This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a392e53-18e1-35fa-9a7d-ccbb627609aa.roa
File: 0a392e53-18e1-35fa-9a7d-ccbb627609aa.roa (raw, json)
Hash identifier: yZDwv1uOhpXoMzaoUlF+XdLlbhwVP+CQVaMKUg1wJ00=
Subject key identifier: 28:99:B8:C1:89:DD:8E:CE:63:6B:A8:E1:79:1C:2B:7D:6B:BC:89:24
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584BDA2B336B88BD789B26EDBA00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a392e53-18e1-35fa-9a7d-ccbb627609aa.roa
Signing time: Fri 14 Nov 2025 02:00:30 +0000
ROA not before: Fri 14 Nov 2025 02:00:30 +0000
ROA not after: Thu 12 Feb 2026 02:00:30 +0000
asID: 19905
IP address blocks: 173.29.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:da:2b:33:6b:88:bd:78:9b:26:ed:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Nov 14 02:00:30 2025 GMT
Not After : Feb 12 02:00:30 2026 GMT
Subject: CN=36c7d4e6-01f1-4111-95c5-8e948842e892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:a1:65:6b:ba:fa:fa:65:2e:cd:9e:32:d2:
cd:40:22:d3:12:a2:1c:ac:17:94:da:a6:b8:f6:f9:
a6:fa:ae:ad:74:69:07:57:0b:57:42:e2:87:cb:47:
f6:b6:d8:2d:82:cb:19:8e:5c:d9:30:60:37:52:60:
e0:11:89:b1:9e:84:9e:de:5d:43:32:4b:81:5b:c9:
95:50:e6:3a:d9:75:43:d7:54:e3:b2:bc:86:73:e4:
60:f2:22:fa:64:f2:74:c5:a6:27:04:8f:0f:19:b4:
cd:28:be:cc:50:8e:a6:83:e7:db:c8:53:bd:6e:d4:
ab:e5:6e:52:cc:cc:62:50:8b:11:42:cd:95:db:18:
11:e6:26:47:f4:da:f6:e8:d7:67:d6:05:62:20:73:
f0:51:54:ed:81:34:25:a0:b3:08:e4:76:17:79:21:
2d:df:3a:05:7a:9e:73:f5:96:d6:92:db:6b:9e:9b:
ab:7a:a1:92:3d:11:7e:d1:10:ca:38:44:28:25:47:
c2:d0:6f:97:cb:a8:7c:2b:77:33:1b:b0:9c:37:52:
92:00:ba:3d:d5:d8:00:9f:80:fe:b1:6b:71:50:cd:
ac:b1:99:70:ae:1f:a7:d9:8e:74:f9:2d:52:b7:8a:
ed:dd:97:a6:2f:75:19:32:61:2c:99:e6:15:c7:7c:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:B8:C1:89:DD:8E:CE:63:6B:A8:E1:79:1C:2B:7D:6B:BC:89:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a392e53-18e1-35fa-9a7d-ccbb627609aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:2c:53:01:18:ab:a8:de:dc:a0:8f:0e:08:3b:25:99:2d:7a:
86:f9:b8:e8:17:5c:20:81:8d:e1:0e:75:d3:4f:7b:73:2a:af:
f7:88:55:73:bf:4e:3d:34:90:e6:f3:58:be:a8:42:1e:be:11:
91:13:7c:0f:8c:05:c0:f6:d5:24:b6:cd:27:80:31:d4:8a:2b:
6f:ca:ba:32:4e:6a:9d:44:4a:d0:45:6f:ec:f9:5b:38:35:f4:
f9:ab:f4:56:7a:57:d7:aa:5d:60:a9:d5:2b:f7:98:c3:f8:e9:
af:1e:99:68:75:2f:81:f3:36:5c:10:eb:3f:79:cf:03:ce:15:
3e:47:4f:3a:cf:15:cc:76:c4:93:cf:ef:70:f4:8a:a3:ce:cb:
28:0e:60:65:ce:b9:c1:48:49:9b:4a:d4:f4:4a:b9:0b:16:d3:
ea:35:6a:96:d2:9b:6f:e0:29:7b:19:1d:6e:d0:84:7b:ba:5d:
1b:c4:06:80:30:5f:c8:b7:02:ca:2c:c0:d6:da:ec:44:c9:5b:
40:9f:44:f4:42:4f:89:00:29:98:c3:d3:a3:ce:5b:1b:46:61:
a2:53:23:89:bb:aa:67:57:65:a3:85:5e:3c:76:4b:01:0b:0d:
52:7b:9c:e1:ff:d6:b6:33:0e:82:a3:15:9e:23:2d:4b:7c:83:
2c:98:40:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 10:36:26 2025 by rpki-client