This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e4a7591-5a03-33b2-a7c7-895cf4eaf136.roa
File: 8e4a7591-5a03-33b2-a7c7-895cf4eaf136.roa (raw, json)
Hash identifier: JDvbzBBKpqiQ6fXIzbjdIgj87KqMItPrNngJdS+A1Bs=
Subject key identifier: 51:A4:D6:BF:F7:AA:71:A0:C1:7A:8E:06:5E:5C:F3:DC:37:6A:37:F3
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C4871D54AF1600EE6AFD4DE80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e4a7591-5a03-33b2-a7c7-895cf4eaf136.roa
Signing time: Tue 23 Dec 2025 14:00:39 +0000
ROA not before: Tue 23 Dec 2025 14:00:39 +0000
ROA not after: Mon 23 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.18.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:48:71:d5:4a:f1:60:0e:e6:af:d4:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 23 14:00:39 2025 GMT
Not After : Mar 23 13:00:39 2026 GMT
Subject: CN=5e2e8f94-c0be-4786-8309-1e43dfd6c84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:a5:81:a2:26:bc:35:e8:f5:8b:2b:6f:4e:
f2:fa:31:21:fb:75:8b:9c:9f:a7:84:1d:ac:db:15:
5d:93:09:4e:32:41:79:c8:c4:db:a4:b9:fc:c1:07:
62:61:a9:76:9e:4c:d6:06:2e:29:1e:ab:5b:82:d2:
67:fd:1c:14:4f:aa:3d:56:01:59:08:b1:b6:f7:49:
d3:f6:fc:ae:d7:08:8d:c4:f1:eb:bd:a2:4b:25:e3:
7c:db:bf:c1:12:88:63:67:f7:78:ec:4f:9a:60:cd:
8b:fd:aa:b3:8d:9a:24:d4:03:f5:7b:f0:f7:4f:32:
da:39:c1:f9:d9:b4:64:43:86:f8:47:7b:b0:d2:99:
8e:f3:84:c6:ee:ad:97:b0:b5:8b:d7:a7:35:e8:ef:
91:36:1b:2e:97:7b:53:e4:69:c3:68:0d:8c:ce:4f:
3a:22:6d:d4:4e:07:fd:41:59:b5:fc:c5:98:94:19:
fe:aa:f9:e6:b5:4e:23:58:bf:bc:07:cd:ad:d2:ed:
7a:26:1b:57:97:c9:05:c4:de:38:df:dc:70:0f:e9:
a2:5f:83:9e:bb:2d:20:87:57:50:80:83:08:20:d5:
9f:5a:ba:1b:df:aa:5b:a1:87:0b:ae:4a:7f:7a:88:
29:17:9b:b4:15:f7:70:0d:4d:e2:58:a6:24:dd:c8:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A4:D6:BF:F7:AA:71:A0:C1:7A:8E:06:5E:5C:F3:DC:37:6A:37:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e4a7591-5a03-33b2-a7c7-895cf4eaf136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.18.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:75:57:f1:92:bb:4a:94:d5:73:d9:8b:b1:70:27:63:04:54:
75:74:77:e0:73:c2:a9:0b:f8:42:fe:a6:02:6a:f0:84:c7:ab:
42:b5:fa:68:c8:b0:79:06:ae:f5:85:32:25:42:b8:72:74:a1:
7c:78:9d:17:e7:05:53:e4:f9:ca:e0:d9:7b:4a:4d:ce:5c:87:
e7:74:3b:0d:72:dc:ac:5a:6c:87:2d:67:3d:03:05:2a:64:5a:
e0:b5:75:d6:fc:74:cf:78:10:61:79:e3:bf:a5:d3:55:64:59:
af:dd:e9:7e:d8:32:71:b9:4c:7b:23:47:65:ce:0d:61:71:ae:
8b:ae:d4:26:ff:fe:89:f5:cb:68:33:eb:a9:12:a6:80:6f:55:
61:ef:c8:61:b9:95:fa:74:6b:e2:6f:6b:1b:8e:9f:35:70:05:
99:c2:a6:a9:08:f2:95:f3:3f:2e:a8:16:04:c1:d7:56:ab:ee:
17:16:d2:b2:6c:2e:7d:58:cf:9e:29:b6:ed:96:cd:a7:57:ae:
c6:7b:f1:dc:d7:8a:0a:a9:b4:ee:6c:dc:61:32:cb:c3:bc:13:
af:55:bb:16:20:6e:a4:b1:82:ec:7e:8b:b5:ac:cc:d4:7f:a1:
42:96:73:89:c2:1d:80:9b:db:01:a5:0b:6f:f3:59:8c:42:e5:
4d:69:21:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 01:45:15 2026 by rpki-client