This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/708b07c0-a1c2-3122-9434-627d6439404f.roa
File: 708b07c0-a1c2-3122-9434-627d6439404f.roa (raw, json)
Hash identifier: l60cYTnl4exdHgC2OCDbg525ufez2SrWZ/+E+M4e4q0=
Subject key identifier: 31:EC:93:63:68:49:56:4F:21:E0:B1:DE:A6:6D:60:E1:63:71:8D:93
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C3EABC45E7D84D65119F0F200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/708b07c0-a1c2-3122-9434-627d6439404f.roa
Signing time: Sat 20 Dec 2025 02:00:31 +0000
ROA not before: Sat 20 Dec 2025 02:00:31 +0000
ROA not after: Fri 20 Mar 2026 01:00:31 +0000
asID: 16625
IP address blocks: 23.217.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3e:ab:c4:5e:7d:84:d6:51:19:f0:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 02:00:31 2025 GMT
Not After : Mar 20 01:00:31 2026 GMT
Subject: CN=d048a628-01d1-48fa-82b3-bc1ef77d10e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:fe:2e:3d:21:d1:a3:a7:28:6c:49:95:cf:
24:67:18:a5:88:c5:72:7e:ee:f8:5e:53:ea:e8:89:
64:e0:2e:f3:11:c7:4f:69:c2:c9:07:9a:75:bd:33:
87:86:a1:f4:4c:d6:68:d8:ad:34:b0:28:fb:d8:92:
10:38:9b:0a:50:21:a0:f2:6e:c2:65:e7:a5:bf:a2:
77:db:db:6b:c5:e1:2e:9a:f2:0e:ed:70:3b:7d:b7:
64:a8:6f:74:d9:a0:d8:67:07:f5:6c:2a:55:bc:a8:
d0:21:5e:cc:20:85:19:a0:c8:a6:f3:7d:fe:04:f4:
db:d6:3e:e3:80:9e:0e:35:6e:8c:4f:6f:6b:a2:9a:
ce:78:e1:2d:90:07:3c:98:56:20:5b:cc:23:76:97:
e9:10:93:8b:7b:03:6b:0d:56:45:ad:de:b4:eb:b8:
09:f7:61:b4:1d:b9:95:45:a4:92:96:22:d1:9a:30:
6b:07:f4:3b:1c:b9:ee:f3:e0:d2:f1:26:b9:11:d5:
64:b2:67:e5:4d:b3:c2:10:75:65:02:ef:2a:72:7b:
31:cd:60:b1:34:97:11:1c:c7:9c:c0:59:1d:40:54:
22:b7:a7:e6:28:70:76:48:1d:da:db:a8:15:7a:7c:
f7:ca:1a:7e:f1:77:a5:81:5d:f1:8c:32:88:58:e8:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EC:93:63:68:49:56:4F:21:E0:B1:DE:A6:6D:60:E1:63:71:8D:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/708b07c0-a1c2-3122-9434-627d6439404f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:41:38:bf:b2:4a:61:c9:c4:1b:fb:fc:b2:86:c3:1e:3a:a1:
19:b8:c0:be:50:dc:0c:74:f9:d2:32:01:75:9a:12:fb:62:7c:
ed:06:14:75:e5:7f:a9:d5:06:c5:7d:d1:56:1f:0b:14:01:c0:
0f:d9:f3:b6:be:34:4b:c0:92:47:50:79:93:78:e2:f8:2c:36:
d9:38:48:73:be:97:cc:29:87:d3:0a:f8:70:20:d2:ad:fa:2c:
00:40:c7:65:ac:18:f3:4b:b3:c0:50:43:5d:67:96:1e:fb:fe:
5c:7a:57:7a:3c:d3:51:2c:1f:7f:13:a1:1d:8c:51:55:cb:cf:
e2:d4:2c:68:17:d4:06:4d:94:8a:40:5e:c8:32:c3:25:8c:77:
be:82:2d:7c:92:de:96:91:79:8b:39:1c:08:0b:80:0c:82:73:
01:e1:cf:2b:54:88:0c:e7:cb:e2:fa:ef:b7:15:3a:8c:18:af:
d5:63:66:fd:97:24:8a:9b:8a:87:47:a6:cc:62:65:46:87:2b:
df:e1:31:f5:8c:88:12:90:72:92:35:bc:03:e8:95:65:49:26:
af:93:29:b3:3c:55:bf:06:24:b0:f5:52:b0:3c:f6:40:ed:55:
6d:fc:5f:54:c7:f9:83:b0:8b:89:a4:9d:bb:91:88:b3:ff:be:
b5:98:b6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:14:49 2025 by rpki-client