This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e401c48-1247-3258-b93e-f0dadab88317.roa
File: 0e401c48-1247-3258-b93e-f0dadab88317.roa (raw, json)
Hash identifier: r6m3vRKEs5SthSUD8bGGgMB/wlgg66Jrq7exTx01UCk=
Subject key identifier: E5:32:66:0B:73:9E:EB:6A:FF:AE:47:16:30:B4:66:11:25:2B:46:B3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C3BE125F881F040F1F50E5E70
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e401c48-1247-3258-b93e-f0dadab88317.roa
Signing time: Fri 19 Dec 2025 02:00:31 +0000
ROA not before: Fri 19 Dec 2025 02:00:31 +0000
ROA not after: Thu 19 Mar 2026 01:00:31 +0000
asID: 16625
IP address blocks: 23.213.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3b:e1:25:f8:81:f0:40:f1:f5:0e:5e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 02:00:31 2025 GMT
Not After : Mar 19 01:00:31 2026 GMT
Subject: CN=6407b1e1-1332-4963-bfb1-7428a2b6b908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:63:8b:2a:dc:84:0f:2e:88:43:8e:cd:bf:
55:2d:1e:d4:60:50:59:d9:19:3b:e6:32:4d:21:80:
ae:e8:c8:44:de:bd:29:f0:86:fa:cf:a1:03:55:c1:
31:1c:6f:6b:17:a2:56:b4:68:04:ca:b3:88:8c:ed:
9f:b3:cd:67:3d:eb:09:04:6c:a3:d6:9c:b2:ea:06:
12:e1:6a:f6:ea:2b:3b:56:17:ab:74:55:f9:d3:be:
12:f6:70:d6:c2:2a:c3:a8:08:c9:4f:52:2e:05:71:
d1:0b:49:96:6e:ca:39:12:10:2a:bf:1c:d6:6e:74:
78:a0:77:db:62:94:2a:d3:08:21:f7:ab:90:63:48:
89:91:80:4e:9a:6d:c4:5c:dd:6b:41:90:d6:65:2f:
73:c5:e7:4d:5f:73:33:82:cb:af:bb:07:03:ce:53:
3d:93:a6:1e:30:f7:08:61:39:9e:55:dd:00:13:61:
86:ee:c9:8e:c2:47:eb:73:d4:4f:6b:fa:ea:93:d2:
fb:b4:2d:5a:77:48:04:de:78:28:60:25:87:08:42:
88:92:72:1d:44:78:9a:f4:15:3b:16:86:db:af:c4:
34:73:e7:f3:34:61:7c:95:13:5b:4f:67:63:53:df:
8d:a8:d9:4b:a4:b0:65:8a:fc:8c:01:05:3f:17:71:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:32:66:0B:73:9E:EB:6A:FF:AE:47:16:30:B4:66:11:25:2B:46:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e401c48-1247-3258-b93e-f0dadab88317.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:3c:6d:01:23:08:88:3c:4b:17:88:aa:f4:9f:f6:17:93:e7:
cc:95:61:c3:5e:c3:68:39:ac:3f:1b:d4:0c:6f:49:a9:1a:75:
cb:12:0a:44:1a:4e:ec:7f:e1:b4:5d:55:39:e6:f6:6c:a2:cc:
03:ac:82:5e:16:1c:52:1c:c1:a1:84:66:ad:19:55:61:22:a2:
49:a4:4e:29:b4:97:14:55:ba:f9:cf:58:1b:5f:44:47:96:b3:
79:80:43:60:fa:b2:54:b1:ea:e4:cb:0f:92:95:a9:f0:ae:77:
14:f2:54:3c:58:6b:ab:db:07:fe:69:d6:53:4c:2e:38:38:92:
b2:ae:6d:01:bd:24:20:e8:77:e3:92:70:e6:a1:fb:72:7a:25:
48:c5:22:57:7b:36:f4:8c:d7:7d:45:e6:a3:f9:da:42:6e:05:
38:da:e4:41:bf:3b:ad:01:73:f7:31:b7:36:64:fb:77:a5:f9:
20:3a:7c:7f:e5:6f:42:6d:d0:e3:ce:8a:6f:28:0e:f8:16:cc:
d0:49:48:4e:be:77:07:0a:42:f1:48:19:f6:c0:dc:cc:1f:bd:
43:35:dc:46:2f:07:68:11:78:22:a1:7d:ad:2e:98:c5:fa:56:
86:a9:2f:06:7f:6b:ec:2f:a0:ba:45:2b:d9:a1:46:e5:44:7a:
97:aa:0c:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74SX4gfBA8fUOXnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk
NjQwN2IxZTEtMTMzMi00OTYzLWJmYjEtNzQyOGEyYjZiOTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE5jiyrchA8uiEOOzb9VLR7UYFBZ2Rk75jJN
IYCu6MhE3r0p8Ib6z6EDVcExHG9rF6JWtGgEyrOIjO2fs81nPesJBGyj1pyy6gYS
4Wr26is7VherdFX5074S9nDWwirDqAjJT1IuBXHRC0mWbso5EhAqvxzWbnR4oHfb
YpQq0wgh96uQY0iJkYBOmm3EXN1rQZDWZS9zxedNX3MzgsuvuwcDzlM9k6YeMPcI
YTmeVd0AE2GG7smOwkfrc9RPa/rqk9L7tC1ad0gE3ngoYCWHCEKIknIdRHia9BU7
Fobbr8Q0c+fzNGF8lRNbT2djU9+NqNlLpLBlivyMAQU/F3G7GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOUyZgtznutq/65HFjC0ZhElK0azMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGU0MDFjNDgtMTI0Ny0z
MjU4LWI5M2UtZjBkYWRhYjg4MzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9WIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFw8bQEjCIg8SxeIqvSf9heT58yVYcNew2g5rD8b1AxvSakadcsSCkQa
Tux/4bRdVTnm9myizAOsgl4WHFIcwaGEZq0ZVWEiokmkTim0lxRVuvnPWBtfREeW
s3mAQ2D6slSx6uTLD5KVqfCudxTyVDxYa6vbB/5p1lNMLjg4krKubQG9JCDod+OS
cOah+3J6JUjFIld7NvSM131F5qP52kJuBTja5EG/O60Bc/cxtzZk+3el+SA6fH/l
b0Jt0OPOim8oDvgWzNBJSE6+dwcKQvFIGfbA3MwfvUM13EYvB2gReCKhfa0umMX6
VoapLwZ/a+wvoLpFK9mhRuVEepeqDNg=
-----END CERTIFICATE-----
Generated at Thu Dec 25 11:17:36 2025 by rpki-client