This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa
File: bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa (raw, json)
Hash identifier: ThGFGibDQowk5RR2yriqrcsaMCPdNdxnGHcs3T5Z1+Y=
Subject key identifier: 0A:9F:1A:D6:32:11:64:3C:69:83:57:9F:24:11:78:42:38:DD:FB:F4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C5A96742C711DCF46742FD080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa
Signing time: Tue 30 Dec 2025 02:00:30 +0000
ROA not before: Tue 30 Dec 2025 02:00:30 +0000
ROA not after: Mon 30 Mar 2026 01:00:30 +0000
asID: 19905
IP address blocks: 173.24.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:5a:96:74:2c:71:1d:cf:46:74:2f:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 30 02:00:30 2025 GMT
Not After : Mar 30 01:00:30 2026 GMT
Subject: CN=e2f93475-2813-442b-bc17-425b3e013119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:41:6f:cb:4a:e7:58:9a:18:bc:41:fe:04:
5e:b4:77:41:38:80:e7:b4:a2:32:d2:a5:01:88:9f:
64:87:53:40:e3:a4:6d:3b:e1:a3:59:59:ae:3b:82:
7a:75:6f:b2:16:8e:3b:16:7a:78:06:90:59:cc:58:
56:ec:c4:e3:ac:14:4b:24:0e:75:8d:32:92:d1:f9:
c4:28:30:e6:6e:30:3a:f1:81:fe:9c:5c:3b:be:84:
b9:2b:bb:8e:13:6a:18:ad:81:d7:ca:fc:bd:ca:d1:
5d:b5:e3:92:f9:37:9d:2d:85:b5:23:cb:35:ca:c6:
3e:a6:d6:c9:6c:c5:61:9b:a3:c9:02:ab:70:a2:9a:
c4:2f:bf:27:07:e2:16:0c:08:86:ad:99:57:c7:75:
8c:30:1e:6e:c6:a2:8e:45:e6:7b:94:00:5e:4e:b4:
af:13:1b:f3:fd:a4:a8:87:c0:1a:e2:ff:ff:79:01:
2f:eb:07:94:11:50:83:a2:be:ee:de:44:e6:ea:46:
49:14:e6:4d:15:65:ec:75:17:66:3b:fb:17:cb:88:
cc:98:4c:cc:a4:b9:c6:ff:5e:ff:c4:07:9d:14:2e:
f8:63:b9:12:f0:89:96:29:38:4c:a1:20:6c:1a:ca:
83:56:de:b7:e9:fb:62:13:15:68:2a:44:6d:18:ec:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9F:1A:D6:32:11:64:3C:69:83:57:9F:24:11:78:42:38:DD:FB:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:bd:5e:73:20:6c:dd:d0:d3:36:ed:c4:fa:9b:1c:5f:d5:a0:
65:95:9f:64:a1:ff:f0:70:14:6e:c8:83:6a:a6:30:44:0a:79:
80:da:9c:0c:d7:d0:1b:74:cd:7d:84:63:ef:34:a0:e5:cb:2f:
05:e6:ec:07:73:98:6b:1a:ef:07:ce:a0:43:25:84:9e:31:c0:
c0:ca:6b:3c:0b:16:d6:04:dd:25:73:c5:12:f5:30:c1:dd:ae:
bb:39:05:d1:ef:5a:13:35:72:84:a1:fd:bb:d5:71:0b:86:e1:
43:a1:67:a5:23:7f:07:61:d2:16:5c:fd:c3:1b:33:14:30:61:
8a:44:bf:db:2a:34:89:35:4d:44:73:8e:42:35:6d:e2:23:59:
c0:c5:dd:7f:ec:0e:46:50:af:fa:b8:94:1a:2c:e2:eb:da:13:
9b:e2:8e:f7:b2:f5:74:0d:9e:01:51:24:d5:1a:e1:92:51:55:
f1:64:7f:36:c4:c9:3b:c3:13:9a:eb:0c:93:79:d4:22:16:03:
77:33:c3:c1:6f:46:ce:74:40:95:89:86:b8:6e:bf:9d:23:aa:
57:76:81:04:2d:da:bf:81:70:84:10:7b:05:7f:a5:74:80:29:
1e:8b:80:fc:f7:90:9b:69:53:89:79:24:69:be:07:a5:e8:14:
14:10:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 09:47:23 2026 by rpki-client