This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/21d3146c-b803-3260-b98f-e8fae0d54835.roa
File: 21d3146c-b803-3260-b98f-e8fae0d54835.roa (raw, json)
Hash identifier: twEvlXk/w7UM4xBVA86/CfE4eh3QymypOI87w3Zi6GQ=
Subject key identifier: D8:D4:FA:67:35:BF:31:CF:59:54:42:A8:B0:09:47:80:08:A5:38:5E
Certificate issuer: /CN=cb2539db-3965-4bf1-baef-b7f85ca967bd
Certificate serial: 010D0C9F4328584BB7FF0BF5FEDBBD1311577100
Authority key identifier: 35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/21d3146c-b803-3260-b98f-e8fae0d54835.roa
Signing time: Sat 01 Nov 2025 20:14:31 +0000
ROA not before: Sat 01 Nov 2025 20:14:31 +0000
ROA not after: Fri 30 Jan 2026 21:14:31 +0000
asID: 401143
IP address blocks: 23.147.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Nov 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b7:ff:0b:f5:fe:db:bd:13:11:57:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2539db-3965-4bf1-baef-b7f85ca967bd
Validity
Not Before: Nov 1 20:14:31 2025 GMT
Not After : Jan 30 21:14:31 2026 GMT
Subject: CN=15faf5c8-1801-437a-b972-6117076947c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:0a:78:0b:9c:46:08:8a:25:5f:73:8a:72:
b2:92:40:6a:a8:8a:94:0c:e4:fa:0c:9b:b1:ed:ab:
9a:88:ec:b5:c2:4e:a5:ce:6c:c8:58:4c:8e:64:a4:
6c:33:75:7a:c6:7d:ab:fd:d7:7f:0c:31:18:cb:a3:
42:f0:21:31:8b:0a:47:9d:48:88:ca:fc:67:dd:68:
1d:23:b7:42:f6:73:9f:b0:99:f6:d2:82:75:f9:c4:
5a:7b:ac:0f:36:13:49:df:50:46:68:c6:2e:a0:6b:
42:90:c6:ce:41:25:3c:4d:73:46:41:e6:0f:bb:2f:
f6:66:4f:dc:c7:8d:8b:76:88:36:1e:13:c6:58:5d:
e4:74:16:d4:2d:2c:ad:44:e0:c7:dc:8d:65:03:d3:
47:b5:2a:9b:fa:b3:17:78:2c:8e:ae:6a:04:68:aa:
f8:b8:18:55:4a:83:4b:8f:d1:cf:27:9b:3b:2c:0a:
72:a8:8e:66:c9:f2:8f:dc:a8:8a:41:17:5b:9e:03:
c5:cc:e9:36:5f:04:f4:81:56:e5:49:2c:b5:b5:64:
0e:ef:ce:87:46:b6:87:36:98:14:25:56:2f:db:d3:
0d:28:63:58:a1:cd:30:d9:d0:61:c3:f8:70:9a:79:
af:b1:56:ee:0d:73:f6:b8:8e:04:14:15:bb:57:df:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:FA:67:35:BF:31:CF:59:54:42:A8:B0:09:47:80:08:A5:38:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/21d3146c-b803-3260-b98f-e8fae0d54835.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl
X509v3 Authority Key Identifier:
keyid:35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:ae:9f:1d:be:50:ce:b7:bd:05:11:ff:fa:b8:29:c2:a2:2d:
b6:31:74:6b:dc:77:bc:99:dc:36:42:fa:f2:36:a2:d6:f2:6f:
87:f5:4e:dc:e9:61:c4:14:a4:58:98:79:6b:32:86:6a:35:dc:
60:10:0c:b5:74:6e:da:95:8c:98:f4:7f:f9:01:3a:1f:64:90:
91:8b:5d:5d:7d:d8:a2:33:90:65:53:99:53:bb:2c:e2:28:48:
ac:a2:6b:9b:4b:10:ea:3e:22:71:b3:75:45:e1:d7:dc:64:0e:
cf:3c:17:79:ac:85:95:9f:c1:81:99:fe:90:c5:fb:ba:82:1f:
e4:4e:28:08:3a:23:fa:50:78:1c:f5:a5:0b:61:15:03:b7:8c:
00:8a:5c:51:61:d0:c6:81:60:f0:4c:12:f6:7b:5e:ab:ec:77:
ac:82:56:b7:77:1d:25:de:0d:2f:31:dc:fd:10:c4:f0:5b:b1:
08:cf:bf:b9:3a:6d:21:43:35:20:81:43:e0:29:bf:c8:d9:0d:
09:2d:72:19:39:12:0f:31:e6:f7:4c:a2:b7:be:5b:18:b0:52:
bd:e3:62:33:68:7b:e0:41:3e:c8:4d:8c:81:78:50:78:4f:dd:
fc:1f:e8:9c:c1:e9:87:09:1b:6a:e9:d3:6c:05:8a:f7:7e:6b:
d4:6c:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 07:21:07 2025 by rpki-client