This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b095965-ccea-39cb-a638-b93d2fcd4370.roa
File: 2b095965-ccea-39cb-a638-b93d2fcd4370.roa (raw, json)
Hash identifier: 88T4nb0P5H4DbHt/89F3FUP0NEXFwyo86LL0xUs/u+E=
Subject key identifier: D8:A0:B2:AD:1E:80:E4:69:98:C5:28:0F:A4:48:C3:17:3D:BD:5D:19
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584BD8C5C976476A1F59C410F800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b095965-ccea-39cb-a638-b93d2fcd4370.roa
Signing time: Thu 13 Nov 2025 14:00:38 +0000
ROA not before: Thu 13 Nov 2025 14:00:38 +0000
ROA not after: Wed 11 Feb 2026 14:00:38 +0000
asID: 30036
IP address blocks: 173.17.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d8:c5:c9:76:47:6a:1f:59:c4:10:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Nov 13 14:00:38 2025 GMT
Not After : Feb 11 14:00:38 2026 GMT
Subject: CN=63be7cdc-ffee-48bc-ba14-13761b732cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ed:8c:1c:a9:2d:20:06:8c:d3:d3:9a:3a:9d:
d9:76:bf:cd:fa:f5:32:66:52:5b:c7:32:61:7e:f5:
f6:c3:52:eb:ed:1e:c4:99:a4:c3:14:bb:c9:d1:85:
ec:9c:eb:88:4e:75:20:21:87:65:01:61:d3:a7:6c:
d0:7b:10:8a:ac:aa:23:8d:08:90:1e:39:6c:3c:08:
db:38:58:b2:cd:96:a3:0a:51:11:f0:ef:35:cd:05:
25:ba:68:ad:a2:96:0c:31:14:a6:0f:d9:eb:a5:84:
67:1b:b7:82:6c:6f:cd:78:13:24:55:f8:d3:7c:d4:
11:60:e7:e1:bf:68:e2:46:c5:e9:67:fd:bd:6d:d9:
a5:71:64:92:7f:9c:c2:96:7d:8a:da:94:57:ad:b6:
cf:6e:1f:8f:e2:36:cb:f1:e1:26:9c:01:dd:ce:93:
44:f5:85:16:78:c7:3c:a3:50:5c:2c:1b:94:6c:8f:
79:82:da:2d:0f:89:88:82:00:ac:b6:26:7f:73:da:
df:e1:8e:8a:0c:f8:c7:2d:cf:26:9b:5a:9b:67:43:
c9:97:3d:e6:05:25:b8:b9:16:e2:a2:3c:68:46:a3:
70:5c:74:31:ef:6f:a7:59:62:60:63:60:90:ae:61:
04:fc:21:5f:a2:b3:d1:67:d4:49:bd:05:49:48:c8:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A0:B2:AD:1E:80:E4:69:98:C5:28:0F:A4:48:C3:17:3D:BD:5D:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b095965-ccea-39cb-a638-b93d2fcd4370.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:71:c1:08:56:f9:05:4d:d8:d0:04:2e:a3:55:db:25:43:16:
c8:33:73:c6:96:69:bd:e3:7a:57:cf:f5:92:21:e5:0a:0d:2f:
df:72:d3:c5:65:54:49:71:c6:34:7c:4b:fa:8a:2c:9d:0e:36:
0f:61:0f:03:2a:f8:6a:12:0c:ce:be:b8:59:f9:c3:fa:1e:dd:
9f:d5:56:73:0a:99:89:aa:44:2f:7f:34:e3:46:cf:1e:45:df:
b8:46:b5:ad:c2:fa:45:12:b2:91:9b:35:f1:17:38:24:92:b5:
78:49:d1:93:9b:76:95:7b:83:2a:f5:0d:ba:e7:8d:34:7b:f6:
92:59:43:8c:7d:ae:b0:93:cf:97:e1:4c:51:f0:b0:51:5c:24:
ef:6e:ff:72:96:27:6e:87:38:61:9d:c8:4a:33:ea:2e:95:24:
ee:27:89:11:b6:94:93:7a:a3:c5:d8:7d:b2:d4:16:9e:5a:4e:
49:4f:81:c3:b8:46:e9:2b:67:f1:ca:49:26:b4:05:a2:c8:c5:
c6:8a:6a:2c:f8:9e:71:0f:75:7c:95:64:4f:3f:b5:3d:3d:05:
59:25:f3:31:13:c1:5e:81:ae:38:29:3b:be:2c:3d:5c:4f:d9:
92:ec:72:94:2d:4f:1d:bb:d2:69:fd:10:ad:b5:4d:ab:8b:03:
01:37:e6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 10:33:50 2025 by rpki-client