This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fc81609-cceb-339e-8bdd-ef413ab52259.roa
File: 2fc81609-cceb-339e-8bdd-ef413ab52259.roa (raw, json)
Hash identifier: fNW77BMyxgMY4cTFRtbi2aV6+peJtM5/Z6RgnfZJI4w=
Subject key identifier: F0:58:68:EC:D8:60:5C:A5:3C:24:6E:89:CD:96:84:92:E1:02:23:86
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C45A673825D44638727583E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fc81609-cceb-339e-8bdd-ef413ab52259.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.28.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:73:82:5d:44:63:87:27:58:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=a7cec5f5-4cce-4a4d-9115-44972713a050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3e:88:b4:1f:9e:1d:74:db:d7:95:91:3b:a8:
10:37:84:33:09:04:59:59:50:c0:f1:d6:f1:12:14:
14:8d:31:d7:d8:de:68:76:02:7a:6c:35:77:82:2d:
fa:a9:1f:88:b8:3c:44:8d:f7:b7:fd:c8:38:59:00:
40:bb:e5:5e:98:69:c9:83:69:73:d1:c3:01:16:fb:
af:ec:d7:30:54:a3:d0:cf:75:9c:31:33:a0:a5:1d:
2b:53:4b:ed:b9:12:25:1e:d9:52:8c:b7:1a:a6:6c:
b5:4c:0d:7a:63:29:ea:22:16:22:15:d4:72:b0:5c:
52:1c:66:ad:66:c7:3b:4d:80:dc:7f:f8:b5:50:35:
06:f2:ff:84:eb:23:1d:ac:25:c4:80:14:7e:ee:64:
cd:de:50:d6:36:17:11:f1:c3:21:c0:c8:dd:1b:32:
fa:e5:2d:80:2a:64:6c:54:59:4c:88:da:0d:0b:65:
bc:c9:0c:eb:cb:8c:a4:47:7e:c2:80:8d:87:90:6c:
70:f6:c6:e0:97:01:49:e5:21:c0:6f:4f:9d:fd:77:
dc:f2:9d:f2:b0:fd:07:7b:5e:c6:a1:eb:8a:fb:1e:
44:83:fa:07:fb:13:d5:0d:60:cd:ba:d6:64:0c:34:
43:ba:b7:52:a1:4e:c3:ac:84:24:6b:b7:46:dc:64:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:58:68:EC:D8:60:5C:A5:3C:24:6E:89:CD:96:84:92:E1:02:23:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fc81609-cceb-339e-8bdd-ef413ab52259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:74:4d:46:74:56:89:1a:15:eb:59:81:61:27:1d:5b:39:1b:
8c:ac:94:46:75:3c:e4:06:70:58:54:0f:65:fa:d3:2f:54:34:
9d:79:49:72:d2:a0:a2:d0:ab:ca:d4:ba:0e:44:fd:95:da:b5:
04:b8:d7:da:65:13:62:5e:1b:02:d6:c0:95:a4:b0:4d:03:05:
16:20:19:dd:69:dd:68:04:a1:c9:82:ee:c6:be:4c:8a:55:d7:
01:25:c1:2c:de:b2:16:a1:ef:3a:b8:73:f1:d4:42:f4:45:46:
1f:98:db:b2:3f:5f:f4:13:69:9a:b5:e0:d7:09:b6:d5:c1:1c:
f4:4b:ec:03:85:7b:57:80:d9:4b:e9:bf:9b:4b:54:6b:7b:d6:
26:08:af:1a:0c:7e:b2:60:93:1b:53:59:26:b7:aa:c8:de:7a:
86:8f:b2:34:09:6f:c6:f9:59:82:86:2b:80:77:54:ce:69:ab:
ca:c7:3c:21:66:e9:ea:b4:2a:e4:f6:d6:24:9c:f7:0f:c6:93:
cd:ba:20:02:e4:a6:cf:f5:6f:0c:16:b4:af:bd:3a:bc:7d:5a:
e4:8d:88:a7:b1:1e:23:be:31:de:3a:c4:20:5d:42:d1:85:9a:
32:ec:aa:17:56:5b:56:8f:d7:2d:fb:cb:9a:7e:f0:44:09:5f:
03:44:20:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:43:44 2026 by rpki-client