This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cde981e5-2298-3e4b-8c84-fa4aa8435a2f.roa
File: cde981e5-2298-3e4b-8c84-fa4aa8435a2f.roa (raw, json)
Hash identifier: 9MEtDg9E/2L7TdAvOSS4oMuS++SSXXVwk/Cgbs/jVaw=
Subject key identifier: FE:C8:8D:52:C7:A9:77:89:EB:59:E4:6A:F6:B2:77:8D:0C:2D:B8:C0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C24265D5F34019618CC00BC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cde981e5-2298-3e4b-8c84-fa4aa8435a2f.roa
Signing time: Wed 10 Dec 2025 14:00:38 +0000
ROA not before: Wed 10 Dec 2025 14:00:38 +0000
ROA not after: Tue 10 Mar 2026 13:00:38 +0000
asID: 16625
IP address blocks: 23.198.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:24:26:5d:5f:34:01:96:18:cc:00:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 10 14:00:38 2025 GMT
Not After : Mar 10 13:00:38 2026 GMT
Subject: CN=aa44c3c9-87ed-41bf-a3dd-3c80bd2ac73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:54:c8:44:8f:8b:fd:7b:5f:f9:8f:8f:bd:a4:
2a:cf:7f:d9:21:43:74:83:43:8d:ce:51:69:b7:c4:
c4:04:27:ac:6a:2e:df:5e:88:f7:ae:4e:67:b0:4a:
b7:92:ac:5b:d9:16:c8:1f:68:93:6b:31:09:c4:8c:
3a:dd:52:3d:c6:3e:76:42:f6:43:12:c7:c9:77:85:
76:5b:a3:e1:99:3b:e3:46:c9:ae:1b:5a:80:f5:41:
2b:a9:4d:88:7b:76:f0:c3:cf:c0:61:48:00:95:1f:
95:3b:4b:0e:ee:c1:4e:89:71:2c:bc:f7:30:b6:3a:
d5:61:e2:1c:71:f4:e3:92:14:54:91:67:cd:28:23:
05:eb:0c:9e:4c:8c:e2:12:e3:39:dd:99:4b:33:14:
c8:60:18:31:56:3f:3d:3d:05:d9:2d:a5:f8:65:96:
41:27:6d:05:3a:17:cb:b8:5f:ec:ef:de:ed:da:1f:
6b:d0:53:f8:5e:da:a8:07:b0:1c:7c:36:22:7c:4a:
00:c1:79:df:cc:c7:b3:2a:0e:76:1a:19:d4:15:d7:
41:56:b5:01:5e:67:0a:91:71:f5:19:4b:3b:01:e2:
6c:dd:1b:e7:c9:4d:48:3f:4c:78:c4:99:02:2d:c1:
a1:de:a7:aa:6d:08:70:5c:7f:9f:46:c8:9f:e7:1a:
81:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C8:8D:52:C7:A9:77:89:EB:59:E4:6A:F6:B2:77:8D:0C:2D:B8:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cde981e5-2298-3e4b-8c84-fa4aa8435a2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.198.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:d1:9b:92:f2:9b:bd:ce:94:39:79:f5:cd:c2:4a:d6:72:d5:
59:ea:78:d9:68:ac:0b:8a:96:f0:dc:9e:4f:28:d1:6a:19:8e:
04:b7:4f:2e:a5:7d:fd:c0:c0:5e:c8:04:0e:8f:57:5b:78:eb:
9f:13:e2:ef:23:7f:15:33:18:60:6f:41:7f:75:82:fe:f0:2e:
4b:cd:77:ab:57:0c:6f:9f:94:80:b2:af:71:58:2f:94:4b:6b:
fa:8a:09:1a:93:00:a8:44:ff:ae:fa:59:cd:83:37:9a:05:42:
a9:42:5e:47:ac:40:a9:0a:52:fc:ed:af:f6:9e:b0:79:05:30:
b4:5b:cc:ab:e7:f6:8a:e2:73:18:09:8a:ca:63:3d:33:ef:03:
c1:bb:5a:5d:a5:9a:59:d5:52:d9:1d:e9:da:cf:a4:29:80:63:
e9:33:cc:8c:7f:00:eb:72:ae:72:ad:b0:f4:26:52:47:12:cc:
4b:dc:09:12:8e:eb:4f:dd:4e:83:3d:b3:72:88:fc:fe:5c:2e:
4a:9c:cc:83:f7:e6:d5:a7:fc:02:80:19:e7:04:98:bf:65:93:
d3:09:38:57:0d:7a:8c:ca:0d:a8:b1:01:9e:af:9f:c9:6f:13:
26:9b:ee:e2:34:c1:3d:60:30:33:41:cc:7c:5e:52:92:d9:8d:
79:c5:3a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:56:14 2025 by rpki-client