This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/089d5c01-cfcf-37d2-9dfa-f966a06817c1.roa
File: 089d5c01-cfcf-37d2-9dfa-f966a06817c1.roa (raw, json)
Hash identifier: on/f6nn1+1Wo+9LcOgNUKK7Kukbx1IPM8uxLrwQdaLc=
Subject key identifier: 82:4A:0C:FC:89:A6:F6:D5:6C:29:60:31:A5:46:CA:0A:2B:BD:FB:14
Certificate issuer: /CN=0be8264a-e514-463e-8183-9b3e83f9438d
Certificate serial: 010D0C9F4328584BCF006555D6EFFD96C4AA8380
Authority key identifier: EA:36:C0:3A:42:78:09:A6:73:76:62:12:55:20:CE:23:38:29:78:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/089d5c01-cfcf-37d2-9dfa-f966a06817c1.roa
Signing time: Mon 10 Nov 2025 02:00:31 +0000
ROA not before: Mon 10 Nov 2025 02:00:31 +0000
ROA not after: Sun 08 Feb 2026 02:00:31 +0000
asID: 400333
IP address blocks: 23.130.120.0/24 maxlen: 24
23.130.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:cf:00:65:55:d6:ef:fd:96:c4:aa:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be8264a-e514-463e-8183-9b3e83f9438d
Validity
Not Before: Nov 10 02:00:31 2025 GMT
Not After : Feb 8 02:00:31 2026 GMT
Subject: CN=c3242bac-7b13-491f-accc-c0dc9bd9f82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:c5:f8:e1:8f:1d:8c:e5:f0:27:8a:0e:4b:
03:08:47:15:aa:00:7e:c7:e5:6a:7b:2a:a8:21:2f:
a8:ee:d8:4f:6a:1a:de:f9:c4:35:64:7d:b1:6a:a8:
63:c0:15:4b:ce:e2:f1:89:90:a6:04:66:72:19:88:
51:ea:2b:06:3c:8b:02:ec:44:07:45:86:6e:cb:9b:
b9:e0:27:f9:66:3d:de:c6:4f:86:07:79:53:52:e5:
46:20:fe:42:82:03:4c:0b:96:80:bc:6a:8a:b2:42:
ac:fc:3f:b1:bd:c1:52:48:07:b4:1f:75:90:a3:99:
c7:44:08:91:2a:50:92:22:a6:05:33:3e:c0:94:1b:
a0:ad:b1:85:b1:91:d4:7e:0f:eb:76:31:6b:3d:d6:
d2:bf:71:39:0e:b9:e3:10:82:1e:eb:98:e2:48:67:
1b:ea:6d:48:b1:7a:78:96:d3:43:96:76:cf:c0:d9:
01:8c:95:7c:7e:52:9d:ed:1e:c3:f3:02:7d:49:c9:
96:2a:bb:4d:93:47:d8:79:c5:76:27:23:46:eb:ab:
a4:c4:ff:80:f7:27:b4:9a:33:c8:97:e6:d8:5f:b9:
7b:39:46:88:8c:ff:a8:ed:20:5a:75:c5:66:f1:f4:
ca:77:d1:9e:6d:25:dc:31:74:6d:3a:a2:ba:0f:29:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4A:0C:FC:89:A6:F6:D5:6C:29:60:31:A5:46:CA:0A:2B:BD:FB:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/089d5c01-cfcf-37d2-9dfa-f966a06817c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.crl
X509v3 Authority Key Identifier:
keyid:EA:36:C0:3A:42:78:09:A6:73:76:62:12:55:20:CE:23:38:29:78:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:ff:98:a3:87:eb:8e:b8:4c:dd:47:94:3f:6a:c4:15:13:77:
bb:98:4d:37:d4:b5:26:ff:19:cb:36:2a:1b:9f:9f:69:85:38:
9e:75:b5:5d:f9:8d:05:54:71:d8:d2:eb:da:ab:a4:2c:fe:dd:
60:c1:04:c6:80:96:cb:1c:a7:8c:97:f3:9b:ad:41:bc:f5:0d:
94:53:95:04:06:ce:47:3c:38:ef:de:1c:44:1f:d0:8f:cf:9f:
32:bd:be:76:36:f0:1e:f1:a5:f9:2e:96:e8:ee:b6:63:fe:05:
68:3a:17:71:1e:00:5d:c5:dd:1e:af:fc:33:42:1e:fb:d3:c6:
b2:66:11:87:e3:11:bd:1a:dd:d3:d5:9a:61:67:2f:e0:0d:79:
52:1a:12:c7:a7:ab:a4:0e:23:75:48:27:0f:f1:f7:63:2c:fd:
e7:0c:1e:1e:91:75:ac:73:f2:7b:ff:6f:92:5d:a5:a0:47:ef:
19:3d:83:fc:03:bd:19:e8:4a:0f:c8:80:f3:c1:48:28:fb:bd:
87:87:c9:3a:0f:43:ef:87:33:2c:89:e3:a4:46:04:33:df:d7:
8b:cd:a0:04:e7:92:a9:25:15:89:5a:20:42:30:74:ee:4f:ec:
b4:be:c5:e1:0d:1c:ba:3d:ae:b6:86:2b:01:b7:26:79:04:e6:
09:26:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:22:48 2025 by rpki-client