This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96d7b2e-fba2-392f-89a6-b3544d82800d.roa
File: d96d7b2e-fba2-392f-89a6-b3544d82800d.roa (raw, json)
Hash identifier: iOyq7000qcpdiNgdQKQTcykcb957tqYs6fpZei/nSr4=
Subject key identifier: F4:19:47:1A:35:37:78:38:98:41:39:0E:35:A1:3D:0E:FD:13:95:CC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584C4CA13AB48F25529369B6FD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96d7b2e-fba2-392f-89a6-b3544d82800d.roa
Signing time: Thu 25 Dec 2025 02:00:31 +0000
ROA not before: Thu 25 Dec 2025 02:00:31 +0000
ROA not after: Wed 25 Mar 2026 01:00:31 +0000
asID: 20940
IP address blocks: 23.223.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4c:a1:3a:b4:8f:25:52:93:69:b6:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 02:00:31 2025 GMT
Not After : Mar 25 01:00:31 2026 GMT
Subject: CN=068f5f6d-c4a9-4a75-b0b6-f4e7f1c22897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:3b:11:9c:77:e3:34:18:1f:a0:f9:0d:34:
3d:1a:1d:56:91:1e:f5:7e:86:cc:5b:68:ce:94:8d:
3b:10:68:c8:f5:b8:4f:7b:b5:45:9b:e5:de:86:9b:
3b:1b:15:b2:22:68:c6:e4:93:23:e8:fb:94:27:32:
7d:4a:79:0f:2c:e2:95:c9:6d:72:6f:34:ac:92:36:
93:af:8d:30:4d:ce:ce:61:b8:ad:5f:fc:9c:f9:7a:
17:9e:d5:d8:37:eb:d1:2f:54:66:94:6c:d8:a0:dc:
21:d8:ed:49:72:0a:d4:28:8b:89:3e:67:fd:2e:5a:
a7:83:c7:e9:5d:e1:4a:1c:ed:1f:66:88:7f:c9:85:
b0:6d:6f:01:24:da:20:00:56:12:46:5e:22:ed:83:
7d:f6:ee:04:31:4e:82:3d:67:ed:06:c5:85:ce:95:
05:0d:4d:cd:43:ac:94:4e:89:71:00:8f:f9:75:43:
2c:d0:44:7c:b4:05:02:b4:65:64:7e:5f:d3:63:08:
5a:c6:ad:1f:9d:e7:8c:59:48:cd:12:26:9f:71:18:
66:9f:83:42:9c:07:ce:a9:97:ce:38:89:55:96:79:
d4:4a:16:a0:1f:f5:0e:bd:40:01:a1:2c:cf:b3:34:
53:6d:dc:be:f5:ed:a2:14:3f:9b:cd:a3:a3:1d:e6:
b7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:19:47:1A:35:37:78:38:98:41:39:0E:35:A1:3D:0E:FD:13:95:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d96d7b2e-fba2-392f-89a6-b3544d82800d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.223.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:0e:c3:dd:81:56:d0:1c:7f:e4:90:98:a4:cc:2f:1f:a3:80:
33:08:75:08:74:ee:7e:40:33:48:47:5e:2f:a4:77:2d:f3:d6:
be:0f:60:6c:84:e4:55:e5:1e:36:f2:fd:33:b6:b0:88:d8:a6:
b0:30:d0:24:c3:ff:93:06:39:18:a1:bf:e4:42:d6:c3:74:02:
52:c3:d4:4d:26:d8:15:b4:0d:3c:c1:98:d7:c2:b3:e9:ca:60:
9b:93:ef:b4:9c:ce:bd:fc:66:af:8a:3c:5e:cf:dc:af:29:1a:
dc:5b:79:b1:8f:13:c5:aa:72:d5:c1:fc:e6:66:95:87:af:2e:
e8:31:b3:db:39:1a:fe:d4:3a:87:eb:42:32:ca:6f:ca:a7:f1:
78:64:82:cf:d3:7a:41:3a:b2:c3:94:f8:4d:a8:fa:d4:0f:ed:
b5:56:bb:9a:2b:ae:ce:4a:62:65:99:83:a4:31:f4:dc:87:64:
d6:78:a9:5d:cc:29:5e:38:db:9b:88:3f:11:d9:64:7c:f9:1b:
73:d7:3f:99:3c:4a:15:59:43:5c:7f:9b:22:9b:c7:93:91:91:
c2:0f:bc:ff:10:6d:c8:58:85:72:93:a7:ea:07:a1:88:65:2d:
a4:a9:d7:4a:f9:2b:5d:63:83:d6:77:13:12:8f:00:e3:6b:b3:
e7:66:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 11:12:40 2026 by rpki-client