This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c739af8-0791-31ec-be57-15774a7a8615.roa
File: 3c739af8-0791-31ec-be57-15774a7a8615.roa (raw, json)
Hash identifier: HrFEGk8E/lUKP6yg0onoNacmwHR3YSVdbF+bPmsE9oE=
Subject key identifier: F5:C5:87:48:BD:6C:B6:C3:43:9D:5F:0E:99:31:78:41:A5:86:FB:8A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584BFD11048D0F2EF76127420100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c739af8-0791-31ec-be57-15774a7a8615.roa
Signing time: Wed 26 Nov 2025 14:00:39 +0000
ROA not before: Wed 26 Nov 2025 14:00:39 +0000
ROA not after: Tue 24 Feb 2026 14:00:39 +0000
asID: 20940
IP address blocks: 23.43.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:fd:11:04:8d:0f:2e:f7:61:27:42:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 26 14:00:39 2025 GMT
Not After : Feb 24 14:00:39 2026 GMT
Subject: CN=7c9fd1ef-abd1-488b-ab7d-b1791299095b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2e:a3:9f:8b:60:7f:6d:38:44:8b:36:25:b3:
2d:5f:64:57:a5:56:33:0a:1b:a7:c5:8d:26:ee:8b:
e4:e0:ab:6f:c9:be:c1:eb:6f:1a:e7:ca:03:93:47:
72:a0:a5:0e:c5:ee:9c:92:76:50:b3:5f:5a:d2:20:
4e:1a:82:5d:6b:df:c3:bb:d2:4e:50:b1:9f:f5:f5:
6e:fa:a3:b8:cc:e0:51:91:a2:0b:b7:1d:5c:2d:9e:
18:28:3b:1e:15:40:73:95:87:68:c7:a2:6e:e4:d1:
cb:5e:b9:64:10:2c:0a:78:a0:a5:1e:1d:5e:04:78:
e4:86:4c:e1:07:30:b9:2c:c4:25:75:19:d9:8c:bd:
e5:b9:13:89:30:d7:0e:a0:d7:57:c1:fe:5d:61:09:
41:44:b0:47:cb:29:5d:6d:5d:a3:4a:c1:e6:d7:02:
32:85:33:d4:6d:66:89:f0:09:3e:0c:55:86:e5:15:
1c:6d:9f:6d:65:51:5d:b9:86:dc:8e:c0:5f:ce:64:
67:00:08:f8:a6:95:a2:c5:9f:eb:f7:de:e6:c3:b3:
e1:be:28:80:4b:f4:ac:32:07:55:ca:86:97:ef:0e:
c3:a7:00:3b:e0:8d:6b:2e:c4:1c:60:4d:1a:f5:98:
89:d5:d1:a5:5e:7a:6f:49:aa:00:22:ea:a9:ed:a1:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C5:87:48:BD:6C:B6:C3:43:9D:5F:0E:99:31:78:41:A5:86:FB:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c739af8-0791-31ec-be57-15774a7a8615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:a8:65:94:b5:f5:cb:31:86:15:15:85:39:d0:04:22:6c:2c:
59:4f:b8:57:30:f8:34:04:1f:3d:c2:e2:f5:07:c0:55:d8:b3:
3c:ff:fa:2f:49:b5:b7:02:de:ba:d4:b0:25:6e:c6:59:81:3d:
68:c8:ab:77:cf:c1:4b:12:77:82:d1:9b:c8:94:be:7a:de:d9:
f3:f7:e2:3c:fd:41:e6:4b:43:96:88:97:bd:c1:96:00:de:c8:
57:8c:94:33:ac:55:33:5f:69:89:36:7a:d4:d7:0f:4b:4e:43:
ac:0d:64:a3:53:dd:ef:e7:e4:b9:b2:49:af:a6:66:a7:89:79:
ab:f4:73:da:72:93:00:52:01:f1:f1:05:0f:82:2b:04:7b:ef:
81:61:23:54:93:ac:76:dc:da:b5:de:0e:87:0c:58:59:36:0d:
17:ee:42:0a:50:62:51:93:ad:50:3f:89:95:5f:37:63:c3:5e:
74:02:a2:68:0a:03:a2:86:0f:f2:cb:1b:74:17:df:ca:1d:df:
4e:e0:b2:b6:46:cd:da:e6:f9:3f:84:e2:79:c5:f4:19:d3:f2:
cd:6e:22:72:00:d5:d9:26:a1:cf:47:d3:dd:2e:36:e0:7d:cd:
02:95:87:da:83:fa:f9:4a:3b:d3:71:b5:e5:56:2a:55:0f:bf:
9e:a2:57:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EQSNDy73YSdCAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk
N2M5ZmQxZWYtYWJkMS00ODhiLWFiN2QtYjE3OTEyOTkwOTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y6jn4tgf204RIs2JbMtX2RXpVYzChunxY0m
7ovk4Ktvyb7B628a58oDk0dyoKUOxe6cknZQs19a0iBOGoJda9/Du9JOULGf9fVu
+qO4zOBRkaILtx1cLZ4YKDseFUBzlYdox6Ju5NHLXrlkECwKeKClHh1eBHjkhkzh
BzC5LMQldRnZjL3luROJMNcOoNdXwf5dYQlBRLBHyyldbV2jSsHm1wIyhTPUbWaJ
8Ak+DFWG5RUcbZ9tZVFduYbcjsBfzmRnAAj4ppWixZ/r997mw7PhviiAS/SsMgdV
yoaX7w7DpwA74I1rLsQcYE0a9ZiJ1dGlXnpvSaoAIuqp7aEmIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPXFh0i9bLbDQ51fDpkxeEGlhvuKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2M3MzlhZjgtMDc5MS0z
MWVjLWJlNTctMTU3NzRhN2E4NjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyuhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJOoZZS19csxhhUVhTnQBCJsLFlPuFcw+DQEHz3C4vUHwFXYszz/+i9J
tbcC3rrUsCVuxlmBPWjIq3fPwUsSd4LRm8iUvnre2fP34jz9QeZLQ5aIl73BlgDe
yFeMlDOsVTNfaYk2etTXD0tOQ6wNZKNT3e/n5LmySa+mZqeJeav0c9pykwBSAfHx
BQ+CKwR774FhI1STrHbc2rXeDocMWFk2DRfuQgpQYlGTrVA/iZVfN2PDXnQComgK
A6KGD/LLG3QX38od307gsrZGzdrm+T+E4nnF9BnT8s1uInIA1dkmoc9H090uNuB9
zQKVh9qD+vlKO9NxteVWKlUPv56iV9I=
-----END CERTIFICATE-----
Generated at Sat Dec 6 01:56:55 2025 by rpki-client