This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a34a63b0-19a6-3772-9128-1b02f16769ba.roa
File: a34a63b0-19a6-3772-9128-1b02f16769ba.roa (raw, json)
Hash identifier: KpEhydddhgpZLDwIBR+vArGYY/XygPSLVwlDdR3MBUs=
Subject key identifier: D9:F9:60:94:74:1B:6F:EA:F0:05:AF:80:8B:94:77:6B:29:3C:AD:77
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C3BE1190A71CD12B299991480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a34a63b0-19a6-3772-9128-1b02f16769ba.roa
Signing time: Fri 19 Dec 2025 02:00:31 +0000
ROA not before: Fri 19 Dec 2025 02:00:31 +0000
ROA not after: Thu 19 Mar 2026 01:00:31 +0000
asID: 16625
IP address blocks: 23.212.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3b:e1:19:0a:71:cd:12:b2:99:99:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 02:00:31 2025 GMT
Not After : Mar 19 01:00:31 2026 GMT
Subject: CN=1538a5e1-bce7-46b4-a69f-558f4becce76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:03:54:71:76:c0:aa:03:ca:66:75:41:5d:de:
dd:5f:00:0f:85:06:51:22:ad:75:d7:1f:91:70:6a:
5d:9e:d6:94:27:76:33:a1:fa:8d:ec:b5:3f:68:f5:
da:eb:62:be:1b:0d:41:95:76:0c:e1:f4:4b:d2:ec:
d2:eb:cd:6e:3a:3b:bf:2e:05:b3:2b:2b:fa:5e:af:
b7:ac:6a:41:17:b4:13:78:90:3d:13:74:dc:f8:e4:
44:42:86:da:5d:a2:6e:fd:66:76:50:c5:db:bb:ed:
c2:44:2b:a1:8c:da:3b:a7:bf:b6:c4:12:e5:cc:a8:
69:24:8e:32:a0:e9:5e:7d:6f:6a:0c:08:c4:69:58:
81:27:66:34:2a:01:47:3d:bf:ad:c8:1d:18:1a:ab:
ab:c3:74:de:03:4d:18:50:cc:c2:6a:ee:ac:30:c9:
c1:ea:ac:0b:67:91:66:d7:fc:76:f3:5e:52:42:6e:
3e:31:1e:9d:22:c6:12:e9:5b:83:00:89:a3:ce:ec:
ec:84:b4:e6:a9:f8:42:ea:21:ff:d6:c0:0a:b9:76:
2c:1b:a1:57:f3:de:49:08:05:32:8f:a2:df:c7:53:
dc:f2:41:2f:72:15:e8:05:84:10:58:18:b1:6a:13:
29:6f:dc:49:a2:93:8b:e3:06:7b:7b:5a:ff:f1:5e:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F9:60:94:74:1B:6F:EA:F0:05:AF:80:8B:94:77:6B:29:3C:AD:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a34a63b0-19a6-3772-9128-1b02f16769ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.212.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:75:3b:5a:01:03:7f:b6:9b:79:9f:72:c4:0e:a3:c6:d5:4b:
41:79:50:fb:d8:b4:61:ee:c2:4d:2b:d7:56:4d:d5:36:6f:7c:
ee:b4:63:cc:4b:61:94:f2:2d:c5:f9:21:c9:63:c9:8e:3a:16:
c6:2c:6f:c1:6e:b3:da:40:fe:c9:db:b5:49:ef:38:fc:1b:64:
43:23:81:a5:7f:84:65:e1:f7:3b:72:8f:8b:17:d6:b7:f8:95:
88:f9:2c:12:ef:16:62:ad:9f:56:3e:c0:2f:19:27:2a:98:bd:
7b:e2:23:35:fb:48:3e:af:13:2d:90:1f:18:0f:97:6a:8b:8c:
7a:92:f5:8e:17:2d:1f:22:f4:ed:60:d8:d2:07:08:7c:b5:9f:
6e:ac:14:e4:b0:db:02:11:f6:a4:05:8c:c0:fb:d4:66:59:1a:
fa:3e:ad:a8:b4:11:8d:c3:80:f2:03:c0:85:aa:16:e3:af:73:
ff:e4:16:b3:cb:41:74:dd:dc:26:26:9e:16:a0:42:3b:78:39:
3d:25:df:57:7c:5d:6c:d5:ca:cc:64:63:62:04:74:07:b0:65:
de:35:9a:04:17:c6:e8:b5:12:1a:12:57:b6:99:f4:9a:16:18:
b4:4f:97:4a:57:3a:b5:99:60:68:de:65:5d:18:71:1a:4f:23:
bb:44:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:45:45 2025 by rpki-client