This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a5aa0f6-416b-3dc3-904a-d883f0abfdec.roa
File: 5a5aa0f6-416b-3dc3-904a-d883f0abfdec.roa (raw, json)
Hash identifier: gMcyE6B7d/2V/uZLXrykOX2fiIExLA3LZyf0n56aKRQ=
Subject key identifier: 62:2B:B6:3E:C0:E1:57:93:A0:C3:B9:88:82:3C:CE:1A:CA:4F:18:D2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C50D18E1CE9F41E50B2C42D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a5aa0f6-416b-3dc3-904a-d883f0abfdec.roa
Signing time: Fri 26 Dec 2025 14:00:39 +0000
ROA not before: Fri 26 Dec 2025 14:00:39 +0000
ROA not after: Thu 26 Mar 2026 13:00:39 +0000
asID: 20940
IP address blocks: 23.213.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:50:d1:8e:1c:e9:f4:1e:50:b2:c4:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:39 2025 GMT
Not After : Mar 26 13:00:39 2026 GMT
Subject: CN=b9a2775f-16e7-4355-86ea-ddd645d72476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:7d:1d:5f:ea:ca:3e:47:c0:dd:e4:1d:fb:
5a:93:0f:32:fb:e7:1f:48:21:82:ef:56:c8:e8:ae:
8f:4c:c9:b4:26:f6:81:ef:b4:e0:2a:85:c0:a4:9f:
2e:be:d7:0b:60:40:c8:0b:02:ad:29:8a:30:44:73:
b1:2e:45:2a:2c:7f:4e:a0:c1:3f:51:c5:6e:5b:67:
cb:62:ae:80:45:20:4b:b2:fc:57:4e:b3:e1:de:27:
75:19:ce:af:61:6d:c6:ee:98:72:d9:00:0f:56:a4:
11:fe:3c:e4:79:e5:7b:db:d9:fb:8f:ea:b5:3d:48:
2c:d6:43:61:87:05:58:63:e4:96:8b:be:49:86:92:
e7:84:02:07:b0:8f:6e:b6:52:8b:2b:3e:c4:22:a7:
e5:90:ce:32:57:2e:9a:a3:b8:67:14:65:be:4d:90:
ea:b2:03:db:e6:30:83:c5:fd:80:8d:c1:79:ae:b0:
0e:65:dc:66:52:1a:30:33:d7:30:b9:d9:50:50:b8:
32:b3:e4:78:04:16:29:bb:3e:26:5b:2e:5c:da:bf:
4a:ac:c5:47:8b:8d:fa:c6:71:9d:b0:26:a7:b6:d4:
20:b2:35:03:fc:88:e5:73:ef:18:c7:0b:2b:e2:50:
d7:32:48:9c:53:fb:b8:8b:d2:8b:6b:a8:13:34:f0:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2B:B6:3E:C0:E1:57:93:A0:C3:B9:88:82:3C:CE:1A:CA:4F:18:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a5aa0f6-416b-3dc3-904a-d883f0abfdec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:75:f9:7e:c8:b7:08:96:1a:0e:ab:4c:2b:0a:c7:4b:76:2d:
98:f6:46:ec:0d:2d:d4:d8:2a:f2:bd:ef:33:f7:bb:aa:87:29:
99:f6:62:3b:39:4c:26:e3:93:cd:e6:93:ae:64:3f:fe:ec:19:
dd:17:51:a6:85:18:7e:59:14:c3:2e:6c:2d:95:50:be:28:d4:
c0:8e:29:65:6b:62:ab:19:f8:78:94:54:da:34:56:82:f3:67:
d7:29:5d:79:33:49:6f:07:bb:dc:56:e2:04:12:aa:5d:ad:12:
89:7e:fc:af:71:93:7b:51:3b:75:50:15:8d:8d:f7:0e:fd:66:
60:6f:c6:77:7d:46:d0:4c:59:01:3b:51:1a:0c:32:b9:3c:ab:
ac:4b:2a:ef:98:83:5c:ce:07:13:4f:e4:3e:89:dd:37:da:ff:
87:5e:39:7b:6c:77:c1:89:05:a5:f5:d9:fd:7f:f2:9b:e3:e2:
39:a5:a7:df:39:d5:4c:b6:ea:1b:bc:80:a6:bf:bc:14:d3:6f:
e2:9d:a0:72:ab:f7:f9:fe:07:b3:7f:d5:25:51:54:14:2b:b5:
34:41:37:40:a5:62:da:f9:99:17:fc:e5:20:6e:da:e7:17:fe:
e8:01:12:27:1c:43:77:a7:04:b7:72:f3:00:d9:3b:7d:e5:46:
3f:4d:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 08:03:11 2026 by rpki-client