This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ace8e7b-9077-36e3-9b2a-748e47686e17.roa
File: 6ace8e7b-9077-36e3-9b2a-748e47686e17.roa (raw, json)
Hash identifier: nFWynSTIFO8YFSmkscf4B9Z+MjvEof34Ldkfd9vCp1Y=
Subject key identifier: 21:17:DA:9F:6D:D3:6F:F1:0A:25:6E:B2:6D:6F:73:0C:FF:75:07:4E
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584BD3308A042B27C6E0D68C67C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ace8e7b-9077-36e3-9b2a-748e47686e17.roa
Signing time: Tue 11 Nov 2025 14:00:38 +0000
ROA not before: Tue 11 Nov 2025 14:00:38 +0000
ROA not after: Mon 09 Feb 2026 14:00:38 +0000
asID: 19905
IP address blocks: 173.28.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:d3:30:8a:04:2b:27:c6:e0:d6:8c:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Nov 11 14:00:38 2025 GMT
Not After : Feb 9 14:00:38 2026 GMT
Subject: CN=b42aa4df-6607-416f-ba57-c582894eb316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:4e:3d:07:17:2d:23:20:05:20:f5:10:fd:
18:6f:5c:44:88:d9:42:09:07:22:69:c0:1b:5c:7e:
05:f3:61:81:99:3a:4e:8e:52:78:60:64:04:4f:7d:
9e:b1:9d:a3:6c:77:9a:fd:3a:8c:cf:d9:9d:34:60:
6f:1e:44:05:66:7e:6a:07:ed:c7:37:b5:b2:9c:cd:
03:17:05:bf:3b:26:4c:30:57:e1:4d:ac:87:67:b2:
c1:b7:e3:1f:8d:ae:31:8b:03:1f:c0:6b:16:90:72:
fe:d8:2d:fc:61:4d:cb:bc:f1:e5:3e:5d:90:7e:45:
5b:0e:15:af:56:e6:a8:77:49:bd:00:86:91:c1:64:
1f:3e:a5:f5:d3:54:47:37:29:ab:73:fd:5a:35:d3:
fc:a4:2f:5c:cf:d9:3a:25:74:ed:65:b3:1e:40:1b:
91:1d:3d:67:8f:7b:5e:29:0c:bb:ac:ec:9f:6b:34:
92:59:07:10:ae:97:49:09:15:2d:ea:be:ff:c3:83:
b5:df:40:1f:af:15:8a:ca:27:a6:d7:cf:85:1f:bb:
f9:50:d3:99:48:99:27:3c:dc:34:cb:ab:7d:54:bf:
18:50:71:93:98:41:11:e3:96:b6:09:85:78:91:de:
6a:f2:ed:6b:8c:98:8b:96:8f:80:02:c1:fb:81:66:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:DA:9F:6D:D3:6F:F1:0A:25:6E:B2:6D:6F:73:0C:FF:75:07:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6ace8e7b-9077-36e3-9b2a-748e47686e17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:a7:b5:01:a4:81:1f:38:e2:24:40:b2:ae:35:b5:15:77:d0:
1a:cb:70:bc:d8:c2:1b:69:bb:38:0e:2e:71:ac:3a:63:56:6b:
ba:2f:d7:25:0c:5f:72:32:72:5b:c4:39:2b:46:f8:5e:e0:35:
83:98:56:89:85:a9:13:2e:64:a7:4d:f9:27:8d:40:b2:6d:24:
1b:c6:1b:3c:6c:fe:1a:0d:aa:24:0f:0b:08:95:fd:5f:3e:45:
86:9f:29:b3:01:86:bd:4f:03:2a:d1:0e:b1:81:97:2b:02:cf:
ab:4d:54:35:d7:23:c9:d8:a6:e6:84:5c:73:bd:fe:b4:f2:db:
58:cd:42:e2:1e:29:93:20:72:f1:cb:93:92:e0:68:54:95:38:
1b:44:57:51:19:68:40:a0:6f:d0:b1:c4:95:0d:e5:b2:ed:0d:
0a:72:c3:36:56:14:cd:47:b2:53:b5:d5:06:7c:85:87:b4:13:
a1:70:60:47:42:30:90:76:2d:dc:fa:90:2c:87:3b:23:1f:c1:
91:c2:a2:18:ee:5b:d7:d9:30:94:49:85:22:5e:61:f8:fd:b0:
8c:14:91:a9:60:23:b0:dc:03:61:8a:45:7d:38:f5:00:35:1f:
f5:6e:a8:dd:53:d3:3e:e5:8f:da:71:f9:6a:75:80:35:53:db:
e5:01:6b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 10:35:05 2025 by rpki-client