This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa
File: 2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa (raw, json)
Hash identifier: 4Oc/iHCYf310d/ZkHBth+Yl8pnBKuzN0HfYHiMh13R8=
Subject key identifier: 3E:C3:7C:AC:A1:D1:A7:4F:6B:F9:7D:06:0E:92:CD:2B:B1:D4:A1:7C
Certificate issuer: /CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697
Certificate serial: 010D0C9F4328584C28563967B07094B713C28740
Authority key identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa
Signing time: Fri 12 Dec 2025 02:00:30 +0000
ROA not before: Fri 12 Dec 2025 02:00:30 +0000
ROA not after: Thu 12 Mar 2026 01:00:30 +0000
asID: 401468
IP address blocks: 23.128.124.0/24 maxlen: 24
192.43.161.0/24 maxlen: 24
2602:f9a0::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:28:56:39:67:b0:70:94:b7:13:c2:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697
Validity
Not Before: Dec 12 02:00:30 2025 GMT
Not After : Mar 12 01:00:30 2026 GMT
Subject: CN=92ea484c-f8ec-44ff-ac88-7fe7d118a875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:5e:f0:be:bd:ef:03:56:48:92:59:71:b9:
e9:dd:74:0b:83:68:92:46:dd:75:46:03:d3:9b:4c:
74:b2:58:d1:57:03:0e:cd:71:fe:9f:04:12:be:b9:
82:93:32:19:af:dc:a7:9f:7b:ce:73:0b:08:db:86:
8a:53:da:21:45:5e:38:52:84:23:5e:fb:24:e1:ae:
8a:c9:0e:fc:fd:66:6c:7a:3f:5f:d7:70:25:1e:90:
e1:5e:40:f6:26:57:d3:b4:b8:0f:97:f7:2d:50:33:
c2:98:7b:3d:1d:01:bd:7d:d9:24:4c:4a:b8:93:cc:
1b:b3:d1:23:66:a5:a2:d8:6f:59:94:14:17:0c:ee:
a6:df:fe:4a:1e:b4:ba:67:61:78:cf:ea:8b:7b:e1:
90:4d:b6:11:95:38:6f:43:19:65:01:e4:eb:7f:99:
56:51:9e:d0:eb:f6:3d:8e:9d:c8:35:47:37:bf:da:
76:e8:37:06:9b:71:7f:ce:e2:19:2e:50:c2:f4:30:
9b:fe:34:36:4c:a3:15:63:e8:ac:74:8a:7f:40:29:
54:7f:c7:e5:20:a8:16:21:dd:f3:56:75:0f:0f:ca:
c7:b5:d3:61:94:38:d0:0e:59:f6:a9:07:1a:54:9d:
2b:33:63:71:4a:03:0e:9b:19:c1:e4:1a:ea:0f:c9:
53:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C3:7C:AC:A1:D1:A7:4F:6B:F9:7D:06:0E:92:CD:2B:B1:D4:A1:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl
X509v3 Authority Key Identifier:
keyid:89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.124.0/24
192.43.161.0/24
IPv6:
2602:f9a0::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:08:24:7b:db:bd:c6:af:53:12:a9:2b:8b:0c:1c:1b:6f:ab:
1a:26:b5:6e:f7:33:25:28:cf:50:f0:71:f3:28:2c:9f:4e:34:
50:d4:31:0f:47:e2:84:19:5b:e5:db:8c:e6:ed:d7:17:3c:05:
c4:be:de:62:dd:27:66:5e:9a:84:9b:fe:e1:84:82:ff:c6:84:
0e:1f:26:60:c2:ee:b5:e6:01:db:83:ba:cf:59:66:4e:23:1c:
50:13:44:11:7c:5b:f5:00:06:3f:f8:88:a3:fb:81:e1:e8:23:
e8:a8:50:5b:f0:9e:54:ea:7d:5a:c2:18:ea:89:63:06:d9:61:
7f:ec:a3:d3:24:04:f4:f9:51:53:e3:84:51:f3:90:9c:73:23:
97:2e:c2:33:05:c1:5e:5a:7f:f8:54:0b:bd:ec:29:73:83:f4:
37:6e:3f:4c:30:88:6e:35:04:f1:1e:4f:af:6a:5c:5c:b0:8c:
6b:ff:75:24:73:64:05:8b:3b:d1:66:57:68:eb:34:86:db:de:
7a:7d:f2:36:8d:e9:91:20:cb:09:90:c4:32:93:85:89:59:81:
01:0b:f1:97:6d:2d:e7:f8:99:1b:02:1c:15:42:5e:04:24:21:
12:7e:3b:df:97:3b:4b:3f:d9:d7:de:a0:8d:7e:90:cd:67:3e:
35:ca:6f:9f
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEwoVjlnsHCUtxPCh0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMwMzUwNjMtYmMwYi00MWMwLTlmNTAtOWNmYTBmOWRi
Njk3MB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk
OTJlYTQ4NGMtZjhlYy00NGZmLWFjODgtN2ZlN2QxMThhODc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul1e8L697wNWSJJZcbnp3XQLg2iSRt11RgPT
m0x0sljRVwMOzXH+nwQSvrmCkzIZr9ynn3vOcwsI24aKU9ohRV44UoQjXvsk4a6K
yQ78/WZsej9f13AlHpDhXkD2JlfTtLgPl/ctUDPCmHs9HQG9fdkkTEq4k8wbs9Ej
ZqWi2G9ZlBQXDO6m3/5KHrS6Z2F4z+qLe+GQTbYRlThvQxllAeTrf5lWUZ7Q6/Y9
jp3INUc3v9p26DcGm3F/zuIZLlDC9DCb/jQ2TKMVY+isdIp/QClUf8flIKgWId3z
VnUPD8rHtdNhlDjQDln2qQcaVJ0rM2NxSgMOmxnB5BrqD8lTKwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFD7DfKyh0adPa/l9Bg6SzSux1KF8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAz
NTA2My1iYzBiLTQxYzAtOWY1MC05Y2ZhMGY5ZGI2OTcvMmY0ZWU4N2UtMGU4Mi0z
MWU5LTgzNjQtYzg4OTMwZTdkN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZmMwMzUwNjMtYmMwYi00MWMwLTlm
NTAtOWNmYTBmOWRiNjk3L2ZjMDM1MDYzLWJjMGItNDFjMC05ZjUwLTljZmEwZjlk
YjY5Ny5jcmwwHwYDVR0jBBgwFoAUiUAtol04ogGn/UcxVCqNgd9OaiowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAzNTA2My1iYzBiLTQxYzAtOWY1MC05Y2Zh
MGY5ZGI2OTcuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4B8AwQA
wCuhMA4EAgACMAgDBgAmAvmgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOCCR7273Gr1MSqSuLDBwbb6sa
JrVu9zMlKM9Q8HHzKCyfTjRQ1DEPR+KEGVvl24zm7dcXPAXEvt5i3SdmXpqEm/7h
hIL/xoQOHyZgwu615gHbg7rPWWZOIxxQE0QRfFv1AAY/+Iij+4Hh6CPoqFBb8J5U
6n1awhjqiWMG2WF/7KPTJAT0+VFT44RR85CccyOXLsIzBcFeWn/4VAu97Clzg/Q3
bj9MMIhuNQTxHk+valxcsIxr/3Ukc2QFizvRZldo6zSG2956ffI2jemRIMsJkMQy
k4WJWYEBC/GXbS3n+JkbAhwVQl4EJCESfjvflztLP9nX3qCNfpDNZz41ym+f
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:24:27 2025 by rpki-client