This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa
File: 1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa (raw, json)
Hash identifier: 7aKDmOPwl00Pb0OPy6LkFzd8dePttjrBR7jS1dFogZ8=
Subject key identifier: 23:9A:A1:E9:56:70:AB:D0:67:98:20:BE:73:4E:75:CE:2A:53:35:BD
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F4328584CAE572519F1915494C6F2A200
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 25645
IP address blocks: 23.249.96.0/21 maxlen: 21
23.249.104.0/21 maxlen: 21
23.249.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:25:19:f1:91:54:94:c6:f2:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=c3f7537a-b864-4abf-9574-d8267c464d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7d:a0:26:71:ba:5a:d3:7f:a0:e2:fb:08:10:
b2:4e:4f:d1:b4:6a:31:ec:aa:30:b2:1d:a4:4d:2d:
4d:54:f7:0a:24:4c:97:df:61:e6:48:e2:b9:14:3b:
c5:2a:91:59:20:3d:0e:ea:92:92:21:89:86:96:67:
f6:f5:86:d2:5b:8b:d5:f7:1f:4d:39:dd:f1:34:e9:
18:fa:72:06:c0:5c:d1:d4:0d:2d:3a:ff:9d:2b:d4:
2f:23:5c:1d:ad:bb:a6:98:e7:bf:bb:ea:76:2e:b9:
1e:e0:a2:4c:38:64:9b:5d:fd:9c:e6:e4:f3:1b:76:
e5:74:b3:64:a0:dc:69:01:d1:23:a3:53:a8:7b:bc:
2c:08:e8:94:82:18:34:37:5f:4c:87:fd:b2:da:9d:
b3:f4:10:95:1d:a0:a5:85:3a:e6:f0:b6:38:8a:92:
c0:43:28:b5:47:11:2e:6e:63:92:90:78:6a:66:f6:
51:79:a3:d7:f6:71:b8:4e:34:97:d6:30:ba:d8:49:
b9:3b:d9:19:36:6f:b4:cb:df:35:8d:f4:52:c0:26:
aa:cc:0f:b7:15:9f:c9:6b:a3:34:d8:e3:1f:f5:7c:
e4:be:23:bb:c6:fe:fd:3a:93:0a:3d:10:f1:ae:63:
53:9c:62:96:db:60:95:85:01:74:94:60:36:de:58:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9A:A1:E9:56:70:AB:D0:67:98:20:BE:73:4E:75:CE:2A:53:35:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:73:ce:df:85:bd:42:b1:22:9b:25:71:95:b1:5c:d8:73:11:
b6:e3:f5:56:4a:9c:66:54:64:0b:4c:78:fc:37:9c:bc:6e:80:
66:99:61:c5:fa:91:38:c1:9e:16:56:38:bd:b3:50:96:a4:f9:
67:bf:bf:f1:19:0b:60:e3:2d:4d:d0:b2:e4:81:09:07:d5:0d:
b0:a8:91:1a:d4:38:b1:44:db:a3:8c:58:ab:58:41:6a:f7:50:
25:7a:27:3a:0b:1d:e7:b5:89:a4:33:6a:22:c5:36:9f:97:1b:
eb:9f:d6:20:6f:1e:42:96:3c:4b:40:11:73:44:09:48:f9:c2:
27:91:29:86:e3:be:73:ad:46:58:38:a6:f6:69:cf:bb:b3:7e:
21:a9:6a:1f:ae:5d:a6:28:e9:b9:9f:9c:a0:a6:23:89:9a:08:
97:71:7b:76:c9:27:ce:f2:ed:d2:85:3a:06:d6:ec:f9:7f:95:
dc:c1:27:b6:8f:3b:07:86:95:70:a3:48:9c:c3:b0:6e:73:ae:
57:e1:ae:12:60:8d:f7:de:21:a0:4a:db:eb:9f:8b:68:d7:f8:
de:df:f6:02:9a:ad:6e:21:9d:7e:42:17:89:44:b3:60:6f:45:
74:9d:f1:0b:5b:c8:fb:3c:4a:b6:8f:74:06:3e:c5:c6:49:9f:
c6:3a:e8:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVyUZ8ZFUlMbyogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YzNmNzUzN2EtYjg2NC00YWJmLTk1NzQtZDgyNjdjNDY0ZDU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7n2gJnG6WtN/oOL7CBCyTk/RtGox7Kowsh2k
TS1NVPcKJEyX32HmSOK5FDvFKpFZID0O6pKSIYmGlmf29YbSW4vV9x9NOd3xNOkY
+nIGwFzR1A0tOv+dK9QvI1wdrbummOe/u+p2Lrke4KJMOGSbXf2c5uTzG3bldLNk
oNxpAdEjo1Ooe7wsCOiUghg0N19Mh/2y2p2z9BCVHaClhTrm8LY4ipLAQyi1RxEu
bmOSkHhqZvZReaPX9nG4TjSX1jC62Em5O9kZNm+0y981jfRSwCaqzA+3FZ/Ja6M0
2OMf9XzkviO7xv79OpMKPRDxrmNTnGKW22CVhQF0lGA23lgAZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCOaoelWcKvQZ5ggvnNOdc4qUzW9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMTUyM2I1NGMtYjIyYy0z
OGJmLWJiZjItZWEzNjQ0MTFjYjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/lgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGNzzt+FvUKxIpslcZWxXNhzEbbj9VZKnGZUZAtMePw3nLxugGaZYcX6
kTjBnhZWOL2zUJak+We/v/EZC2DjLU3QsuSBCQfVDbCokRrUOLFE26OMWKtYQWr3
UCV6JzoLHee1iaQzaiLFNp+XG+uf1iBvHkKWPEtAEXNECUj5wieRKYbjvnOtRlg4
pvZpz7uzfiGpah+uXaYo6bmfnKCmI4maCJdxe3bJJ87y7dKFOgbW7Pl/ldzBJ7aP
OweGlXCjSJzDsG5zrlfhrhJgjffeIaBK2+ufi2jX+N7f9gKarW4hnX5CF4lEs2Bv
RXSd8QtbyPs8SraPdAY+xcZJn8Y66Iw=
-----END CERTIFICATE-----
Generated at Mon Feb 9 12:45:11 2026 by rpki-client