This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/2c9499a6-75ea-3ff6-9241-321833caa089.roa
File: 2c9499a6-75ea-3ff6-9241-321833caa089.roa (raw, json)
Hash identifier: GvwJhUVamqGgc2f0gJv6mWUhBE+a3phznUtGlkhWR94=
Subject key identifier: 82:23:51:4B:6C:F7:6E:F1:87:96:BC:47:F4:59:97:9B:07:3B:04:82
Certificate issuer: /CN=23d4344d-e6b1-4a9e-8560-f54da402f39b
Certificate serial: 010D0C9F4328584C7C16A932281501213A4688C0
Authority key identifier: F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/2c9499a6-75ea-3ff6-9241-321833caa089.roa
Signing time: Sun 11 Jan 2026 02:00:30 +0000
ROA not before: Sun 11 Jan 2026 02:00:30 +0000
ROA not after: Sat 11 Apr 2026 01:00:30 +0000
asID: 152179
IP address blocks: 23.147.4.0/24 maxlen: 24
2602:f52e::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:7c:16:a9:32:28:15:01:21:3a:46:88:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d4344d-e6b1-4a9e-8560-f54da402f39b
Validity
Not Before: Jan 11 02:00:30 2026 GMT
Not After : Apr 11 01:00:30 2026 GMT
Subject: CN=edc6d34e-89fe-47fe-b127-10ddcde2bf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:85:c0:a7:57:0a:53:0b:11:cc:d0:c8:0c:c9:
e5:32:5c:72:85:29:5f:21:9e:bc:95:3b:af:20:98:
bf:e2:6d:a1:00:90:a5:91:66:0d:11:c9:7e:e3:ab:
05:04:05:27:9d:c8:55:bd:ec:43:e1:ed:93:8d:4b:
2a:57:c2:a7:68:b4:ba:81:86:61:14:db:5f:7f:a1:
86:9c:75:42:b1:84:a4:f4:5e:54:6f:2f:b7:f2:59:
54:3a:d9:bc:54:8c:ce:41:81:cb:57:29:0b:3f:aa:
ea:d2:e2:79:67:d2:6b:c8:08:1f:cd:0b:d6:e9:4f:
4b:9d:a5:81:cb:e8:4c:8b:00:55:4d:32:8f:01:98:
92:be:4a:57:a5:fa:39:8e:49:4f:a0:ea:d5:fc:d1:
f5:57:d5:da:11:78:ef:37:30:62:46:35:bb:85:63:
1e:4b:ac:47:73:17:d4:b2:30:77:2d:67:13:fc:4d:
5e:0e:46:54:d1:35:54:77:dc:7b:67:50:f2:c5:8d:
d9:41:c9:17:e9:3b:ef:5b:31:dc:6a:c6:5d:1d:ab:
18:82:47:30:68:eb:6f:f3:7d:b4:27:80:44:4b:70:
7c:ad:b8:a0:3b:b0:ab:90:37:4e:ce:3f:3d:b3:fd:
ad:7c:7d:37:0d:9a:8b:cd:b1:b7:fb:2a:a9:a5:fc:
d6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:23:51:4B:6C:F7:6E:F1:87:96:BC:47:F4:59:97:9B:07:3B:04:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/2c9499a6-75ea-3ff6-9241-321833caa089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl
X509v3 Authority Key Identifier:
keyid:F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.4.0/24
IPv6:
2602:f52e::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:0d:11:a2:c8:ab:91:10:d4:fe:1a:05:22:11:20:16:15:55:
d3:91:02:d7:5e:d2:46:bf:61:46:83:27:27:c9:6f:9c:09:49:
b2:f2:f8:88:5c:16:ca:06:cf:03:4c:97:e2:eb:03:e0:03:3e:
7d:52:f5:a5:18:fc:dd:f2:fb:c6:17:8a:43:7b:59:2c:86:b1:
2f:5f:fb:3a:81:1a:67:fc:62:7a:5e:15:c6:a1:0b:93:e4:b0:
16:73:5c:80:9c:37:d6:e3:59:36:c1:5b:43:19:53:b4:7d:b8:
9f:44:10:85:16:20:85:fb:b5:02:16:79:73:ce:7d:af:b1:ff:
ac:65:dd:b3:2a:13:d8:20:81:c0:69:51:da:1e:b8:ff:98:c9:
5d:ed:20:5b:16:e2:6b:1c:43:a9:13:3f:6e:42:45:97:07:59:
3c:f8:68:47:37:a3:ae:bd:a5:fe:33:52:24:36:40:e5:24:9d:
00:1d:c7:b4:9f:1d:45:70:b9:7b:7f:6e:73:44:d9:7a:da:d1:
c1:db:77:b8:03:52:91:2d:fc:a5:27:f9:a4:71:79:a6:25:95:
4c:b4:39:d3:15:50:81:ab:96:84:6d:fa:f3:2d:7b:7f:29:a4:
62:d2:7c:5a:9d:f4:ff:fe:94:ce:45:1b:a9:da:ae:48:7b:a2:
21:33:5b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 01:04:56 2026 by rpki-client