This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d9dd365-dca3-304e-9d75-90b05d601681.roa
File: 8d9dd365-dca3-304e-9d75-90b05d601681.roa (raw, json)
Hash identifier: PgFniZeaQ3NSrNxWQKEtHJGZPhlYgkz2rm/KqTH6mV8=
Subject key identifier: 64:E7:B9:B1:A4:4B:CB:AF:82:EE:F9:1E:0C:B5:A7:39:6B:A1:75:22
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C42DBEB77EE03F5529141C300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d9dd365-dca3-304e-9d75-90b05d601681.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.24.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:eb:77:ee:03:f5:52:91:41:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=e97b99d5-d162-485f-9ac2-e28274fc6f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:44:dc:0c:d5:0f:10:5b:96:36:23:69:8c:
37:1a:2d:80:c1:17:a4:64:3e:d6:c7:90:a2:c5:19:
86:1c:8c:b8:59:c8:1b:e4:e7:3b:49:68:9d:19:cd:
a7:b5:32:10:11:0c:10:92:6d:cc:43:17:00:26:09:
9d:72:fd:3d:88:10:d6:fd:f4:8d:07:4a:b3:89:74:
49:8e:8f:e1:3a:99:06:58:be:7e:88:6f:fa:bc:f2:
8a:53:13:e7:ed:b5:c4:fb:4f:91:ad:e7:43:ce:be:
76:73:c9:d5:01:7d:40:97:d5:8c:eb:12:d1:d8:fd:
cf:43:d0:ae:65:31:52:19:7e:c9:3a:2e:e8:a8:77:
28:22:af:7a:33:88:ae:d6:bb:f3:9c:cc:05:70:80:
32:30:59:af:2b:48:73:33:30:7f:51:f3:b9:ee:c2:
8b:63:c3:6f:04:b6:25:a5:05:d0:69:7c:bd:66:ed:
27:89:45:c9:18:8e:49:f7:61:7d:62:bc:7c:46:27:
b3:d0:e6:c1:9c:64:7c:15:00:b3:46:8c:42:cc:fa:
51:a0:35:5a:ce:c0:bc:3c:b6:10:07:59:11:61:11:
d8:45:3f:72:60:3e:38:9f:3b:80:d2:ec:02:82:3a:
48:db:f7:c7:79:a9:1c:e3:e1:92:96:64:1c:d6:cc:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E7:B9:B1:A4:4B:CB:AF:82:EE:F9:1E:0C:B5:A7:39:6B:A1:75:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d9dd365-dca3-304e-9d75-90b05d601681.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:a3:50:31:92:93:e8:18:9a:8e:f8:da:e0:67:c9:fe:70:ba:
00:af:87:76:58:68:81:72:7a:e0:5c:ae:3f:a6:e3:82:92:f0:
32:39:20:b4:3e:49:97:bc:d1:5b:46:29:92:97:90:76:58:75:
16:17:6e:6b:81:5c:46:ac:6e:96:ea:d0:d3:6f:9e:53:d6:cb:
66:14:0e:d0:a9:6e:be:a5:ef:7d:38:93:f6:3e:4d:fc:32:69:
89:97:32:9e:a8:0f:73:a5:1a:29:79:8e:0d:38:ed:52:e0:fd:
3b:9c:e7:10:20:8a:d4:e6:39:cf:99:61:d1:74:5e:09:42:25:
0c:dc:18:ff:03:a2:16:7b:36:48:3d:f0:95:b3:4a:9a:58:69:
8c:4e:57:fe:89:e3:9a:43:d9:02:47:6d:28:ef:f3:90:62:ad:
d3:48:7a:11:37:da:c8:8b:d3:90:df:8b:28:b3:78:56:a1:be:
1a:30:4f:d2:cf:8f:a9:0c:ea:d5:fd:80:01:6f:13:33:aa:bd:
41:ed:ba:2e:fb:a5:8c:12:8d:0a:bd:e5:19:16:7e:a2:51:ec:
95:b7:b6:fb:5f:fa:a4:67:a9:24:38:2d:09:79:44:a9:63:3d:
74:b9:02:6e:ab:97:c2:23:de:a6:35:81:51:23:97:47:53:b0:
ee:05:a4:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2+t37gP1UpFBwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk
ZTk3Yjk5ZDUtZDE2Mi00ODVmLTlhYzItZTI4Mjc0ZmM2ZjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2tE3AzVDxBbljYjaYw3Gi2AwRekZD7Wx5Ci
xRmGHIy4Wcgb5Oc7SWidGc2ntTIQEQwQkm3MQxcAJgmdcv09iBDW/fSNB0qziXRJ
jo/hOpkGWL5+iG/6vPKKUxPn7bXE+0+RredDzr52c8nVAX1Al9WM6xLR2P3PQ9Cu
ZTFSGX7JOi7oqHcoIq96M4iu1rvznMwFcIAyMFmvK0hzMzB/UfO57sKLY8NvBLYl
pQXQaXy9Zu0niUXJGI5J92F9Yrx8Riez0ObBnGR8FQCzRoxCzPpRoDVazsC8PLYQ
B1kRYRHYRT9yYD44nzuA0uwCgjpI2/fHeakc4+GSlmQc1sy8cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTnubGkS8uvgu75Hgy1pzlroXUiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGQ5ZGQzNjUtZGNhMy0z
MDRlLTlkNzUtOTBiMDVkNjAxNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyjUDGSk+gYmo742uBnyf5wugCvh3ZYaIFyeuBcrj+m44KS8DI5ILQ+
SZe80VtGKZKXkHZYdRYXbmuBXEasbpbq0NNvnlPWy2YUDtCpbr6l7304k/Y+Tfwy
aYmXMp6oD3OlGil5jg047VLg/Tuc5xAgitTmOc+ZYdF0XglCJQzcGP8DohZ7Nkg9
8JWzSppYaYxOV/6J45pD2QJHbSjv85BirdNIehE32siL05DfiyizeFahvhowT9LP
j6kM6tX9gAFvEzOqvUHtui77pYwSjQq95RkWfqJR7JW3tvtf+qRnqSQ4LQl5RKlj
PXS5Am6rl8Ij3qY1gVEjl0dTsO4FpBM=
-----END CERTIFICATE-----
Generated at Sun Jan 11 09:44:57 2026 by rpki-client