00:72:FA:6B:9D:36:A5:A6:A3:BE:FD:99:37:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a84df5d8-4635-354c-8b40-a24cdd0b7288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.7.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:7b:7e:79:ec:e7:6f:45:a5:a9:a9:ca:7f:67:3f:b7:8e:bd:
71:32:a3:f3:d3:0c:c6:96:be:ff:92:ed:87:54:52:67:d5:ed:
0c:82:0c:13:24:2d:9c:ec:cc:a7:8b:84:fc:45:87:fc:18:da:
88:46:db:81:bd:b3:d1:87:af:69:74:1e:2e:81:b6:3f:4c:21:
64:22:90:b4:85:64:7f:1f:e8:cd:36:84:b7:51:21:40:b0:59:
6d:af:07:30:b1:df:35:e5:24:7b:28:fe:c1:77:28:dd:c5:f3:
f6:9b:eb:12:85:24:45:70:35:94:7c:7f:5c:c6:35:54:57:a4:
01:bb:5f:82:c3:0d:52:56:5d:57:90:36:1a:2f:ee:c6:26:53:
de:bd:60:33:09:09:a3:d7:1a:d8:e7:a9:59:8d:87:12:ca:00:
89:98:ea:d2:12:9f:bd:de:d2:42:a9:32:5a:f7:3f:e4:ff:58:
c8:66:5d:a8:34:bd:48:60:3f:f2:cf:27:d6:57:11:f3:b3:71:
25:33:06:ce:6c:3a:c0:b4:09:71:a9:84:b5:e5:9c:44:84:3c:
69:53:6e:4a:75:0f:4e:6d:05:0d:87:6d:6b:dd:f7:05:d8:36:
70:03:a0:da:81:50:9b:24:76:9b:b5:7d:bc:d2:17:d0:4d:1a:
d4:b9:0d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:09:56 2025 by rpki-client