This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5211dc3d-8d4f-308c-ba25-a69d472dbce1.roa
File: 5211dc3d-8d4f-308c-ba25-a69d472dbce1.roa (raw, json)
Hash identifier: i+4G2RadBiD7v+Me4h22XSctfRqppeuoLsY2glTmxn8=
Subject key identifier: 71:9C:DF:4C:A4:02:4D:06:01:F6:04:B5:39:AC:AE:F9:F4:57:64:0E
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584B62021CA028EFCEDFD3B43070
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5211dc3d-8d4f-308c-ba25-a69d472dbce1.roa
Signing time: Thu 02 Oct 2025 01:00:31 +0000
ROA not before: Thu 02 Oct 2025 01:00:31 +0000
ROA not after: Wed 31 Dec 2025 02:00:31 +0000
asID: 19905
IP address blocks: 173.21.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:62:02:1c:a0:28:ef:ce:df:d3:b4:30:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 2 01:00:31 2025 GMT
Not After : Dec 31 02:00:31 2025 GMT
Subject: CN=9c490e16-126f-46e4-8a00-4bbd0b534b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:bb:23:8f:1d:7c:bf:e2:e3:e9:d8:ed:57:
75:f2:48:2f:f3:ea:cd:4f:d6:85:bc:b1:34:25:c5:
63:93:a0:bf:60:84:0c:1f:e8:82:c6:eb:66:82:f8:
89:a9:d4:c1:20:97:a3:85:3d:93:bd:5f:c5:03:2a:
0a:0f:cf:74:e4:66:d7:97:e7:55:a4:9f:47:3a:9f:
64:70:3d:9b:99:d7:e6:c1:9d:14:b2:08:1c:9c:03:
8e:9c:8a:5f:32:94:ff:4e:5b:08:c3:db:2e:6f:9e:
58:67:9a:18:83:d4:92:5a:50:55:79:91:c0:53:3c:
b9:15:fb:6a:c1:f0:cb:56:53:bb:ab:42:03:f3:7c:
2f:9b:d4:6b:20:4b:ee:30:68:e5:f0:3b:2d:97:38:
ed:b8:d9:e4:e4:fd:f0:e8:5b:77:7a:ef:2c:c5:57:
35:68:a4:a0:95:5e:01:fb:15:c6:a0:c5:f6:e5:44:
3e:bb:45:89:a7:0e:82:63:a0:74:35:1d:da:02:db:
4c:85:04:aa:3c:3e:3a:06:5c:3b:93:63:ee:ac:7a:
54:67:7f:de:36:4b:f9:ce:d9:35:28:af:d4:33:58:
8a:e7:70:66:75:5e:f6:64:a4:44:5f:92:24:4f:91:
29:13:09:20:90:b8:fa:1d:28:89:53:38:51:66:75:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9C:DF:4C:A4:02:4D:06:01:F6:04:B5:39:AC:AE:F9:F4:57:64:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5211dc3d-8d4f-308c-ba25-a69d472dbce1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.21.100.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:d2:71:6a:b8:bc:02:b8:34:a3:aa:36:f4:86:e3:4c:ba:24:
0b:0b:62:b6:db:6c:8f:22:2f:73:77:7c:71:e0:50:ea:be:6f:
c2:85:cf:50:95:f9:47:e2:6c:ea:3e:03:55:f6:77:d0:b8:ca:
51:dd:1e:76:85:41:00:8e:c0:8e:df:e2:73:1f:4d:3d:5d:de:
96:81:08:04:f3:13:a7:c0:34:d8:c0:98:8d:be:b0:26:01:f9:
7e:b4:a0:b8:81:48:44:7a:2f:af:1a:74:6e:56:98:5d:e6:1e:
6e:16:cf:99:b0:69:f9:c9:ad:70:d0:02:d9:2b:2b:d6:a7:d5:
e9:60:d3:76:56:af:77:58:6f:3a:2c:f0:6a:26:47:0f:aa:ff:
97:96:7e:50:4a:c1:f7:55:63:a2:2e:18:3e:d7:af:f3:c3:fc:
5d:96:a1:e7:11:eb:af:23:58:b2:30:95:92:e1:39:13:a5:c5:
24:51:d4:d8:6e:db:72:18:35:6d:05:92:38:06:a3:0a:f1:42:
9a:8d:e7:7c:ab:9c:3b:3a:82:37:0b:8a:7a:ca:e4:b6:c8:ba:
89:14:34:0f:9b:e1:84:60:80:a7:3b:07:9e:95:52:ad:61:c9:
a3:a4:c3:92:7d:c9:61:0a:ac:f7:4b:94:51:0e:9e:26:67:ca:
27:91:5c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 10:35:03 2025 by rpki-client