This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f74cb62-d2f7-364f-acf7-3ea2aa25717f.roa
File: 4f74cb62-d2f7-364f-acf7-3ea2aa25717f.roa (raw, json)
Hash identifier: CA89WRZ4OWWNcUpjyBcY8JDSMMZbkkrfCcsRnCHMoJY=
Subject key identifier: E2:ED:02:99:DE:7E:1D:BA:26:DA:24:59:90:EC:2A:C8:10:FA:B3:E8
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C4871D12E25147DC6BBC2E1C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f74cb62-d2f7-364f-acf7-3ea2aa25717f.roa
Signing time: Tue 23 Dec 2025 14:00:39 +0000
ROA not before: Tue 23 Dec 2025 14:00:39 +0000
ROA not after: Mon 23 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.29.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:48:71:d1:2e:25:14:7d:c6:bb:c2:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 23 14:00:39 2025 GMT
Not After : Mar 23 13:00:39 2026 GMT
Subject: CN=108d2b6f-73e2-4991-b4de-f111a3bde669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:55:b1:78:12:09:e2:0c:52:48:25:5f:34:
35:db:6c:48:bc:59:dc:10:80:3c:f8:77:3c:2f:f5:
a5:b9:a8:5d:82:12:b8:46:5a:fb:33:b2:bc:2d:07:
72:a3:a7:e9:c1:d2:d2:d2:f2:66:07:45:68:40:22:
d5:f8:9e:92:38:f2:19:05:e4:01:df:16:d5:df:26:
13:4c:97:7a:ed:ff:0f:22:40:7e:a1:e6:e5:96:e9:
2e:e3:65:ed:fb:31:b1:bb:bf:e9:3b:29:f8:44:13:
e0:fe:8f:d4:1e:5d:73:75:dd:5c:ea:06:7f:05:d0:
f6:41:ee:70:47:ef:fa:82:64:d8:11:1b:c3:6d:0e:
08:35:38:eb:72:49:8b:44:c2:c7:a6:ae:70:99:a0:
df:44:50:51:ad:c2:53:a3:d1:ba:24:dc:c1:95:90:
c9:d4:d9:8d:42:8b:74:30:ab:6f:ed:79:3c:36:10:
fa:16:17:e2:b7:b9:86:d5:6e:d1:5a:0b:ea:09:4b:
24:2b:2a:ea:4b:02:b0:78:14:73:d2:b0:4c:2c:81:
f1:38:f9:a3:b2:c7:a4:c9:a5:be:f0:7e:19:25:c1:
17:a6:4f:37:eb:e3:d9:26:5e:9d:b3:03:1f:80:c8:
ce:cf:e7:e9:f9:0b:bc:a1:05:6b:42:db:9e:9b:cf:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:ED:02:99:DE:7E:1D:BA:26:DA:24:59:90:EC:2A:C8:10:FA:B3:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f74cb62-d2f7-364f-acf7-3ea2aa25717f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:c3:f3:03:41:d4:12:cb:35:b1:c9:a9:46:84:49:a5:bc:a4:
7f:e6:5a:15:54:71:81:cc:cf:53:1c:b3:2a:ef:4a:ad:35:65:
a3:a0:10:07:1b:16:0f:c8:10:99:49:a8:af:a8:19:36:65:42:
1c:b0:5a:8e:d4:71:60:13:78:44:81:79:11:08:35:33:60:31:
ef:70:a1:d6:a4:75:3b:c2:81:da:16:a3:9f:d7:97:fc:8a:30:
4d:da:5e:ab:1d:6f:69:1a:61:75:19:e4:f8:3d:e2:76:a2:4e:
1a:6d:ba:67:a6:f5:56:2a:d5:28:88:35:a9:39:d2:fb:21:c7:
0e:4a:7d:17:8d:2a:2f:43:97:61:2e:53:50:4c:94:53:91:df:
18:ce:ff:84:de:23:a4:ef:2d:48:48:42:ea:17:8c:ba:87:4c:
2e:e4:79:56:47:f7:30:60:e7:d8:eb:b0:bd:c4:a0:b1:0a:00:
0a:b6:73:55:89:8c:a9:3c:53:9a:c8:80:85:4b:1c:61:eb:24:
40:b4:7c:d0:33:ce:9c:cb:ee:67:05:5a:80:a7:b2:ea:30:18:
d4:7d:8f:bb:c7:db:d4:f4:10:45:46:92:4f:e4:f5:9f:ae:18:
d4:1c:de:89:4f:85:5a:11:9a:a4:5c:d5:1d:36:04:b6:70:23:
8a:92:00:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:43:09 2026 by rpki-client