This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5afbdf24-79e5-38e0-9da3-388a534fb999.roa
File: 5afbdf24-79e5-38e0-9da3-388a534fb999.roa (raw, json)
Hash identifier: JihC3Iiq5AFGXFytmFzJfTHDCMM5WYcH2hN9CyxLCaU=
Subject key identifier: 96:79:28:7E:6E:E5:E8:42:50:5A:D4:A5:86:B3:52:1D:D0:3E:89:75
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C6E21A6CB14DFFE32CE13F800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5afbdf24-79e5-38e0-9da3-388a534fb999.roa
Signing time: Tue 06 Jan 2026 02:00:31 +0000
ROA not before: Tue 06 Jan 2026 02:00:31 +0000
ROA not after: Mon 06 Apr 2026 01:00:31 +0000
asID: 30036
IP address blocks: 173.25.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:6e:21:a6:cb:14:df:fe:32:ce:13:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 6 02:00:31 2026 GMT
Not After : Apr 6 01:00:31 2026 GMT
Subject: CN=16e1ae20-46bd-4fd6-b94f-2e3eb208ec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:ec:a8:83:ab:5e:96:b0:75:63:0d:cc:80:
01:49:bf:b9:d0:45:88:89:a5:8d:3e:5e:6f:56:c1:
c5:59:3a:84:e9:d4:9e:05:19:18:6e:78:c0:89:b0:
e3:d5:5f:24:ee:3b:86:51:0e:ee:22:d8:ea:44:df:
40:eb:39:77:03:6e:2c:09:2d:2c:b2:c5:3a:89:32:
b5:79:3f:0e:9e:f3:23:31:3f:3b:24:03:c6:fd:16:
77:ad:73:b2:73:28:7a:1c:4d:9f:e9:39:c6:64:3a:
d4:e1:27:26:fd:be:bc:74:db:32:bf:1e:2e:02:19:
93:f0:97:11:ff:18:20:a5:52:50:3f:be:ac:13:70:
2a:84:c1:fa:9c:a9:a0:f6:8d:b1:35:36:dc:a5:a1:
8d:25:c6:58:d0:07:9f:f8:83:6e:5b:bd:66:92:83:
4e:3d:c9:e1:6d:c5:55:7f:43:65:c9:40:3e:38:29:
32:54:36:37:7b:70:98:3f:1c:a8:d7:dc:ba:29:8a:
68:72:64:45:26:9f:f8:1f:d6:ea:80:67:ea:92:4b:
3b:c6:3e:1d:fd:b6:be:70:40:64:57:5d:c1:cf:c3:
99:c5:63:11:a7:74:67:7c:ca:00:ef:fc:ec:ef:d6:
0f:55:10:34:f0:cd:38:54:d9:43:a2:05:3b:42:29:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:79:28:7E:6E:E5:E8:42:50:5A:D4:A5:86:B3:52:1D:D0:3E:89:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5afbdf24-79e5-38e0-9da3-388a534fb999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:54:be:ef:34:b1:31:60:65:1b:55:1e:5f:16:a2:45:58:99:
05:36:af:16:40:90:ba:72:8d:30:09:0c:3c:eb:68:2a:b4:a4:
c3:43:dd:0f:03:1c:0c:09:ba:02:82:8a:aa:81:aa:f5:11:dc:
fc:c8:6a:42:f0:2d:9e:a6:16:e6:85:e1:68:b9:d8:a9:77:30:
4f:a2:de:70:17:fd:2e:69:87:50:83:3f:76:8f:de:bb:58:9e:
ae:db:e2:02:8c:91:8c:bf:3e:3c:12:ea:8d:3c:1d:49:c3:3e:
f3:4c:07:96:34:76:c0:07:d3:20:a3:8a:b5:e9:cc:48:05:bb:
f9:b5:c6:20:a3:d4:5d:b2:50:54:d2:c7:bd:ca:ac:88:67:d9:
01:a0:9e:d8:23:e6:b9:ef:8b:51:d5:4e:01:df:df:bf:04:85:
d5:64:05:3c:8f:fa:c7:3a:d6:e2:a0:29:5e:03:bc:e8:60:21:
1a:a5:49:0b:f8:a8:31:36:8a:9d:02:8d:57:86:df:e9:f8:30:
f9:96:39:25:f8:6f:3b:99:13:39:ba:99:73:e3:b2:31:38:f7:
f1:54:b9:b4:4d:f6:b8:2d:52:bb:52:2c:5a:08:e9:8e:9d:3f:
75:39:61:3c:74:61:54:fc:5c:a1:10:e6:81:03:9d:81:7c:b9:
8f:dc:05:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 09:46:04 2026 by rpki-client