This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0038d472-acfa-32c8-9dd0-907eb07f7b4f.roa
File: 0038d472-acfa-32c8-9dd0-907eb07f7b4f.roa (raw, json)
Hash identifier: h0MLvSsko55CjAS16eWieumizE99CImR/SUA6+8eQK4=
Subject key identifier: BD:1F:F3:4B:A4:B0:C6:B4:88:91:7D:53:89:56:5A:72:33:47:0E:D3
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C55011CBA24F8E9BBE4B41E60
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0038d472-acfa-32c8-9dd0-907eb07f7b4f.roa
Signing time: Sun 28 Dec 2025 02:00:30 +0000
ROA not before: Sun 28 Dec 2025 02:00:30 +0000
ROA not after: Sat 28 Mar 2026 01:00:30 +0000
asID: 30036
IP address blocks: 173.28.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:55:01:1c:ba:24:f8:e9:bb:e4:b4:1e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 28 02:00:30 2025 GMT
Not After : Mar 28 01:00:30 2026 GMT
Subject: CN=ad934c4c-6c54-4f7b-a95e-d2b697277bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:58:d0:68:58:a9:9d:49:65:cc:42:51:fb:
bc:ef:8f:c1:68:4b:fd:14:30:68:9b:80:8c:98:44:
d3:f7:2a:63:a4:b9:83:e3:ca:06:73:bf:0a:b2:ac:
c6:9f:f9:76:b4:80:41:1c:f7:c3:19:5c:73:79:49:
d3:3e:34:26:75:3c:da:6b:ef:65:9e:80:43:89:e0:
af:1d:5e:b9:22:eb:c4:2d:43:cc:0b:27:3e:e0:04:
5c:ec:c8:21:bd:27:60:b1:eb:2b:63:4a:b1:f2:59:
91:c8:55:0e:37:ac:9b:15:8c:8c:d4:fc:90:cd:16:
18:ab:be:19:91:16:9e:fa:2e:c3:fd:74:5b:28:95:
e8:27:70:0f:11:b6:4b:7a:37:0e:55:1d:bc:93:bc:
4e:0d:be:fb:19:ab:13:17:13:8d:33:da:0b:82:27:
32:79:95:b1:dd:f2:0e:e2:95:f3:e7:02:c4:32:d0:
4d:9d:e6:25:7b:cb:02:e8:42:7f:1d:ef:e8:3c:4d:
07:70:32:9d:76:16:39:04:97:bd:87:25:5e:4d:98:
23:53:29:21:d0:0e:a4:48:fa:a9:d2:d7:f8:cb:ea:
63:c7:9e:a1:a2:08:66:f9:a2:6a:5d:d6:d3:ed:df:
4a:b5:f9:bf:6b:d8:1f:61:d4:cd:1f:3a:69:16:e9:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1F:F3:4B:A4:B0:C6:B4:88:91:7D:53:89:56:5A:72:33:47:0E:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0038d472-acfa-32c8-9dd0-907eb07f7b4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:b9:23:c5:81:10:c9:f8:f3:0b:f8:78:d1:d3:9c:73:95:ec:
ad:ad:d6:85:3b:58:7e:21:43:bc:42:b0:e6:0d:02:7f:fe:61:
ff:f4:60:51:50:8a:e8:84:34:9c:a0:26:d0:99:89:5e:0a:4a:
b4:5d:23:56:81:d8:2a:bd:53:f7:28:d0:0b:39:b4:b9:bb:f3:
dc:59:80:6b:fc:74:62:52:4f:c6:76:81:85:0e:52:21:d6:ce:
8d:0f:3b:29:19:98:ed:c7:0c:7f:e1:77:29:c4:15:21:87:86:
b2:98:3f:5f:ad:50:0f:f7:c3:cd:df:9a:64:a4:de:b5:a0:69:
f6:c3:34:f7:48:5c:9a:c5:03:37:ff:72:27:4d:93:a9:b5:7b:
f8:52:77:90:52:e9:25:b0:ac:53:73:a2:ad:11:dc:69:16:88:
9b:d8:fd:cd:71:a3:fc:ed:eb:cc:36:02:6d:05:76:39:bd:a9:
0a:77:7e:de:b6:12:da:b2:4c:57:28:00:10:b4:54:5a:f4:cf:
62:02:49:ed:a5:a0:64:44:c8:e6:e1:7c:c7:71:ce:af:8f:ab:
ee:ba:88:6b:d8:89:bf:0c:c5:d6:47:5c:ea:84:c5:4d:0e:8a:
f4:6b:77:ea:9a:dc:d5:9e:e6:be:fe:8a:ec:76:5c:33:21:c4:
78:b4:ac:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 17:05:32 2026 by rpki-client