This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a20f8236-39a1-32d8-9efa-9f8b8973d345.roa
File: a20f8236-39a1-32d8-9efa-9f8b8973d345.roa (raw, json)
Hash identifier: e1euQSgvNPaZCgJIV3j+2OYgvgx6PnBM7j4G1Yktsoc=
Subject key identifier: 90:99:80:EC:6C:8A:BE:B2:BB:6B:2F:32:52:B0:0B:F2:DE:1E:F8:C9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C285656E2447A2A9C95E15120
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a20f8236-39a1-32d8-9efa-9f8b8973d345.roa
Signing time: Fri 12 Dec 2025 02:00:30 +0000
ROA not before: Fri 12 Dec 2025 02:00:30 +0000
ROA not after: Thu 12 Mar 2026 01:00:30 +0000
asID: 24319
IP address blocks: 23.200.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 17 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:28:56:56:e2:44:7a:2a:9c:95:e1:51:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 12 02:00:30 2025 GMT
Not After : Mar 12 01:00:30 2026 GMT
Subject: CN=587af311-aee9-45f7-bf2a-d865655f6ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:2b:38:e5:af:14:fc:97:34:7f:c7:9f:9d:
be:1d:5f:63:2c:67:1f:a2:b8:3e:e6:67:1e:b7:f7:
e2:8f:53:8e:01:d5:25:08:d0:70:8f:f5:aa:0a:52:
5e:68:45:42:cb:64:0e:26:01:d6:5b:04:b3:82:43:
aa:41:86:98:23:9c:b3:a1:af:4e:bd:a0:02:9e:37:
6a:88:2e:b2:e5:36:9c:dd:67:63:e5:ff:71:d8:e0:
00:a4:70:2d:fa:20:46:e1:be:0b:25:a8:d1:57:1d:
04:09:ff:91:c8:89:64:a5:36:5f:c0:48:41:ae:9e:
5a:4e:46:61:5f:73:b3:1f:2d:37:d6:c4:98:89:db:
d4:bd:76:98:5e:0b:a7:80:12:b9:f3:c2:b8:ce:d0:
a4:0c:ca:e1:2f:0a:e4:b6:45:f9:f0:37:60:24:63:
33:ea:66:e1:96:88:51:15:3d:c7:d0:1c:f8:06:b3:
ab:da:75:c9:7e:11:0e:9b:3e:07:7b:63:e6:0d:2c:
a3:5b:5c:01:a8:94:38:a0:c0:04:a9:af:38:df:fd:
3a:56:cb:2a:98:1d:d4:9c:50:70:03:92:5f:c0:67:
78:e2:67:f5:fa:a6:4e:b0:9f:ca:7c:e0:cc:b2:7d:
36:13:d0:ca:13:32:39:8d:ad:28:54:d3:8b:36:3f:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:80:EC:6C:8A:BE:B2:BB:6B:2F:32:52:B0:0B:F2:DE:1E:F8:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a20f8236-39a1-32d8-9efa-9f8b8973d345.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.200.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:03:66:0b:bf:46:57:af:41:36:9d:f1:a1:58:da:57:e8:01:
cd:f6:62:fd:56:65:cf:49:4b:f1:75:6f:9e:df:f0:26:76:69:
ec:fa:34:0e:73:36:60:dc:c5:bb:11:d8:ba:8b:db:6b:bb:b5:
08:88:73:70:0c:71:3e:f1:38:ed:4d:50:a0:92:ea:20:af:05:
23:ed:c0:bd:77:85:e0:ae:ba:97:9f:b2:80:fa:a5:98:42:08:
a2:ec:aa:f8:ff:b0:49:20:42:bd:cb:5e:d0:7d:bc:fa:c9:3b:
0e:b1:ae:d6:d9:c6:7b:42:50:3f:da:06:f3:4d:86:38:d6:d4:
53:52:3b:04:ea:3b:a9:9d:02:c4:3b:af:a9:87:06:ad:c0:6c:
8a:b0:07:b4:51:e0:cf:f3:7a:63:6c:0b:27:93:b1:50:c2:c0:
46:7e:2d:b5:82:4e:03:c5:7f:62:51:10:54:fa:38:c4:b8:97:
22:22:4a:2b:44:ef:06:f9:de:92:00:57:5e:f7:a0:31:e2:fb:
dd:b9:85:d3:f9:97:6f:f9:ee:6a:40:03:eb:0a:01:ec:e2:bc:
35:38:33:9d:18:51:c9:4b:3a:be:a2:22:fc:c6:a9:5b:11:93:
52:69:a9:85:c5:a8:37:55:b0:32:bb:19:09:23:e2:fd:c4:4a:
be:8e:14:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 10:39:59 2025 by rpki-client