This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3bcafcde-ddd3-3da2-9293-f4e5cb98bc78.roa
File: 3bcafcde-ddd3-3da2-9293-f4e5cb98bc78.roa (raw, json)
Hash identifier: sibxRBR2iI6DrYxz0S3jxZP+e3ceGvm4LGutQPxdpjU=
Subject key identifier: 46:60:C4:25:9B:AA:44:02:28:6A:EC:D7:A6:75:25:90:B5:39:06:6F
Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial: 010D0C9F4328584C3835BEBBB8A723648ED035C0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3bcafcde-ddd3-3da2-9293-f4e5cb98bc78.roa
Signing time: Wed 17 Dec 2025 18:28:12 +0000
ROA not before: Wed 17 Dec 2025 18:28:12 +0000
ROA not after: Tue 17 Mar 2026 17:28:12 +0000
asID: 14618
IP address blocks: 207.202.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:38:35:be:bb:b8:a7:23:64:8e:d0:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Validity
Not Before: Dec 17 18:28:12 2025 GMT
Not After : Mar 17 17:28:12 2026 GMT
Subject: CN=8c161b32-7acd-4b51-a50d-6d54a9c64f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:ff:13:0d:55:e7:6c:94:b3:e6:bb:8d:dd:
4d:d7:15:6e:a4:93:3e:8b:d2:ec:53:ae:4d:37:47:
e7:1b:c7:a5:d7:7f:44:84:71:7d:9c:0d:e2:72:04:
4c:54:c3:91:87:2f:20:0a:75:88:ee:e2:d1:3f:05:
5b:e3:ab:09:80:e8:2b:4f:9e:d1:07:18:05:f8:3d:
25:1f:77:6c:06:d2:2d:0e:46:d1:b5:c4:5d:f5:16:
84:17:fe:d8:67:3d:bf:5a:f8:f5:32:b5:0f:e9:a0:
e2:36:b2:cb:49:e3:92:26:ab:6b:d0:5c:d3:c8:f2:
c1:77:25:c8:a9:5e:52:e9:d1:2d:df:2f:4c:50:a7:
1f:e1:d8:4b:f9:3b:c9:31:da:af:8a:97:7f:1a:20:
78:45:00:df:e8:ab:b0:d9:05:a0:13:44:1c:05:af:
63:3f:be:11:9d:55:dd:7f:bf:1e:4c:e6:b9:f0:7b:
1b:21:9d:69:eb:7b:4e:49:a2:67:fa:70:32:0a:a0:
e6:79:83:1a:4d:dc:be:5d:46:bc:fa:8b:fe:59:b0:
d0:21:48:19:a4:ea:b5:47:3b:3b:cd:06:78:f4:bd:
45:e1:82:5d:45:a3:38:fa:b1:f5:c4:43:bd:86:6d:
7a:4b:67:6e:41:74:69:34:12:69:30:98:11:76:b0:
c1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:60:C4:25:9B:AA:44:02:28:6A:EC:D7:A6:75:25:90:B5:39:06:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3bcafcde-ddd3-3da2-9293-f4e5cb98bc78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
X509v3 Authority Key Identifier:
keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
sbgp-ipAddrBlock: critical
IPv4:
207.202.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:97:a6:cf:f8:f5:5c:f6:5c:83:9a:f2:ce:30:8a:eb:36:63:
ae:9f:f8:d5:be:c6:af:c1:a5:e3:30:c5:82:b2:f3:4e:d1:d1:
62:b5:b3:fc:18:17:e9:17:4f:ff:1c:59:f0:cb:9b:7e:84:dd:
82:22:2a:60:c8:81:13:15:3a:b9:e6:a9:4f:42:64:0b:a0:6a:
70:82:3e:75:7c:86:e9:08:b7:a5:1d:6a:ea:8c:b2:41:80:de:
17:80:65:f2:6b:5e:73:04:e6:aa:bc:07:73:84:2b:75:b3:5e:
db:a5:1a:6d:3f:ef:89:3a:59:31:61:a2:f2:53:e3:57:9c:f1:
d8:2c:98:96:ee:79:88:5f:b3:62:49:0e:54:ec:51:24:e4:78:
2c:74:9c:8f:5e:fc:15:5d:c5:b7:11:e1:44:f8:53:1a:39:e6:
a5:27:79:21:1a:6f:b2:19:2c:4e:65:ca:ab:d3:b7:ff:31:53:
bb:94:e6:4f:05:33:85:fe:df:43:0e:e8:22:3e:27:72:db:de:
bc:66:bc:cd:0c:ab:cb:b0:47:4c:03:4e:80:6f:08:ad:1e:14:
7f:c4:75:0a:57:10:a6:0e:fb:89:73:bc:6c:a8:ac:7a:77:f9:
57:42:9c:dd:74:60:83:79:98:a3:f2:25:7e:16:72:c9:fc:48:
0a:24:16:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:20:30 2025 by rpki-client