This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1846216e-e6c6-33db-92dd-d823b2c4c9f7.roa
File: 1846216e-e6c6-33db-92dd-d823b2c4c9f7.roa (raw, json)
Hash identifier: 2WWIR05r9zhLMJdVgcvude8mgSh37hbluKqjovosiD0=
Subject key identifier: 49:F3:95:AD:8E:3A:2C:AF:F6:92:0D:DC:EB:39:27:53:5C:1A:18:FF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584BFD1104390979D8F2C1BD24C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1846216e-e6c6-33db-92dd-d823b2c4c9f7.roa
Signing time: Wed 26 Nov 2025 14:00:39 +0000
ROA not before: Wed 26 Nov 2025 14:00:39 +0000
ROA not after: Tue 24 Feb 2026 14:00:39 +0000
asID: 20940
IP address blocks: 23.43.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fd:11:04:39:09:79:d8:f2:c1:bd:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 26 14:00:39 2025 GMT
Not After : Feb 24 14:00:39 2026 GMT
Subject: CN=9e27f1c2-9ebc-4e26-8866-a375b97c2976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:96:f7:74:6a:20:42:f7:11:f0:70:44:ef:
2d:d6:74:d3:48:e1:c8:81:80:d2:e6:38:e6:40:e7:
2e:3e:28:94:c3:11:b1:f9:bc:9d:54:82:12:52:0f:
a0:ee:12:fe:59:99:60:53:7a:5f:0c:24:55:49:c7:
73:70:34:fb:d9:52:cd:a2:a6:02:e3:13:d6:54:40:
f6:98:2a:7e:68:ee:f4:24:1f:0c:f5:27:dc:63:9e:
cb:f8:e8:8f:95:d0:a7:6f:aa:a2:72:88:09:de:fb:
58:70:bf:19:a9:2a:51:99:d1:a4:30:94:91:bd:1b:
70:6b:6e:6c:bd:c8:94:a2:c1:cf:18:af:d7:9a:82:
db:ed:33:0e:84:14:e4:6c:2d:bc:44:53:01:ae:7f:
2c:9d:59:1c:86:0e:67:fc:70:f2:4a:3c:b8:93:eb:
31:ca:27:0d:9d:26:b6:75:5e:29:f0:84:4e:2e:bc:
8c:e6:28:3e:40:10:31:87:c5:c4:15:ae:45:c2:f7:
9b:2f:75:1f:c3:e9:23:8f:58:c4:63:a0:79:aa:10:
e9:09:0f:31:97:e1:74:13:64:a8:04:b8:6e:8a:e4:
29:da:be:aa:4a:d2:60:22:6a:fd:a3:54:18:21:0b:
1a:8d:a6:1d:7e:3e:f1:eb:8d:60:e4:84:ce:10:54:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F3:95:AD:8E:3A:2C:AF:F6:92:0D:DC:EB:39:27:53:5C:1A:18:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1846216e-e6c6-33db-92dd-d823b2c4c9f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:89:2e:90:a5:5f:f3:14:54:2e:89:41:04:40:6f:11:ae:d0:
13:31:b3:09:d8:0e:ed:2a:42:49:2d:e3:54:2c:eb:c0:6d:5f:
21:7c:66:66:cc:ff:04:ab:53:cb:fa:b4:bc:27:1e:22:67:19:
ef:05:de:7c:90:5e:bc:6a:ac:21:0f:5c:65:fd:c8:7d:ee:6f:
a0:bf:a5:85:6a:80:57:ba:04:3f:e9:d5:5b:a9:0f:19:f9:37:
f6:4e:fe:5d:e8:8a:c2:d8:74:b8:a3:77:e4:ae:25:56:29:e1:
45:40:f7:c3:ec:96:dd:d6:90:4f:00:11:b4:57:87:66:1a:71:
6e:13:66:ce:b3:9a:76:45:c2:59:cb:f0:c1:9a:da:6c:54:a3:
9b:2e:42:46:dd:ca:78:0e:72:f2:0d:83:7e:0e:45:94:55:54:
e1:5e:3e:17:eb:a2:fc:bc:9b:21:08:02:db:39:a1:58:a9:3d:
4e:c4:0e:5d:bc:eb:1a:05:81:ef:dc:8b:21:5e:53:67:3a:c3:
9f:fe:90:07:77:2f:be:3a:8e:81:13:66:23:08:f5:85:83:b7:
9c:47:0a:62:6d:93:71:2f:87:e3:40:e7:88:0b:4c:47:fc:e5:
a2:b4:72:91:2c:ed:17:af:1e:43:61:ec:cc:92:d1:42:c1:02:
07:0d:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 01:50:30 2025 by rpki-client