This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59d408be-4188-3cb9-8162-6224102660ec.roa
File: 59d408be-4188-3cb9-8162-6224102660ec.roa (raw, json)
Hash identifier: tD2Q0YHFSFcJAdVJHGa87QC9Of/rV/q5/APxUCR3Ibc=
Subject key identifier: F5:43:80:CF:3E:14:BA:69:F0:E5:52:0E:48:9A:CB:A2:EC:29:FC:3B
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584BFFDBB0340D67F04E01A7E180
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59d408be-4188-3cb9-8162-6224102660ec.roa
Signing time: Thu 27 Nov 2025 14:00:40 +0000
ROA not before: Thu 27 Nov 2025 14:00:40 +0000
ROA not after: Wed 25 Feb 2026 14:00:40 +0000
asID: 16417
IP address blocks: 23.90.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 01 Dec 2025 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ff:db:b0:34:0d:67:f0:4e:01:a7:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Nov 27 14:00:40 2025 GMT
Not After : Feb 25 14:00:40 2026 GMT
Subject: CN=a84f1fdc-96f4-4021-976f-f468a5dd751c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:c8:6a:1e:af:5f:3c:fd:96:dd:86:83:1a:
d1:42:10:f2:b8:f4:8f:7b:03:a3:e1:ce:77:c2:3f:
17:b1:cf:3a:a4:1d:36:d8:54:73:a7:71:8d:b2:2f:
a0:47:6c:c5:79:b8:aa:cd:2b:86:48:a2:cb:8d:79:
a0:21:79:41:5d:56:02:25:54:0c:1d:35:37:82:55:
a0:c8:95:d8:0e:e6:dd:8f:9b:40:ab:b0:97:d5:e1:
da:11:8a:be:e5:ee:6f:ea:13:c1:f8:7f:37:c0:7f:
54:2e:0c:5d:ab:0d:32:99:72:d5:4f:79:f4:e3:c8:
20:75:85:91:a1:1e:80:08:6e:e4:16:49:e4:6a:6e:
4c:72:75:90:4a:74:2d:09:ef:d1:3c:fb:37:2d:9b:
0f:a0:36:3c:fa:47:11:8e:9e:50:ba:55:02:8d:d9:
46:7e:0d:4c:ae:6a:08:19:0a:71:01:a2:8c:7e:5b:
f8:d0:31:ee:eb:72:8f:f9:4e:bb:39:58:4c:37:ac:
08:12:fe:9a:db:f2:49:73:f6:9d:e7:67:b3:90:fc:
85:a5:1c:1b:e5:05:92:0c:29:3c:e0:60:7e:f9:ae:
85:b3:71:d9:5c:a0:d5:8c:cd:22:69:72:6c:be:7d:
46:83:a5:9b:56:a7:81:fa:d3:65:83:eb:a4:fc:ca:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:80:CF:3E:14:BA:69:F0:E5:52:0E:48:9A:CB:A2:EC:29:FC:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59d408be-4188-3cb9-8162-6224102660ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.90.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:16:b7:db:65:94:b4:41:b9:a3:7b:a2:06:aa:ed:68:3b:20:
6f:a1:5d:0f:f2:3d:15:01:51:61:92:13:85:e8:19:26:44:66:
89:63:c5:ab:a2:f2:54:7c:c9:ad:39:c7:83:d8:0d:9c:9f:a4:
43:60:06:6c:7f:e4:aa:32:0f:0b:7a:1a:20:9b:8d:91:5d:3c:
44:ac:ae:ba:11:36:33:3d:cc:75:e1:d5:55:21:f5:d2:63:dc:
b2:be:c0:1f:18:90:12:15:22:35:b5:e5:3c:96:db:07:d2:1a:
80:42:c8:35:a3:68:06:87:05:01:8a:25:60:ae:6f:e1:9e:eb:
59:12:01:e5:9c:82:8e:74:7c:5a:70:33:6b:0f:a5:36:0b:e9:
9b:64:e8:c0:21:8a:ab:b4:c0:40:b0:4c:f1:a1:5d:ca:c6:0f:
eb:e0:90:d0:38:ee:20:ae:4d:83:9c:b3:9e:04:fe:fc:87:0e:
c0:ab:cf:dc:d2:d9:1c:30:95:be:d0:b4:db:2f:a1:43:dc:49:
f0:49:39:d9:16:ee:e4:d1:54:28:72:16:f5:a7:81:96:c0:2e:
98:72:3f:ff:b3:7d:1f:52:56:a1:e4:c7:67:62:d7:7d:d2:d1:
23:5f:28:3f:7b:7d:73:3e:b8:0e:dd:29:9f:f7:9e:55:3d:ee:
e8:fa:47:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 30 16:25:30 2025 by rpki-client