This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cbe2013-e94f-3c30-a8d7-528468e4abc7.roa
File: 4cbe2013-e94f-3c30-a8d7-528468e4abc7.roa (raw, json)
Hash identifier: P2PT+D4QsqjoTDEAgN2izGIXe6TWGU+fCKNr+kohIf0=
Subject key identifier: D1:DC:30:7E:21:D6:38:C9:5A:4F:FE:E7:2A:FC:E6:A7:5F:1E:46:3B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C3BE112ABD08F5FB7E5CCDC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cbe2013-e94f-3c30-a8d7-528468e4abc7.roa
Signing time: Fri 19 Dec 2025 02:00:31 +0000
ROA not before: Fri 19 Dec 2025 02:00:31 +0000
ROA not after: Thu 19 Mar 2026 01:00:31 +0000
asID: 16625
IP address blocks: 23.209.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3b:e1:12:ab:d0:8f:5f:b7:e5:cc:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 02:00:31 2025 GMT
Not After : Mar 19 01:00:31 2026 GMT
Subject: CN=a0b605a1-9ee5-4829-a291-5f9b4a99282e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3f:75:48:70:45:11:4a:6e:59:06:37:81:fe:
fe:90:6d:d1:d3:31:3d:77:79:53:d8:e1:ae:ed:76:
ee:cb:cb:a1:a7:30:a4:28:41:2c:fb:98:da:9d:a9:
ef:df:56:29:09:68:fe:14:81:bb:b3:20:29:fc:55:
96:60:5f:be:83:7d:2f:b2:4c:85:32:ea:0a:22:1b:
04:ee:a1:d0:48:b1:bb:2a:c1:e7:dd:14:bd:62:b7:
1c:d8:02:f6:5e:e1:b5:4a:7f:a2:42:c4:77:9e:26:
ca:98:dc:cd:c5:8f:f5:f9:d1:58:7c:b2:ba:c4:cb:
ba:fc:12:35:7b:7f:9f:4f:b5:2e:1e:80:40:be:d0:
ce:c4:0b:56:aa:68:27:77:48:85:c4:14:56:be:b9:
91:f7:c4:77:d0:c2:c1:c0:cf:2c:6a:b5:a6:f5:93:
85:d3:8d:bf:36:05:32:6b:e5:bf:4e:66:9e:60:7a:
47:4a:92:67:67:af:5c:b2:58:d6:78:e8:b9:63:3a:
42:52:28:1f:18:81:2b:cd:b2:a5:63:fb:f6:52:64:
3e:88:87:d6:c8:3c:5d:ff:c7:dd:9c:4d:5d:c7:8b:
70:29:bc:1c:32:25:ff:35:4f:15:16:ec:99:70:e0:
a1:e4:93:a9:37:1c:2a:27:0f:4d:6d:d2:48:57:8e:
1a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DC:30:7E:21:D6:38:C9:5A:4F:FE:E7:2A:FC:E6:A7:5F:1E:46:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cbe2013-e94f-3c30-a8d7-528468e4abc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.209.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:2a:2c:1e:5b:b4:90:70:6f:76:9c:55:8e:b2:97:5b:95:b5:
d4:d8:c2:c2:73:14:0f:7d:45:97:c7:32:ca:8b:58:16:81:de:
9f:33:4e:c1:37:ff:d0:b2:57:31:51:79:d9:59:20:4e:f1:71:
74:52:74:0d:c2:68:aa:70:77:6a:c0:ba:fd:69:20:b7:bf:f3:
8e:7d:ed:aa:88:be:53:c0:12:49:79:60:ee:b5:8f:60:d4:d3:
cc:4a:0c:8f:d1:0f:de:4a:13:bf:ad:cf:40:f0:37:8e:6c:83:
6e:a3:a5:b9:c4:a7:ff:2e:56:e4:b2:1d:c8:8b:2e:b9:fb:63:
39:72:8f:cb:42:d2:3b:68:0d:0c:5b:04:6a:a9:71:d4:e1:6f:
33:ab:9f:48:71:b8:36:0f:99:e8:f8:87:e9:29:cc:a6:c2:7d:
b5:2f:a2:8e:5d:e8:d9:69:27:f3:8d:57:35:e4:ff:22:a2:87:
8a:a0:cb:57:34:6c:a1:43:d6:8c:3d:5d:49:29:b9:18:5c:e6:
b6:fa:dc:0c:2e:09:3e:f5:81:df:ef:f5:97:17:86:d4:45:59:
e5:b0:7f:2f:93:68:f4:a0:66:17:29:3a:6f:4d:2c:3a:a1:4c:
68:e2:be:86:d4:f9:41:18:f0:4a:b8:06:9f:96:01:e8:f0:96:
9c:ee:50:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:23:35 2025 by rpki-client