This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58c98bd2-dcad-3956-be00-36aa73050259.roa
File: 58c98bd2-dcad-3956-be00-36aa73050259.roa (raw, json)
Hash identifier: 7nhAgo+1QulIXqiVFo1rNAwZ8mg6H/rhwUxIFd9NBzE=
Subject key identifier: 39:9B:16:3E:30:CA:B7:16:74:76:AB:C4:12:24:81:E0:D9:56:CA:25
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C794C9E464C7B00EF0B81D780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58c98bd2-dcad-3956-be00-36aa73050259.roa
Signing time: Sat 10 Jan 2026 02:00:31 +0000
ROA not before: Sat 10 Jan 2026 02:00:31 +0000
ROA not after: Fri 10 Apr 2026 01:00:31 +0000
asID: 30036
IP address blocks: 173.16.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:79:4c:9e:46:4c:7b:00:ef:0b:81:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 10 02:00:31 2026 GMT
Not After : Apr 10 01:00:31 2026 GMT
Subject: CN=88be2fd6-c446-44b2-a1b7-4aaf6b8356ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:83:30:86:86:c9:b7:77:fe:26:2f:85:74:
af:c5:8c:f4:00:eb:69:db:c7:26:99:b8:96:79:85:
6d:f6:70:75:71:83:5a:9c:53:2f:79:4b:ff:08:76:
6b:59:f2:b5:f2:fc:d7:16:fb:36:1d:7d:94:ba:ca:
4b:3f:21:93:b8:ba:d2:3a:79:82:29:ee:56:12:8b:
4c:31:61:52:c4:b6:19:98:87:8f:db:5d:e8:e3:08:
b6:02:1b:1a:3b:d9:d0:37:31:89:a0:aa:68:b3:78:
d8:87:10:d6:e4:0e:f4:05:25:8f:d7:f1:5a:9c:53:
3b:37:a5:0e:b5:bc:2f:7f:42:de:66:24:ba:ba:95:
ef:74:68:b5:9c:b8:bd:81:1d:9e:5d:04:5e:5e:86:
12:39:0c:d7:2a:63:27:69:47:c1:41:a4:8f:f6:72:
22:9f:5a:84:d5:f0:70:46:f0:82:57:33:38:b2:69:
c5:fd:93:c2:8b:e2:9e:a1:0e:e8:7d:11:bc:a4:0c:
19:8a:0b:c8:33:e2:a7:03:98:17:cc:de:01:a3:25:
58:5b:8b:9d:e7:da:64:cf:b8:ff:2e:69:fa:94:af:
62:98:a3:a1:61:34:66:91:40:08:6e:b8:cd:17:42:
30:ac:06:67:88:3d:c4:39:2d:31:be:fd:49:1c:cf:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9B:16:3E:30:CA:B7:16:74:76:AB:C4:12:24:81:E0:D9:56:CA:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58c98bd2-dcad-3956-be00-36aa73050259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:01:30:3d:b2:f4:23:78:54:44:73:80:e2:20:04:78:b1:44:
a1:5e:9b:d5:bd:75:e8:75:4b:22:1b:61:77:13:50:5b:93:51:
39:4f:1b:b3:6f:dd:85:1d:52:ad:18:0c:71:0c:32:44:1a:6d:
e5:56:ec:d5:8c:9b:b9:18:be:85:f0:8f:28:11:dd:69:a4:0f:
f3:03:f2:0b:d3:dd:d3:01:6e:c1:e3:18:e0:4a:bc:ab:07:b5:
7a:c1:fd:ef:84:66:b3:ea:25:77:b0:2c:2f:75:16:fd:d7:b0:
61:7d:ec:c6:92:f0:65:dd:48:53:a6:94:52:3e:85:98:a6:ac:
17:5e:26:7d:4f:5e:db:94:d5:25:c1:40:69:c8:79:2f:43:90:
9d:29:66:73:23:99:79:9b:ba:6f:cd:91:f8:e8:7a:4e:f0:7f:
6d:87:4b:9f:ca:e3:66:da:49:64:9b:d7:42:48:09:8f:ad:51:
ea:72:eb:9f:fe:65:39:1f:69:dd:cb:36:76:7c:a9:c1:43:0a:
21:4b:c0:f5:56:07:5e:63:8b:c9:c4:78:40:15:63:b6:1d:bf:
6e:cb:19:23:0a:fc:98:1a:bb:e7:bf:1c:ba:b1:6a:63:57:c7:
80:18:19:85:0f:34:48:be:80:d9:96:6c:81:81:10:fc:f0:c4:
f6:da:12:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 01:48:01 2026 by rpki-client