This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a11bce-cfd5-3fbb-b11d-2056a55c2eae.roa
File: 21a11bce-cfd5-3fbb-b11d-2056a55c2eae.roa (raw, json)
Hash identifier: YTj9QwhYEO7BknGo+KLNUwUvB8EClOvx+K1S14Xt9PM=
Subject key identifier: 19:85:46:13:40:07:DE:46:50:F3:4D:E1:72:CC:8D:5C:7A:1C:F6:49
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584CA5F733C3CDE34A657ED4A040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a11bce-cfd5-3fbb-b11d-2056a55c2eae.roa
Signing time: Mon 26 Jan 2026 02:00:32 +0000
ROA not before: Mon 26 Jan 2026 02:00:32 +0000
ROA not after: Sun 26 Apr 2026 01:00:32 +0000
asID: 16625
IP address blocks: 23.4.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 11 Feb 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:f7:33:c3:cd:e3:4a:65:7e:d4:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 26 02:00:32 2026 GMT
Not After : Apr 26 01:00:32 2026 GMT
Subject: CN=5617a926-39c0-452d-9a68-a2b0441e5de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:0d:38:1a:bf:49:99:1d:47:3b:e5:46:fa:
4e:61:82:8e:fb:5c:c0:86:fd:65:37:7f:b5:fa:d9:
cd:6d:40:a9:fe:87:be:75:f7:1d:6a:36:2c:1f:88:
59:e8:6d:6e:03:f0:bd:96:d2:48:e2:13:dc:4c:e0:
d8:0e:d1:84:93:0d:37:cb:a5:1c:1c:6e:85:5c:2c:
13:9a:57:74:2a:f4:be:87:71:3e:e0:94:b4:93:6a:
18:d3:69:9d:d1:b2:1b:fe:11:3a:1d:21:19:da:75:
2d:d9:ef:b7:87:79:e0:10:14:a7:e7:61:bf:be:a5:
1b:cf:b7:7c:41:c8:f3:ab:7c:03:70:37:c0:fa:28:
50:42:54:b5:7e:9b:2e:94:a8:88:d3:a0:89:22:ea:
17:95:3f:ca:55:a2:68:86:d5:55:34:dd:59:76:59:
84:cd:19:cd:1d:07:02:d3:11:3d:a3:08:8b:db:b2:
1d:f9:f5:3c:bb:6f:c1:20:89:18:64:d4:d4:8b:32:
b0:92:88:3d:07:b3:bc:a9:7b:1e:8a:a4:a3:c9:b5:
c8:fc:2f:2b:31:60:9c:3e:12:60:d5:df:ed:6e:80:
67:0f:f8:50:93:a0:cb:19:56:2f:60:35:60:88:58:
3d:ec:ca:1f:23:31:be:21:dd:a3:52:c2:60:b9:1a:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:85:46:13:40:07:DE:46:50:F3:4D:E1:72:CC:8D:5C:7A:1C:F6:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a11bce-cfd5-3fbb-b11d-2056a55c2eae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.4.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:26:aa:f4:43:99:26:eb:d5:7f:79:06:0f:e0:1f:ad:17:37:
d2:09:be:ca:e7:52:ca:43:39:00:7a:19:b6:65:d6:86:5a:17:
b7:d9:de:47:96:de:b7:2a:89:f1:69:85:73:96:16:fa:2d:27:
7b:14:3b:b5:b1:4e:86:69:27:40:9e:3e:b6:f5:56:df:f6:cd:
56:02:00:88:dd:f4:b3:b8:0f:dd:0e:ba:7c:5a:3b:7a:c9:3e:
13:6e:59:d1:47:64:4d:80:d3:86:9e:c9:65:a6:35:7c:d0:b0:
25:0b:d6:2e:0b:d5:98:ac:93:a2:a0:58:21:d7:25:eb:c7:51:
de:76:fb:5c:82:09:54:23:fc:c6:2b:d7:9c:ea:db:f8:19:72:
78:cb:3b:03:48:a9:a0:0c:38:64:27:ea:f0:4b:39:89:23:87:
25:02:dc:a9:34:55:d4:11:53:8d:4c:33:1e:27:13:02:cb:72:
53:2c:aa:52:3b:fd:07:af:8a:11:a8:72:43:1d:ea:fa:8a:60:
6c:b8:11:ef:ff:0f:4d:1a:db:00:4c:e5:fd:db:df:ec:30:58:
37:0e:c7:4c:04:f8:2c:45:e1:93:47:a8:50:c4:0f:46:0e:c3:
d9:16:14:88:7f:34:8f:1f:87:05:d1:c3:5e:b6:4e:77:4b:21:
e4:5f:f7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:26:40 2026 by rpki-client