This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd394ec8-8f5e-3714-b337-3f5489eee42d.roa
File: cd394ec8-8f5e-3714-b337-3f5489eee42d.roa (raw, json)
Hash identifier: pWOU0+ToNsT9I/ggxC6VokdTFP9uBt7WP6/AAorW/HQ=
Subject key identifier: 69:C1:E0:E7:10:F1:AA:78:02:0F:AE:2A:E3:16:66:30:35:02:AF:8E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584BDCF5DDCE542B7048D8D3B380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd394ec8-8f5e-3714-b337-3f5489eee42d.roa
Signing time: Sat 15 Nov 2025 02:00:32 +0000
ROA not before: Sat 15 Nov 2025 02:00:32 +0000
ROA not after: Fri 13 Feb 2026 02:00:32 +0000
asID: 20940
IP address blocks: 23.43.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:dc:f5:dd:ce:54:2b:70:48:d8:d3:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 15 02:00:32 2025 GMT
Not After : Feb 13 02:00:32 2026 GMT
Subject: CN=e50688d9-74a8-4751-92cc-2c05155623a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:73:90:72:a9:d1:be:d2:82:62:2e:0c:c9:
00:b2:1d:0f:1f:87:e8:10:d3:e6:56:e1:21:42:a3:
f9:89:26:41:24:01:ee:31:72:41:56:74:a5:25:1e:
a9:ca:26:eb:dd:e0:8f:f3:6b:10:5b:e8:02:5c:bd:
f0:6e:fd:da:27:92:8b:78:17:02:5c:da:5b:b9:77:
2c:fc:75:97:f8:9e:38:8d:7b:b9:b1:d5:dc:4c:f3:
09:df:35:66:c4:76:4b:77:46:e3:4b:ff:ba:d0:07:
fd:bf:7b:0d:82:d9:07:41:2f:f5:3f:64:9a:cc:3f:
9b:2a:92:d1:af:76:6e:d9:84:4e:a8:cc:1f:0f:09:
c9:2a:31:00:c0:45:1d:fc:e7:4f:0a:05:25:02:19:
cf:10:e5:be:62:50:4b:9e:39:31:ca:b7:72:22:d9:
40:6f:8f:2f:9a:b2:a5:d5:24:92:63:3c:35:9d:9f:
38:72:21:d8:c9:37:3b:09:2b:f3:ca:0a:e4:f6:2f:
ce:87:ee:2e:6c:02:c3:50:76:08:ab:b4:ab:7e:a4:
0c:75:3a:ad:7b:85:20:ea:b7:9e:6d:f6:74:27:c7:
3f:dc:24:a9:b3:45:0a:63:1d:30:94:4b:a7:ce:e7:
35:c9:3f:cb:fe:3d:a5:67:30:7c:68:d3:dc:d7:75:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C1:E0:E7:10:F1:AA:78:02:0F:AE:2A:E3:16:66:30:35:02:AF:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd394ec8-8f5e-3714-b337-3f5489eee42d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:13:68:f1:6e:3b:63:2e:89:e6:1d:f5:fd:60:20:5d:1b:d0:
12:2a:6c:c4:f3:c2:4c:8e:3a:4c:e3:8b:ca:37:5f:d8:7f:6b:
48:7f:73:64:57:26:f7:91:3c:d4:a1:4a:b9:95:c4:a3:72:3f:
9a:10:14:0d:8d:6c:8a:1a:a2:e2:82:4a:46:b2:e4:49:76:5b:
fd:f0:17:51:73:02:0f:17:1a:38:29:3b:a8:3a:57:f5:22:c5:
d4:90:7e:78:56:2d:82:d4:4d:f9:71:06:d2:cc:6a:4a:36:ce:
06:7c:a6:e7:c0:2a:b2:af:85:e3:3d:51:12:43:43:ff:1d:b4:
15:35:a0:b4:f0:c9:ca:a0:c2:f0:51:3d:e5:9b:33:14:3c:77:
29:71:9d:21:be:fe:94:84:7a:31:a9:97:38:ad:d8:52:e4:ca:
6c:85:64:f8:9e:d5:fa:47:8e:66:8e:73:d2:eb:e1:6f:8b:0b:
95:48:9f:24:2c:7a:01:9e:4f:02:e1:2e:2a:ae:d1:62:b9:29:
fd:bf:09:8b:c7:9f:6f:7a:75:1b:10:1a:5d:3e:f4:f6:ba:87:
1a:c3:82:c8:1f:5b:ee:bb:35:f6:30:cb:d8:f1:45:53:81:fe:
8d:43:15:13:f5:04:a5:bd:96:16:52:9b:ba:b7:8c:f9:b9:a9:
56:c6:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:05:40 2025 by rpki-client