This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18e78c81-5633-389a-bb9e-891c33778a16.roa
File: 18e78c81-5633-389a-bb9e-891c33778a16.roa (raw, json)
Hash identifier: vlF5+5zZfHayjjnwMj13gpY5jLBg7PbCZxIAhsObd5c=
Subject key identifier: 43:F1:3D:B0:96:72:41:0A:8F:1A:44:74:64:36:E5:A2:E2:30:F9:36
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C3EABC6CC4DF62A256471E600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18e78c81-5633-389a-bb9e-891c33778a16.roa
Signing time: Sat 20 Dec 2025 02:00:31 +0000
ROA not before: Sat 20 Dec 2025 02:00:31 +0000
ROA not after: Fri 20 Mar 2026 01:00:31 +0000
asID: 20940
IP address blocks: 23.215.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3e:ab:c6:cc:4d:f6:2a:25:64:71:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 02:00:31 2025 GMT
Not After : Mar 20 01:00:31 2026 GMT
Subject: CN=1d3574cf-5648-4ab2-a10e-03e0dd857e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:25:17:3a:c8:7d:22:8f:04:a4:23:60:28:
c6:e1:93:2f:49:32:bc:ae:82:23:45:f1:26:c9:fa:
0b:75:44:0d:4e:b5:bc:9b:b9:73:6f:78:22:a2:7e:
49:7c:07:df:f9:e0:18:cf:ab:ee:cc:d1:13:2a:df:
16:7b:8a:3c:cf:a0:ca:7c:f5:9a:91:68:1f:e3:44:
7e:b0:cc:f5:8e:4f:0a:29:95:21:fe:9d:50:f3:bb:
0b:b6:b9:a9:a1:fa:1a:02:91:bb:3d:79:fa:75:fd:
5f:b2:98:7d:6e:73:49:8d:f5:d6:1b:45:50:30:68:
3c:fb:a4:35:10:25:9b:a4:eb:dd:85:ec:1e:14:e5:
34:a7:49:52:3b:c7:78:d9:59:52:63:70:e5:77:10:
1a:b6:aa:d8:67:b3:1d:26:5a:a3:35:ac:ee:b9:0c:
f1:c4:98:81:db:7a:13:b5:2a:1d:10:07:2c:06:0c:
a3:0c:7a:11:e8:7f:b0:6a:9a:27:ac:dd:1c:f5:0a:
cf:6d:d6:c7:7f:d8:71:00:2a:d2:f2:3d:76:26:87:
fb:c0:9c:91:3e:58:56:9d:73:cb:2e:a7:0e:d6:49:
54:0f:c4:01:5a:36:4f:7a:69:9c:5c:f5:8f:8e:e3:
1d:90:ba:d7:25:93:58:86:5f:89:71:ee:54:9d:a8:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F1:3D:B0:96:72:41:0A:8F:1A:44:74:64:36:E5:A2:E2:30:F9:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18e78c81-5633-389a-bb9e-891c33778a16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.215.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:d8:e7:0e:60:16:79:f3:b8:99:91:a9:96:2d:fd:98:48:86:
19:9b:1b:2e:c1:b1:3c:b3:37:bd:a2:fc:3b:e3:f1:83:84:14:
6d:e0:e4:47:54:1c:c7:fb:39:5b:ce:bc:99:3e:c3:83:bf:df:
07:d7:2e:28:e6:67:36:44:a6:43:98:4c:44:1c:21:a8:6f:a2:
78:5b:2e:0b:c7:3e:f3:d9:39:94:e4:da:c8:b9:89:33:69:6b:
af:38:02:97:cf:de:b0:5c:44:d0:d5:e8:32:5c:a4:f5:c8:fd:
26:52:cc:93:e8:58:81:52:3a:6f:0f:21:35:f2:f9:d0:6a:08:
b5:e3:b3:9b:f2:e8:ea:e4:8d:dc:00:2a:b9:fa:bf:a2:e7:a4:
cd:1f:ac:da:a7:84:24:20:2c:07:8c:3c:85:31:9a:83:36:d6:
d0:de:52:a7:14:8f:56:57:3b:d0:97:c9:df:2c:89:05:5c:5a:
8e:a6:fb:64:fb:83:4a:5a:41:44:d1:f3:1b:8e:ec:60:24:78:
f8:cc:a8:91:4b:52:72:ff:2f:89:b2:90:6f:1e:9b:b2:97:5f:
b0:14:9d:bc:f3:be:0f:a9:ec:a9:98:2c:b0:e4:2b:f2:6f:25:
39:52:55:d1:31:d2:02:4a:71:27:d6:57:9a:e1:72:cb:6f:47:
f5:7e:36:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:25:12 2025 by rpki-client