This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87cb3f57-1853-385b-b56a-5fdf16ff959e.roa
File: 87cb3f57-1853-385b-b56a-5fdf16ff959e.roa (raw, json)
Hash identifier: Djt+x0gFQafvGqkHttQ3bRZCHfwHTihEUT+ylHU9vDs=
Subject key identifier: FF:DE:58:BC:28:97:8E:0C:2E:A1:A5:D4:09:50:57:46:40:DF:D5:5B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C42DBE897BC8C24D93C9C9560
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87cb3f57-1853-385b-b56a-5fdf16ff959e.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.24.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:e8:97:bc:8c:24:d9:3c:9c:95:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=8dd9f8f2-95d3-4172-8831-da521bbbf5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:44:92:cd:89:d0:50:32:13:64:f3:3f:3e:
59:28:5e:3d:31:ba:cc:91:11:fa:51:5a:9d:17:5c:
46:05:3b:8c:0d:c3:63:dc:9b:be:6e:e3:b6:b9:91:
b9:a3:10:44:20:99:81:dc:c0:d8:46:d5:2e:ab:9b:
2b:a0:51:3f:d0:a9:fb:c5:9a:bf:2c:f2:81:0a:24:
0b:dc:fc:60:35:d6:da:1e:2f:b1:17:2f:d2:f8:40:
ac:9e:bc:54:9e:2f:cc:48:ce:7d:d3:65:34:eb:ca:
54:69:53:ea:e0:30:e1:25:da:03:0f:d5:38:c9:1d:
59:ac:a9:b3:f2:f0:f4:b2:fa:5a:29:95:21:60:79:
fd:2f:f3:ee:39:b2:d1:21:d1:23:88:db:28:58:a2:
85:08:1a:e3:1d:08:c1:3d:34:84:78:ca:97:d1:5c:
2f:dd:86:cb:3a:4e:43:71:80:03:6c:86:7a:7b:9f:
c3:a8:01:7f:75:45:ba:ca:5b:e1:c0:98:2b:b8:80:
3b:cc:41:69:0e:48:38:ce:1e:c1:b1:bd:05:5e:99:
a9:b5:af:61:ec:58:dc:d6:43:9a:a6:37:ba:d0:29:
d3:6c:73:60:cb:dd:65:47:2f:2a:99:a7:81:3e:a5:
92:3f:d9:d6:9d:6a:65:49:7c:84:24:56:9f:4e:f2:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DE:58:BC:28:97:8E:0C:2E:A1:A5:D4:09:50:57:46:40:DF:D5:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87cb3f57-1853-385b-b56a-5fdf16ff959e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:c1:86:0d:f1:ff:11:ec:b6:b8:b8:35:1c:a0:24:df:be:d9:
41:48:69:cc:1e:38:1c:c1:91:94:93:10:bf:c2:1e:7a:52:d8:
e4:7c:7c:00:0e:c8:67:56:e4:32:d5:28:48:34:57:f7:24:da:
d3:64:54:f6:e8:04:98:66:9c:7b:30:9b:3a:98:92:ef:dd:8f:
85:e7:de:10:f9:21:3d:20:19:16:0a:fd:2c:5c:5c:84:ec:5a:
6e:01:a7:c2:ff:ad:46:7f:9f:dc:df:f0:c6:0b:6d:6e:ac:34:
52:49:79:bf:d0:95:85:41:1c:91:d3:c8:98:28:e2:f8:e5:17:
a6:d5:9f:04:26:af:a8:45:43:f1:d6:89:d2:ea:cd:78:fe:18:
99:ca:82:36:04:00:07:83:f9:42:85:00:dd:99:bb:fd:be:c9:
f4:b5:81:7a:cc:fb:8d:0d:51:54:38:05:fe:be:15:0f:1d:95:
90:d7:a4:9a:d9:39:aa:db:02:71:cc:5c:0c:06:84:3b:73:72:
0f:19:b3:71:fe:52:10:f0:3b:4c:10:6c:b4:8b:ea:cb:37:e4:
ce:ab:f7:cd:69:92:98:e7:9c:be:99:47:bc:da:b2:44:fb:e6:
66:11:83:ae:a0:b0:ad:03:7c:11:52:14:f7:32:b4:d8:04:0b:
08:ce:a9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 09:45:46 2026 by rpki-client