This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/447393b0-aa5b-3383-a0ad-43cc756871c3.roa
File: 447393b0-aa5b-3383-a0ad-43cc756871c3.roa (raw, json)
Hash identifier: HzXuQkVhzFGHfaoDdgEmsEe3gZUgtz0L5EuFufBskVM=
Subject key identifier: C5:9B:6D:76:48:25:B3:67:FC:48:03:A7:13:C0:CD:86:7D:65:1F:6C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C3916677626B19B54AE09D500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/447393b0-aa5b-3383-a0ad-43cc756871c3.roa
Signing time: Thu 18 Dec 2025 02:00:31 +0000
ROA not before: Thu 18 Dec 2025 02:00:31 +0000
ROA not after: Wed 18 Mar 2026 01:00:31 +0000
asID: 20940
IP address blocks: 23.204.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:39:16:67:76:26:b1:9b:54:ae:09:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 18 02:00:31 2025 GMT
Not After : Mar 18 01:00:31 2026 GMT
Subject: CN=44cea2fa-8d82-43ff-bbcc-2ff22a93ad30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:13:be:1e:fe:ca:5d:7c:5d:9a:bf:91:ca:
a6:a4:8a:ca:20:6f:9e:1c:19:4f:55:a3:64:19:b2:
1f:a6:de:0f:c6:50:6b:c6:6f:9d:42:5e:97:7c:64:
02:80:63:42:11:cb:f1:19:e1:4b:82:de:a7:69:e7:
cc:a9:d4:dd:88:6e:97:7e:ad:6c:db:10:f6:0e:ae:
c3:b1:74:02:2c:c3:18:81:a2:c0:94:95:ea:9f:d6:
17:cb:ec:c3:a5:bd:9a:b1:09:15:92:9c:0b:b3:54:
e6:bf:65:4f:d7:85:ce:f7:05:b7:d6:2d:0c:84:ed:
d3:e5:08:fe:a3:6a:ee:b9:d1:4e:be:a3:15:d9:df:
94:52:6b:07:bd:d9:45:57:c6:e2:84:95:51:d2:87:
b8:17:7c:13:9b:a2:fe:2d:78:07:2d:68:df:4f:60:
b2:90:f6:6a:3d:dc:86:6f:83:d9:f0:3c:e0:50:03:
30:dd:d8:d3:5e:ac:72:f4:e8:78:06:d9:e6:a7:b2:
5f:56:89:8e:43:79:3f:85:9b:e5:ce:b7:ed:57:63:
fd:c8:05:2c:24:2a:b4:8e:b6:23:88:7a:86:2c:2d:
1e:7c:03:37:8f:7e:58:b9:97:98:b6:d9:4a:9c:c5:
93:eb:78:ba:3d:ba:3d:9c:3d:5c:96:f8:3f:bc:ee:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9B:6D:76:48:25:B3:67:FC:48:03:A7:13:C0:CD:86:7D:65:1F:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/447393b0-aa5b-3383-a0ad-43cc756871c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.204.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:27:9b:1b:85:0f:90:ae:11:c1:a0:85:c1:7e:91:36:16:fb:
70:a4:a9:24:ad:19:9f:31:5a:7c:74:65:a3:14:b6:7d:a7:f5:
87:03:8e:9e:96:dc:ed:25:47:42:58:41:a8:6b:02:d1:f5:61:
94:3b:28:5d:e0:93:85:b4:fa:b3:cd:f5:0a:23:0e:af:1a:6a:
21:a5:79:1b:e9:9e:78:e9:cc:76:18:1e:93:08:1c:e2:53:ab:
38:fc:c8:f2:48:3a:eb:38:3e:99:85:7d:7e:b6:53:fb:9a:1f:
5b:fd:50:00:6a:4d:16:99:31:a0:76:61:c9:30:d8:08:1c:ab:
91:65:7e:36:44:91:ea:d7:08:90:2f:a9:6b:d0:2f:b7:ec:0b:
5b:1c:04:bf:15:6a:df:ff:0c:b7:58:8d:54:e7:d0:90:45:bb:
f0:90:27:e2:11:0a:79:27:c1:90:cc:87:d3:26:d7:74:1d:26:
b2:a6:69:e4:9e:72:54:b7:8d:a2:85:c9:49:99:7c:bc:aa:96:
2e:3c:dd:ef:f7:85:26:a2:e5:61:5f:dd:3a:76:d6:6e:c2:81:
71:d9:dc:ec:f9:93:a9:99:b1:2f:e8:ed:e0:e9:44:1a:5d:f3:
40:68:ec:18:e0:36:f8:3c:ec:c0:49:2f:de:71:20:32:d1:8f:
8a:8f:41:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5Fmd2JrGbVK4J1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk
NDRjZWEyZmEtOGQ4Mi00M2ZmLWJiY2MtMmZmMjJhOTNhZDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmygTvh7+yl18XZq/kcqmpIrKIG+eHBlPVaNk
GbIfpt4PxlBrxm+dQl6XfGQCgGNCEcvxGeFLgt6naefMqdTdiG6Xfq1s2xD2Dq7D
sXQCLMMYgaLAlJXqn9YXy+zDpb2asQkVkpwLs1Tmv2VP14XO9wW31i0MhO3T5Qj+
o2ruudFOvqMV2d+UUmsHvdlFV8bihJVR0oe4F3wTm6L+LXgHLWjfT2CykPZqPdyG
b4PZ8DzgUAMw3djTXqxy9Oh4Btnmp7JfVomOQ3k/hZvlzrftV2P9yAUsJCq0jrYj
iHqGLC0efAM3j35YuZeYttlKnMWT63i6Pbo9nD1clvg/vO4FeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWbbXZIJbNn/EgDpxPAzYZ9ZR9sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDQ3MzkzYjAtYWE1Yi0z
MzgzLWEwYWQtNDNjYzc1Njg3MWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQnmxuFD5CuEcGghcF+kTYW+3CkqSStGZ8xWnx0ZaMUtn2n9YcDjp6W
3O0lR0JYQahrAtH1YZQ7KF3gk4W0+rPN9QojDq8aaiGleRvpnnjpzHYYHpMIHOJT
qzj8yPJIOus4PpmFfX62U/uaH1v9UABqTRaZMaB2Yckw2Agcq5FlfjZEkerXCJAv
qWvQL7fsC1scBL8Vat//DLdYjVTn0JBFu/CQJ+IRCnknwZDMh9Mm13QdJrKmaeSe
clS3jaKFyUmZfLyqli483e/3hSai5WFf3Tp21m7CgXHZ3Oz5k6mZsS/o7eDpRBpd
80Bo7BjgNvg87MBJL95xIDLRj4qPQZc=
-----END CERTIFICATE-----
Generated at Tue Jan 20 09:44:40 2026 by rpki-client