This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bc28f89-3b3c-32ba-80a2-1dfcd5629230.roa
File: 0bc28f89-3b3c-32ba-80a2-1dfcd5629230.roa (raw, json)
Hash identifier: lJiMQnqrlUFC+rWBfkeSvuLiVJ7th5VJmfh9/w7cEVw=
Subject key identifier: B2:92:62:7E:EA:C8:0B:44:C1:E6:94:66:26:7A:69:7E:65:C4:84:0B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C42DC11527F16E142D2714C38
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bc28f89-3b3c-32ba-80a2-1dfcd5629230.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.23.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:dc:11:52:7f:16:e1:42:d2:71:4c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=b27e77f4-9aa4-45d0-9802-2b5339cf43f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:6c:92:9a:70:a7:f5:fb:72:45:1d:c8:63:
4b:f5:50:a0:32:5a:6d:9f:68:90:74:a6:f5:f2:0d:
ea:cd:c0:4a:60:bb:5f:08:31:10:aa:d7:a9:5d:dc:
12:72:36:74:73:54:26:20:ff:98:5d:43:09:d0:7d:
7e:f7:2b:20:8d:2f:7e:8d:41:d5:15:e8:20:ea:87:
c1:f7:71:fc:6b:76:1e:a2:da:7d:f1:57:7b:79:14:
e6:75:1c:3b:8c:22:d7:16:ec:d0:af:5e:aa:70:e8:
8a:34:ae:90:2b:66:1e:95:34:9b:aa:6a:c3:60:63:
d3:3c:40:d4:1e:6a:f3:b0:d8:61:22:1c:37:8a:b3:
49:aa:77:1e:f2:d8:69:57:39:4a:63:26:be:1a:3a:
91:cb:7b:fb:34:a1:14:8f:8a:03:98:29:59:e8:e4:
4e:71:9e:e2:b7:af:fd:d5:74:4e:f4:f7:c4:46:bc:
f4:2b:11:50:62:a3:c8:8f:ba:41:ae:64:d3:bc:ed:
36:21:de:33:d4:06:96:12:09:70:39:38:29:60:e1:
94:f4:b0:35:f2:61:42:7a:e6:82:0d:f8:5e:1d:61:
e5:df:3d:2f:7e:f5:8a:91:90:d8:df:39:8c:3c:e0:
96:67:26:c8:7b:8a:05:88:72:0c:e5:7e:ad:d1:66:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:92:62:7E:EA:C8:0B:44:C1:E6:94:66:26:7A:69:7E:65:C4:84:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bc28f89-3b3c-32ba-80a2-1dfcd5629230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.94.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:ef:da:66:64:bc:23:09:e6:87:a1:d9:dc:e0:17:ac:12:03:
61:56:fa:03:03:49:6b:d8:bb:88:03:70:77:80:08:76:a4:da:
5d:88:5c:f8:f9:6c:a1:86:1d:ef:26:29:56:5e:b1:4f:08:1a:
72:c6:b6:bf:92:e6:c9:06:85:ba:00:ed:dc:7f:d4:46:96:f0:
a4:17:20:fa:0f:97:ac:2e:de:bd:7a:72:92:a5:df:8c:28:2a:
3c:d1:87:6f:26:e6:68:d8:50:6e:05:39:f0:64:2c:e5:ce:02:
1e:33:83:f2:3f:30:6b:12:b4:bb:77:00:39:ee:c2:0e:9a:af:
65:57:54:cb:a4:ca:0e:62:a2:aa:e4:b4:0a:3a:b3:e0:e7:67:
c4:78:03:61:0e:36:a1:f3:dd:17:f3:d1:4c:58:1f:8b:43:a5:
cc:61:b4:28:9a:1b:e5:78:f2:51:26:10:ae:b4:3c:32:bf:fd:
6c:ca:89:39:5d:4e:27:7b:bb:1e:eb:d1:c8:d7:fa:f9:b1:24:
ef:98:93:fd:c9:7c:37:6b:f1:22:5c:1c:2d:c4:b1:fe:ba:a2:
95:5e:d0:e6:d6:7e:09:dc:23:64:b8:5c:17:37:c6:60:38:a9:
50:cc:9a:b8:d0:37:fc:96:08:91:05:b5:66:db:98:c5:bd:34:
c3:bb:77:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 09:47:21 2026 by rpki-client