This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c35fde-4dd9-39b8-a4eb-7fb0bf93e57f.roa
File: 24c35fde-4dd9-39b8-a4eb-7fb0bf93e57f.roa (raw, json)
Hash identifier: qgEvtHXFc7OAn6URZvY8TI8fZBYgrhsX9r4YF784Cus=
Subject key identifier: E8:AF:5A:7F:EC:A1:05:FF:9C:39:DD:D3:E7:FE:DF:55:46:D2:C8:43
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C5A9674F0A6385C883A460278
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c35fde-4dd9-39b8-a4eb-7fb0bf93e57f.roa
Signing time: Tue 30 Dec 2025 02:00:30 +0000
ROA not before: Tue 30 Dec 2025 02:00:30 +0000
ROA not after: Mon 30 Mar 2026 01:00:30 +0000
asID: 19905
IP address blocks: 173.20.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5a:96:74:f0:a6:38:5c:88:3a:46:02:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 30 02:00:30 2025 GMT
Not After : Mar 30 01:00:30 2026 GMT
Subject: CN=182d19b0-3b3d-4a82-b4c7-1ce7b9a444cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a0:3a:7c:a4:69:de:b9:1f:f1:2f:cd:67:a4:
b2:20:68:c6:8e:ba:26:b3:8b:3c:66:96:d2:ea:ed:
86:da:b0:25:4f:7e:b0:81:70:4c:2f:40:da:99:33:
f5:93:28:c5:91:11:41:2a:99:5f:94:ea:dc:74:f1:
e2:5d:e7:c2:1b:71:f9:14:0b:31:75:cb:98:a8:1d:
03:ea:6e:c4:10:22:93:35:4e:c4:33:89:fa:7d:3b:
f7:fb:7e:72:ae:4e:d9:15:ea:ce:11:43:61:14:2e:
db:35:83:6d:92:6d:7d:8f:4a:2b:34:63:9b:46:7d:
2b:b8:d3:81:4a:94:53:0c:8b:86:63:ed:2d:07:3c:
7b:d2:89:c8:36:a4:b0:66:8b:92:53:13:30:36:df:
17:9c:79:5c:bb:8c:1b:f3:a5:b3:5c:50:a4:5b:cb:
82:f2:03:22:07:bd:fc:18:fe:2b:00:44:7b:4c:09:
2c:ea:61:d8:d0:f8:0e:0d:91:67:62:bb:c1:4f:94:
0a:43:63:87:49:9a:fb:8a:69:6c:eb:32:cc:ec:6b:
3a:11:a5:e8:59:05:d4:20:80:4e:87:46:4b:a1:65:
b6:f9:20:9b:9b:90:7a:20:23:92:0b:fc:c3:04:5f:
cf:68:0e:28:54:80:5c:5f:8a:e2:d8:2e:44:ec:a6:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AF:5A:7F:EC:A1:05:FF:9C:39:DD:D3:E7:FE:DF:55:46:D2:C8:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c35fde-4dd9-39b8-a4eb-7fb0bf93e57f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:6c:de:61:32:ac:04:fb:07:64:a8:b3:01:46:cd:12:1b:35:
57:21:11:93:8e:d5:06:11:cb:90:ef:07:39:02:b1:f5:24:2e:
ac:63:eb:77:37:d1:f9:42:31:e0:92:1e:3a:28:45:34:af:28:
cd:91:b8:c4:3b:cc:e5:d1:f5:c2:d3:e4:10:81:d8:62:49:d5:
ec:c1:b4:f2:1a:98:16:04:67:c3:d0:8f:03:99:4d:eb:13:24:
80:8f:3f:b7:c9:c0:7f:89:23:3f:88:39:b5:ae:a8:ec:e0:9e:
35:c4:3f:7b:e0:65:b7:d0:c4:f7:70:99:f8:5b:bd:83:7f:d0:
1d:04:7b:50:7b:b7:15:ff:1a:ed:d3:ce:b7:f2:19:dd:a9:39:
ba:7d:17:0f:a2:dc:2d:99:fc:33:fd:bf:62:c5:40:05:b6:77:
36:8b:cb:ab:66:ee:6e:4c:3b:1c:d8:9b:cb:ad:1d:83:af:54:
bc:11:7e:1b:5d:21:a7:48:6d:6d:69:94:36:a4:52:7f:5c:5a:
cf:d3:c6:dd:ff:d5:74:41:27:cf:9e:a2:2c:03:56:c9:61:ff:
68:83:ec:04:54:5b:58:d3:c3:57:af:02:25:f9:da:93:85:18:
4d:48:b1:80:dd:cc:ec:0c:ee:27:f9:81:cd:69:a6:6d:ab:fb:
7b:36:ff:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 16:28:20 2026 by rpki-client