This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa
File: 3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa (raw, json)
Hash identifier: 3xPHLPtDi4GcUK6FmDdUuwTJpSvwJXkk6zCObo7MvC0=
Subject key identifier: A4:AC:14:A8:FE:AF:A2:AA:BB:5F:68:46:F2:AA:8B:B3:24:56:E6:AD
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C42DC06EC3D6BAD2A9EC03178
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 19905
IP address blocks: 173.28.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:dc:06:ec:3d:6b:ad:2a:9e:c0:31:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=b4641ce5-79b8-4f02-acd1-af51e0221001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:0f:02:e0:2e:ad:86:48:8f:d2:fd:9b:33:
a8:64:1f:77:dd:51:4f:06:59:8f:77:e9:30:f3:46:
d7:a8:5d:09:6c:0e:bf:ee:f8:00:29:f6:fe:61:24:
56:e4:34:bc:28:b8:72:38:3c:67:a5:a3:24:74:ca:
96:82:48:38:b2:8b:71:b3:95:cc:5e:24:b9:c7:94:
f9:28:7e:10:10:d9:09:0c:3f:f4:c2:2f:b3:f7:b1:
8a:6d:b7:49:46:19:14:30:83:24:f5:d7:7a:70:e3:
f0:5a:55:6d:09:71:d9:76:f6:91:61:6c:d3:c0:6c:
f6:71:4b:7e:bc:31:00:b5:9f:ae:c2:c9:a1:53:b6:
1b:21:1a:a6:7a:e9:4d:81:3b:56:4a:37:b1:24:0c:
ea:7a:05:62:11:d3:80:da:42:20:8c:ee:5e:b6:37:
69:79:81:5a:f1:a9:5b:e3:37:b2:e9:31:82:9e:1d:
31:27:a9:f6:22:e0:c7:52:08:02:61:35:a2:96:f2:
13:70:86:cc:fe:bf:7d:43:35:75:5e:c7:4e:43:1d:
e5:67:2d:fd:c6:53:a8:d0:f7:96:f6:d6:20:f0:7d:
be:b1:45:6a:4d:2d:a3:ed:c3:04:9e:0b:0b:78:e3:
3a:c2:f5:02:13:01:05:d2:95:38:49:29:0c:5d:5d:
9e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AC:14:A8:FE:AF:A2:AA:BB:5F:68:46:F2:AA:8B:B3:24:56:E6:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:f0:a6:f6:e3:d2:d8:04:5a:76:08:d7:00:62:ce:27:ee:ad:
27:80:5e:84:b6:fe:9f:d5:8a:d1:2a:a7:34:0d:d6:ac:dc:2f:
62:95:a0:0e:6c:f0:af:a6:b0:fb:9d:0c:68:7f:fe:c8:23:ef:
4b:88:5d:83:ba:66:f9:d7:10:0a:be:92:05:17:20:51:0a:09:
e6:2a:96:f2:aa:1f:94:2c:59:8b:1c:4f:a6:0f:61:fa:81:94:
f1:45:ba:7e:ce:4a:9f:98:b2:2e:ae:6e:05:f9:40:14:ac:40:
4a:8a:68:c1:81:cd:f6:88:cf:a2:c7:e3:4c:af:7f:dc:1c:0b:
b7:7f:56:b2:b7:3a:d7:41:38:d1:ab:c5:61:f0:c6:f0:cc:cb:
ce:a8:6b:8f:69:ee:52:29:29:a9:57:ab:cc:ae:19:ce:ea:1f:
4c:af:3e:98:c9:2a:7a:78:20:ed:f4:b4:32:32:c8:2d:0e:70:
88:b1:f0:75:d9:b3:26:39:10:33:e0:3c:66:08:23:2a:44:5c:
3b:2f:ae:e2:ac:7b:80:66:76:43:1f:c3:23:4c:27:19:57:b7:
84:1c:5c:a7:66:90:71:cd:f9:be:fd:b7:77:66:34:17:93:7a:
6c:91:be:df:6e:9c:b9:34:19:42:37:c4:a9:75:80:b1:19:b6:
a0:51:df:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3AbsPWutKp7AMXgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk
YjQ2NDFjZTUtNzliOC00ZjAyLWFjZDEtYWY1MWUwMjIxMDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu8PAuAurYZIj9L9mzOoZB933VFPBlmPd+kw
80bXqF0JbA6/7vgAKfb+YSRW5DS8KLhyODxnpaMkdMqWgkg4sotxs5XMXiS5x5T5
KH4QENkJDD/0wi+z97GKbbdJRhkUMIMk9dd6cOPwWlVtCXHZdvaRYWzTwGz2cUt+
vDEAtZ+uwsmhU7YbIRqmeulNgTtWSjexJAzqegViEdOA2kIgjO5etjdpeYFa8alb
4zey6TGCnh0xJ6n2IuDHUggCYTWilvITcIbM/r99QzV1XsdOQx3lZy39xlOo0PeW
9tYg8H2+sUVqTS2j7cMEngsLeOM6wvUCEwEF0pU4SSkMXV2eYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKSsFKj+r6Kqu19oRvKqi7MkVuatMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2VjMTEzYzgtODA0MS0z
OGY0LTg0ZmItMTU3ZjJmZGY2NWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRzwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADbwpvbj0tgEWnYI1wBizifurSeAXoS2/p/VitEqpzQN1qzcL2KVoA5s
8K+msPudDGh//sgj70uIXYO6ZvnXEAq+kgUXIFEKCeYqlvKqH5QsWYscT6YPYfqB
lPFFun7OSp+Ysi6ubgX5QBSsQEqKaMGBzfaIz6LH40yvf9wcC7d/VrK3OtdBONGr
xWHwxvDMy86oa49p7lIpKalXq8yuGc7qH0yvPpjJKnp4IO30tDIyyC0OcIix8HXZ
syY5EDPgPGYIIypEXDsvruKse4BmdkMfwyNMJxlXt4QcXKdmkHHN+b79t3dmNBeT
emyRvt9unLk0GUI3xKl1gLEZtqBR3+E=
-----END CERTIFICATE-----
Generated at Sun Jan 11 01:45:13 2026 by rpki-client