This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf7c251a-b70e-3484-919c-12d857311979.roa
File: cf7c251a-b70e-3484-919c-12d857311979.roa (raw, json)
Hash identifier: W+AyUr0LvUgwE+QGVgFsiisuS3Sg49cXv1sSAPxmYUM=
Subject key identifier: EF:B7:47:0F:08:4D:DE:E6:FF:39:EB:0B:E6:B5:C5:17:72:6A:EE:20
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C29BBED125FC0EF1DD3393040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf7c251a-b70e-3484-919c-12d857311979.roa
Signing time: Fri 12 Dec 2025 14:00:38 +0000
ROA not before: Fri 12 Dec 2025 14:00:38 +0000
ROA not after: Thu 12 Mar 2026 13:00:38 +0000
asID: 16625
IP address blocks: 23.203.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 19 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:29:bb:ed:12:5f:c0:ef:1d:d3:39:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 12 14:00:38 2025 GMT
Not After : Mar 12 13:00:38 2026 GMT
Subject: CN=6023282b-c7c4-4a37-b5aa-9c1ccf555a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0d:cc:c9:fd:b6:45:7b:20:84:54:9b:f3:c8:
f7:d1:f6:40:84:9c:4d:bc:b3:82:6e:e8:82:26:fd:
2b:b0:99:55:37:7c:1c:58:84:79:19:e2:20:86:80:
20:50:9d:c3:0f:33:fa:7f:cb:07:67:13:d3:6c:5a:
83:0d:5f:22:67:77:68:56:0d:40:71:6b:ee:02:22:
8f:db:43:55:17:a9:b7:4b:1d:a8:50:22:34:48:25:
f7:70:82:ce:59:8c:99:5a:d8:07:f7:d7:3e:c2:8b:
b8:71:d1:28:61:8a:13:73:d7:f3:ee:bb:bc:50:9b:
5d:db:2d:05:02:3b:f7:6d:18:12:44:df:d6:5f:72:
73:b8:57:a9:f2:37:92:f6:11:63:63:c7:87:c5:48:
ad:66:a7:82:39:55:47:3f:85:88:1e:25:7a:30:95:
ba:b6:e0:f0:b3:e4:f3:2f:ea:86:e3:ac:e9:3a:27:
fa:39:ff:e5:13:a3:fe:13:f1:5d:10:82:59:5d:90:
bc:d2:89:00:de:97:d3:01:8d:bb:6b:95:94:b9:ae:
39:f9:59:ca:f1:23:33:66:5c:97:56:ce:0d:af:20:
5b:f1:38:46:1d:d4:5f:21:3d:d7:99:e5:96:dd:b3:
ef:fb:44:5b:c0:c5:63:90:0d:a4:45:8c:75:38:5b:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B7:47:0F:08:4D:DE:E6:FF:39:EB:0B:E6:B5:C5:17:72:6A:EE:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf7c251a-b70e-3484-919c-12d857311979.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.203.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:c0:58:a6:5e:d4:99:80:9e:47:37:a8:bf:8f:89:1e:48:86:
24:fd:6a:dd:ef:2e:4e:8a:4e:4d:2a:14:e1:ea:27:e2:3c:e2:
64:61:6d:45:69:b3:10:f4:db:69:ad:cd:4c:78:23:ca:df:62:
99:77:97:e7:00:ef:e4:52:d8:85:3e:c6:95:1c:4e:8c:a7:e0:
87:9a:cb:ca:bf:1c:da:24:ef:9b:d8:5c:60:bc:c3:ce:58:9e:
e2:65:52:44:65:a4:41:ab:fb:e1:1c:0f:0b:75:8f:6c:02:c3:
b3:f6:a0:91:46:b4:41:fd:e7:5e:75:ab:44:0d:04:52:95:7e:
d6:4d:86:5c:97:04:29:10:ed:55:a0:55:e2:76:1d:cf:9f:d4:
9b:5d:55:f1:27:f7:39:0f:71:20:c2:a2:d0:27:92:1a:2f:da:
13:6f:be:01:a8:6e:e6:3a:a8:f4:10:e9:9c:7a:9b:07:24:4c:
ad:f1:e9:9c:49:f8:93:0d:0b:8d:2e:13:90:00:82:92:ff:6c:
69:1a:ff:e6:24:46:ee:ed:41:ee:1a:41:78:7f:7e:63:87:52:
4f:61:b9:8d:4f:3e:5f:1e:1e:38:20:df:d7:c3:1e:7b:09:b7:
8d:a8:cd:a7:fd:a8:ba:dd:5e:0c:1a:0f:e6:46:06:9f:2c:98:
3b:a3:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:06:18 2025 by rpki-client