This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa
File: cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa (raw, json)
Hash identifier: DU9iZ57rUSYh67OPG4aVIs4Ztvv/8J+hR4axbbNy1is=
Subject key identifier: F6:CD:8F:F5:7E:41:3C:C2:51:0D:D0:54:17:7D:35:7C:C4:E0:8D:45
Certificate issuer: /CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62
Certificate serial: 010D0C9F4328584C3BE10DC791D45413846C78C0
Authority key identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa
Signing time: Fri 19 Dec 2025 02:00:31 +0000
ROA not before: Fri 19 Dec 2025 02:00:31 +0000
ROA not after: Thu 19 Mar 2026 01:00:31 +0000
asID: 12131
IP address blocks: 23.161.34.0/24 maxlen: 24
23.187.0.0/24 maxlen: 24
23.187.1.0/24 maxlen: 24
2620:1df::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3b:e1:0d:c7:91:d4:54:13:84:6c:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62
Validity
Not Before: Dec 19 02:00:31 2025 GMT
Not After : Mar 19 01:00:31 2026 GMT
Subject: CN=45b9dc52-0e76-461b-906c-e4cdc19dd798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:34:22:4f:8f:64:f9:c9:47:fc:cf:5b:59:
92:29:19:aa:f6:96:ff:4b:f2:4c:c0:cf:e3:19:13:
06:f2:15:1a:35:dd:d7:41:1c:2d:b0:3f:62:fc:72:
dd:8e:c5:3d:11:67:07:e0:30:ca:1d:1c:bf:0f:0c:
b8:ab:db:2b:43:ee:28:1e:93:85:a9:6a:4a:0d:fa:
61:e7:92:e8:0b:e5:8e:f9:38:17:52:c3:6f:35:3c:
6d:7d:1f:0a:3b:7c:d1:e7:05:b7:22:78:6f:c3:9e:
5b:08:fb:32:28:11:08:88:ac:94:c0:1f:1b:71:8b:
ae:65:15:39:28:1b:32:93:c1:27:60:7e:16:81:c8:
a1:cd:f3:85:36:9a:25:86:99:4b:c4:cf:6d:b2:a2:
17:ee:13:f3:a6:4e:7c:12:30:3c:cb:cb:d8:22:5c:
23:f5:8a:ec:1b:fa:7c:2e:ce:67:08:e8:aa:f4:44:
7d:f0:7b:aa:bf:c9:81:d4:b2:99:14:d5:9a:2e:e6:
ea:b7:00:77:d7:0a:6b:a2:e7:a7:7f:09:ce:98:a6:
91:71:bd:99:40:46:b3:a2:95:18:f8:83:a9:90:e9:
02:c1:ec:d5:f4:7b:4b:2b:18:59:1f:7a:b0:e3:ae:
d7:60:9e:46:a4:cb:46:4f:ac:20:76:05:93:90:45:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CD:8F:F5:7E:41:3C:C2:51:0D:D0:54:17:7D:35:7C:C4:E0:8D:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl
X509v3 Authority Key Identifier:
keyid:46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.34.0/24
23.187.0.0/23
IPv6:
2620:1df::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:03:e4:82:1b:41:31:ce:1a:c3:05:3e:f4:07:df:6b:4b:2c:
0b:08:49:95:f1:87:4c:f9:98:3d:7e:c5:e9:4f:82:f5:77:02:
37:b8:db:1b:b6:14:df:03:d9:b3:a3:dc:de:9b:35:75:a2:4d:
a7:e3:27:15:ae:a0:ac:8b:72:18:4e:b7:5d:f5:af:74:08:1e:
a4:af:af:dc:6d:bf:66:e6:cf:1d:26:8a:bf:e9:0e:de:85:30:
53:5d:dc:c7:75:e6:ce:b7:3a:18:05:d2:4b:9b:eb:ee:7f:c5:
12:17:a7:1e:02:31:ec:3b:27:38:a0:f3:6f:4c:78:53:a8:9d:
5f:a0:99:db:60:f1:8b:9e:17:d9:58:c0:68:f5:fd:a6:50:ba:
d8:92:8c:1b:f8:eb:bf:39:68:24:f2:ad:07:d7:bf:a8:02:cf:
0c:92:b7:59:c1:73:de:ce:8c:a6:d3:c9:a9:05:d9:2a:92:36:
92:72:42:98:aa:b6:e4:93:46:26:a3:72:3d:51:a0:5e:a3:5d:
bb:45:62:62:9c:1d:76:e0:e1:44:50:12:f5:d6:ac:3c:18:35:
81:eb:3c:3b:a9:47:8c:0b:b0:a1:c9:ba:1a:17:c0:c8:1e:7a:
d3:40:9b:bf:62:53:a8:f1:67:f8:6b:22:e6:e0:6f:46:28:55:
c9:d3:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:55:07 2025 by rpki-client