This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b1d8b76-171d-3fd6-bc57-727c44a9e495.roa
File: 4b1d8b76-171d-3fd6-bc57-727c44a9e495.roa (raw, json)
Hash identifier: 3uFZxtjtNaS3xV4W7d/ELQ4HPN8bM1PVauTDgQ3SKsA=
Subject key identifier: 5B:25:85:CC:F2:6C:09:6B:CD:CF:1F:0D:B0:D3:93:21:70:80:8A:6E
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C470BC364BC69F378CF075280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b1d8b76-171d-3fd6-bc57-727c44a9e495.roa
Signing time: Tue 23 Dec 2025 02:00:31 +0000
ROA not before: Tue 23 Dec 2025 02:00:31 +0000
ROA not after: Mon 23 Mar 2026 01:00:31 +0000
asID: 30036
IP address blocks: 173.22.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:47:0b:c3:64:bc:69:f3:78:cf:07:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 23 02:00:31 2025 GMT
Not After : Mar 23 01:00:31 2026 GMT
Subject: CN=d1b49665-6550-4c63-acdc-04397a618726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:3a:f8:74:9a:c8:16:87:83:d7:26:3b:c7:
e5:9d:ea:91:19:a0:6f:1d:e9:48:db:80:f2:20:a2:
e6:b1:b1:92:6b:b1:1a:49:f3:1b:54:0f:7e:0b:81:
58:56:dc:72:76:f6:c7:2f:fe:5a:47:6d:8b:45:17:
43:bb:6d:d5:a6:f4:cc:1a:75:5d:d8:98:79:f6:31:
b5:61:ae:57:e6:ff:d0:47:59:ed:5a:d5:f3:0d:35:
7b:f7:f2:8a:e0:27:3b:28:44:79:52:54:5c:47:13:
56:84:b3:5c:a3:27:1d:31:bd:82:7b:9d:75:bd:c6:
da:a0:a6:c9:80:f4:b0:bd:ef:3d:27:e7:1b:4e:fd:
ff:98:02:d9:70:58:fe:0d:8f:9c:9f:3e:09:f7:d1:
10:be:7f:39:e9:80:d2:22:bc:8f:52:fb:47:96:14:
f6:bc:1e:a1:ff:4c:27:6a:f3:81:87:ad:9e:1a:16:
3a:71:ee:37:e3:9a:18:90:e9:3a:1a:34:3d:2e:f1:
96:c7:ff:95:9f:ca:9e:6d:27:fd:1b:94:3e:62:91:
9c:3b:d1:aa:7c:c8:76:98:f7:9c:d6:0b:f1:63:b1:
8a:4b:35:ba:d5:58:e4:69:de:ca:8c:1b:bd:e6:75:
3f:45:ae:07:a7:3c:6a:78:9d:7b:09:83:fa:96:5a:
42:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:25:85:CC:F2:6C:09:6B:CD:CF:1F:0D:B0:D3:93:21:70:80:8A:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b1d8b76-171d-3fd6-bc57-727c44a9e495.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.22.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:7c:03:a7:c3:8b:28:54:6d:2b:d2:dc:5a:e5:70:cb:1b:2a:
93:ce:76:95:bf:3c:60:35:5a:ac:ef:f7:62:30:22:ef:c7:f4:
0a:9e:20:f8:87:6e:41:39:ca:9e:18:b8:99:47:18:d7:7c:23:
e4:d7:92:88:4f:6a:28:1e:ca:8b:1f:46:b7:95:a9:07:11:fb:
ff:4f:6e:45:fd:53:8d:67:01:91:29:40:36:ea:0b:77:ec:f1:
70:68:99:10:14:b2:55:61:71:09:1e:1d:eb:83:c1:2e:76:14:
eb:06:d6:bc:ad:1e:58:57:28:44:b9:42:df:2a:7c:14:d4:19:
66:fe:78:f3:8d:aa:da:7e:dc:79:ee:15:a4:63:04:48:14:11:
5c:83:3e:ac:c1:6c:2a:80:e2:a3:84:0e:c2:58:6c:94:39:4b:
b9:fb:ec:32:9c:68:9c:e1:f9:91:ff:68:92:eb:35:6b:ee:c5:
ce:d9:91:79:b0:4d:dd:20:37:ba:8d:84:cd:ec:bb:82:98:92:
d5:12:7c:13:15:5c:3b:de:c4:c5:37:2a:7d:e2:2f:e5:e9:a4:
41:17:03:70:26:48:e2:72:02:e5:e8:7c:af:9b:48:14:f4:e6:
f6:b0:55:cc:f6:7a:20:18:44:4c:48:fc:29:89:27:c1:86:9e:
91:78:2f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:45:08 2026 by rpki-client