This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa
File: cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa (raw, json)
Hash identifier: 2Tx7NIIjPcZZGORDl4iZ3ZeUR9rxIf2aR9uJviTzzhg=
Subject key identifier: A7:EF:04:71:8D:56:90:92:49:BF:95:8E:F8:2F:42:CD:B2:40:1C:36
Certificate issuer: /CN=896f0624-c28d-44c0-93cf-3f879f877518
Certificate serial: 010D0C9F4328584BE125CD1228503BD073B835C0
Authority key identifier: AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa
Signing time: Sun 16 Nov 2025 14:00:39 +0000
ROA not before: Sun 16 Nov 2025 14:00:39 +0000
ROA not after: Sat 14 Feb 2026 14:00:39 +0000
asID: 400503
IP address blocks: 23.133.56.0/24 maxlen: 24
23.133.57.0/24 maxlen: 24
2602:fbb4::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Dec 2025 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:e1:25:cd:12:28:50:3b:d0:73:b8:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f0624-c28d-44c0-93cf-3f879f877518
Validity
Not Before: Nov 16 14:00:39 2025 GMT
Not After : Feb 14 14:00:39 2026 GMT
Subject: CN=aa47aa18-7207-44b9-bce4-9512728ba314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:6f:ae:17:cb:67:a4:2f:b6:78:b5:e8:08:
68:4d:b7:89:ed:77:c1:e1:c2:04:0f:25:27:90:8a:
a9:f7:78:1f:46:00:43:fe:6e:45:ad:1c:d8:fe:fb:
38:66:a6:9a:ae:99:36:c3:39:68:57:cb:2c:13:34:
9d:0f:1e:56:dc:61:6c:22:18:dd:e7:44:07:ec:e3:
4c:9c:dd:28:d8:80:56:c0:62:43:16:7c:ef:b2:34:
ca:c4:40:e4:5b:10:be:a7:9b:4d:60:54:75:fe:29:
6d:1f:fe:4f:52:a0:61:76:67:73:b0:b7:7f:d0:ab:
0b:11:1c:ee:3d:2b:82:7a:ad:2b:94:9b:7e:f3:c8:
a1:4c:be:b1:e0:b2:73:0a:41:78:53:3f:c9:ef:3d:
ed:f4:d3:53:1d:c9:bb:44:7b:55:3a:1b:87:e2:4b:
75:7e:22:27:51:f6:ae:58:9e:2d:77:72:e5:31:67:
5f:54:a6:6c:ac:e7:14:05:00:72:53:4e:61:85:17:
dc:40:a7:ce:e9:e2:40:46:55:c0:e8:44:da:40:2d:
d1:ba:55:d7:d1:7a:35:20:28:2b:2f:b0:bb:1a:5b:
6a:ca:d2:b3:1b:aa:e7:ea:88:7e:33:de:b8:11:7a:
2c:87:b7:d7:65:07:cc:b0:f2:1d:be:be:76:19:96:
70:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EF:04:71:8D:56:90:92:49:BF:95:8E:F8:2F:42:CD:B2:40:1C:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl
X509v3 Authority Key Identifier:
keyid:AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.56.0/23
IPv6:
2602:fbb4::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:42:ec:19:43:75:01:15:cf:ec:1b:b8:dd:9b:eb:43:13:b1:
de:94:25:5f:e6:c1:48:6b:28:8f:7d:7b:70:cb:db:eb:75:4c:
7b:8f:a1:cc:bc:01:9c:7e:33:cf:79:4d:c4:f6:8e:3e:b0:23:
cf:64:b4:63:df:3a:f0:6c:fb:e9:11:2e:ae:f2:33:a7:cc:79:
c1:ff:a6:f3:a8:6f:68:14:42:66:34:8a:39:f8:1f:85:3b:f9:
d4:75:f8:18:9d:66:f8:ef:9b:45:2f:73:61:b5:ac:d7:e0:cb:
53:87:47:7c:c0:b0:09:a3:e3:ab:ca:1c:ea:8c:4b:9a:f4:0e:
c6:87:94:4a:cd:13:f1:3f:12:5a:29:07:40:3a:09:61:fb:53:
92:da:16:ac:98:95:81:30:8a:e4:b9:9b:4d:f2:fd:91:4d:c7:
01:ee:67:ba:74:43:ef:ca:e0:0d:52:bc:69:c4:34:59:c2:ae:
a5:b4:f2:e4:fc:5f:79:31:f6:ac:cf:2e:58:7d:29:1f:a0:a3:
bb:47:ce:19:53:49:c8:8f:be:a8:ec:2a:ad:c0:e3:01:72:1f:
c7:d5:f0:e0:10:ab:57:e0:ab:c0:57:8a:5d:37:67:2a:60:af:
9f:15:7d:f0:63:38:78:51:5a:bd:10:bb:18:6d:de:9e:6e:4c:
82:ea:34:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 17:03:14 2025 by rpki-client