This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc81e598-a2b7-3cf3-b4e4-eb70a0d8be74.roa
File: bc81e598-a2b7-3cf3-b4e4-eb70a0d8be74.roa (raw, json)
Hash identifier: NrSDXWE5d0TrAD/JqbtEdU2KcfF75ueQEbIDJQ0TZR0=
Subject key identifier: 62:53:7B:3E:71:AF:81:12:A9:CA:EF:3A:D7:67:C5:CA:83:55:A7:1A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C8476CA98DACF76D7964123C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc81e598-a2b7-3cf3-b4e4-eb70a0d8be74.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 35994
IP address blocks: 23.32.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:76:ca:98:da:cf:76:d7:96:41:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=415c75df-a4a8-4aaa-8c93-17eb6838504a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:af:29:3d:6e:fc:bb:ab:e9:77:70:59:f4:
c9:06:83:6f:ad:73:96:0f:a3:a4:f5:2f:09:1d:f0:
20:40:37:45:27:95:47:f4:ac:c4:21:d7:d1:a9:7a:
94:8e:38:19:20:34:d2:b9:1a:6f:84:90:8b:af:68:
59:5f:68:44:1b:80:d9:0d:db:4f:15:dc:7b:2f:6e:
7f:88:da:4d:81:e3:82:ae:7d:da:89:a3:07:9f:90:
64:9d:e9:65:f1:d1:61:1f:95:71:ea:87:e9:ab:3b:
d7:42:4a:53:2f:a3:8e:34:06:55:50:4f:12:09:13:
0c:76:aa:b4:39:5a:b8:60:f1:3d:4f:d9:c4:68:b8:
01:b6:ca:b7:ee:de:47:ca:9c:19:84:fb:56:43:6a:
ac:8f:f7:67:de:ce:25:23:c8:0d:ea:74:9a:94:0b:
f7:24:dc:bb:42:88:f5:c1:9b:8e:f3:12:4f:6b:81:
86:75:06:f1:07:e1:2c:18:b6:9b:06:01:fb:92:ac:
70:49:f6:40:59:89:02:a7:2e:54:96:7b:7f:97:56:
db:81:a4:ed:63:ee:92:a9:a8:20:98:5a:fe:59:98:
80:b0:b9:a7:78:25:db:28:0f:68:9a:e4:54:4c:8e:
f3:03:a2:84:59:7a:8a:0a:bf:58:40:f1:98:c2:a2:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:53:7B:3E:71:AF:81:12:A9:CA:EF:3A:D7:67:C5:CA:83:55:A7:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc81e598-a2b7-3cf3-b4e4-eb70a0d8be74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:03:9d:c8:68:90:ce:52:2f:58:ad:57:7b:43:8d:c5:b1:18:
87:6a:14:16:6f:43:69:c2:24:65:20:0a:de:0a:80:8f:53:c5:
ac:51:93:5e:17:94:96:39:12:6f:44:78:46:d7:d2:63:87:e0:
e3:a8:8a:06:00:74:44:c2:c2:67:a2:d3:3f:85:95:04:34:c5:
08:13:9c:9e:57:3d:d3:bc:b5:88:5c:20:9d:24:a4:b5:5b:43:
8b:ce:1e:f9:54:d3:8e:ec:ca:32:0a:40:74:e1:cc:29:d1:c2:
6a:31:75:87:c7:b1:89:d5:dc:a5:7b:56:9b:aa:14:e3:98:09:
cf:a7:cf:30:c2:4a:57:7d:11:0d:25:8c:f9:c1:b5:08:7e:7b:
bf:3f:46:d3:ac:b6:82:e5:79:1c:5f:a3:ca:06:e6:09:d1:3b:
d6:60:3e:da:e2:7e:c7:88:b3:e9:36:e4:35:cc:31:96:42:be:
15:9f:5d:3a:ad:44:4c:dd:00:fe:53:fe:63:10:64:c5:d4:71:
41:ea:21:b0:56:2e:e2:7b:1f:d2:e8:c5:f1:fe:55:ad:c8:9f:
54:1d:4d:99:1c:65:c6:7b:40:08:b7:a6:76:fd:67:3a:02:ce:
8a:32:47:a8:6d:32:1e:e2:b1:3b:19:07:6d:2f:f4:9f:8e:c2:
1b:fd:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:12 2026 by rpki-client