This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2770d1b-29af-3f91-ad5e-8705f367fdc6.roa
File: b2770d1b-29af-3f91-ad5e-8705f367fdc6.roa (raw, json)
Hash identifier: ZXbKGLcPUCE5C3VFMbYf8DtBYkumE8QXchSEjMgAZKI=
Subject key identifier: A9:BE:CF:C8:DB:E5:C3:9B:24:6A:AA:C4:F1:B9:43:64:96:FE:84:73
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C45A69FB4997BD8908E47AC00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2770d1b-29af-3f91-ad5e-8705f367fdc6.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.29.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:9f:b4:99:7b:d8:90:8e:47:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=441bd325-8f27-4243-b86c-903b8fb9b320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f8:8d:24:74:05:dd:47:7a:eb:ed:05:e5:b4:
e3:41:66:42:fb:2b:57:28:74:67:e5:95:35:2f:06:
d5:35:63:b4:20:d4:4a:c3:7b:12:d9:ca:26:1f:4b:
33:78:c3:6c:1d:9e:48:ec:04:13:a6:1c:54:cf:1e:
64:52:7f:ed:d8:05:84:41:1f:90:1e:48:44:0b:ae:
84:6f:ab:13:cb:7a:78:f1:07:0a:56:b1:fd:51:5b:
0f:41:95:26:0d:e0:86:62:4f:96:48:53:44:f5:a5:
7d:06:6f:56:81:a5:e9:9e:2f:74:a9:31:69:6b:06:
fb:9c:8d:74:79:fa:10:64:a4:90:c2:9d:9a:7e:e4:
eb:a1:39:0c:67:0a:44:49:0a:ea:e9:ca:61:53:78:
c6:c9:a0:c8:49:a1:68:85:b6:9b:91:25:67:64:9b:
69:80:a8:3a:1a:cd:42:64:54:b2:83:b1:cc:d6:3c:
38:c8:c4:0a:cf:c4:1e:d3:3d:2a:20:75:88:7c:35:
9f:1e:de:6c:f2:9a:2f:96:d7:d7:1c:0c:14:9e:e0:
e4:70:44:75:7e:45:af:69:94:e9:fc:77:11:26:ef:
2d:fd:c1:9f:1d:2a:e5:63:f1:b9:b4:9e:83:81:f1:
bf:fd:42:19:bd:51:3d:bc:4e:64:3f:b9:4f:53:08:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BE:CF:C8:DB:E5:C3:9B:24:6A:AA:C4:F1:B9:43:64:96:FE:84:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2770d1b-29af-3f91-ad5e-8705f367fdc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:76:0a:39:80:25:8b:cf:90:91:26:f3:98:d9:a2:1d:6e:89:
3b:54:dd:ec:86:e6:99:0d:21:07:3f:43:69:66:4b:c1:bb:1f:
8e:5f:67:6a:ce:2f:28:c5:73:0c:7c:24:ef:ff:b4:9c:d6:aa:
67:75:94:1f:78:3a:0c:fc:e5:84:2e:71:a9:19:82:51:93:f8:
ff:53:26:7f:bd:98:db:fe:16:d1:d3:cd:c5:f8:a1:51:e3:f8:
e6:5f:60:fb:36:7d:28:84:52:2c:07:95:f4:7c:b7:61:bf:dc:
5d:a7:6d:5c:71:30:d7:bf:58:b5:2c:de:6b:81:fd:5d:bc:5a:
32:c6:f2:75:fb:68:4e:95:9a:37:91:da:20:9f:3b:f4:93:da:
5a:1b:6d:cf:17:47:33:0c:2f:4f:09:77:d5:d3:a0:9a:8c:9d:
34:f9:64:07:08:3f:9f:c6:32:c1:72:da:85:90:5c:ac:dc:d9:
b4:d2:e1:0f:6f:d3:09:bb:ad:f7:81:ae:82:f5:e2:c1:27:27:
03:d4:62:b7:61:ef:01:0a:8a:0f:b1:af:8f:35:e4:a3:83:04:
61:ce:af:63:bf:3d:c0:bd:1e:f0:0a:f0:48:13:93:79:b7:5e:
56:17:07:12:54:86:87:70:a2:eb:bf:ef:57:38:26:ca:39:95:
a8:d7:2c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 09:45:44 2026 by rpki-client