This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67fd574b-9fe8-3ee4-b05a-cabf4bfdd2ff.roa
File: 67fd574b-9fe8-3ee4-b05a-cabf4bfdd2ff.roa (raw, json)
Hash identifier: U0wobeEyYo3m/dftI9G3RFzfkDbQslVlIAXGPOg9e9s=
Subject key identifier: 3C:3D:21:53:18:02:24:5E:98:53:C4:2B:31:A3:B1:1B:CF:33:91:04
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C4E06A6F9C06BAA8E45C21700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67fd574b-9fe8-3ee4-b05a-cabf4bfdd2ff.roa
Signing time: Thu 25 Dec 2025 14:00:39 +0000
ROA not before: Thu 25 Dec 2025 14:00:39 +0000
ROA not after: Wed 25 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.24.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:4e:06:a6:f9:c0:6b:aa:8e:45:c2:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 25 14:00:39 2025 GMT
Not After : Mar 25 13:00:39 2026 GMT
Subject: CN=f84dea17-014b-42d4-aa38-5efbb82cc6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:5b:bc:20:92:75:54:24:c0:21:11:ee:71:
b8:3f:9c:ed:5a:79:99:ae:dd:fd:94:6a:e6:22:c4:
3a:97:a9:22:a1:69:62:24:da:23:37:8f:ab:d3:14:
77:80:d3:05:f1:e8:d6:e9:f0:ca:12:c3:a6:e1:58:
6f:f0:19:b3:1d:5d:9b:42:e5:e9:0d:55:37:4c:14:
15:b2:15:77:ed:2a:14:15:8b:21:cf:b3:46:98:32:
52:3a:3d:c0:2a:96:93:b0:e8:ef:3b:19:a1:1b:b7:
1e:e6:18:46:3c:9a:af:39:7e:a8:40:e2:da:5e:37:
c5:80:85:ea:2a:83:7e:ed:44:78:74:12:ce:d5:04:
87:51:55:4b:03:30:42:61:39:8a:49:13:30:4e:52:
d9:99:ac:0d:52:95:46:6f:74:bc:88:47:3b:58:be:
e2:19:fc:a2:94:78:36:9a:19:83:78:91:d9:0b:c4:
e2:4f:d7:72:b2:1f:bc:88:86:43:fd:56:a4:b3:3a:
bf:06:25:37:42:97:bf:87:ce:31:82:a9:fa:f2:1a:
ea:ce:5c:ad:cb:57:2b:4f:8b:4b:56:7f:13:61:4b:
d6:12:a9:06:e6:1e:e6:97:11:d8:a2:a5:55:31:8c:
51:44:a9:2b:82:8a:74:71:f1:22:7c:22:0f:17:bd:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3D:21:53:18:02:24:5E:98:53:C4:2B:31:A3:B1:1B:CF:33:91:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/67fd574b-9fe8-3ee4-b05a-cabf4bfdd2ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:0e:57:52:d5:cd:89:ef:70:d0:01:4a:09:96:54:db:29:75:
4e:61:bc:93:6a:72:83:a1:3a:7c:d1:38:d5:47:67:99:36:7c:
ca:7d:18:41:d1:9c:c7:5a:e7:90:d2:c8:73:ae:cd:1b:77:28:
87:b3:de:f1:52:6e:b5:cc:f6:52:25:54:c7:f2:1f:08:c9:ef:
85:a1:1e:41:ad:7c:46:c8:7b:fb:df:e5:00:12:4a:9d:0c:d3:
41:da:f7:38:e0:e0:b8:ff:a9:6a:bd:ee:b6:a6:ed:27:c0:1a:
cd:39:f0:6d:f7:55:99:39:fd:84:33:37:dd:b4:0c:25:c0:ec:
d4:19:71:f6:dd:9b:7e:e9:97:da:ad:aa:b8:ad:56:64:4f:d5:
f2:05:0f:2b:4e:2d:bd:ed:7c:b9:3f:4d:18:4e:c8:3c:fb:9d:
ee:ba:13:da:74:68:65:b3:df:65:ef:38:ac:66:40:30:49:31:
dc:b3:d9:cf:87:10:2d:57:b0:02:0e:79:1b:6d:b9:1d:80:87:
72:a5:c6:72:d6:cf:ec:b1:95:f1:89:43:3c:25:11:23:19:25:
19:13:d4:32:4c:3e:12:06:f4:2c:45:a8:83:11:3b:af:95:2e:
c0:34:dd:72:83:0a:e7:cc:da:b0:ca:1d:e7:74:a8:3b:09:e1:
d0:78:73:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 01:45:35 2026 by rpki-client