This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c210c397-ff23-3af1-981e-1d7737900b8b.roa
File: c210c397-ff23-3af1-981e-1d7737900b8b.roa (raw, json)
Hash identifier: KDGMOpQQDgfpFXqI56wFrqMgeSk7IXXE8WWjBAG3QPg=
Subject key identifier: 19:9C:8F:CC:17:BB:2C:5A:0B:6B:BB:EA:F8:2B:C8:4F:B2:95:53:5D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C45A6A4596B4E4760A8C52400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c210c397-ff23-3af1-981e-1d7737900b8b.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.24.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:a4:59:6b:4e:47:60:a8:c5:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=078d67ec-872d-4a38-b03d-c661d9e53221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:1b:bf:2b:85:58:6f:be:42:d0:95:9b:be:
56:72:a9:bf:ac:ba:57:a4:5a:4e:af:c2:cd:05:ce:
f1:b2:6d:85:48:75:cb:6b:bf:5c:57:19:25:db:64:
9d:2f:56:97:29:48:48:33:a2:5f:1f:6b:ab:18:c4:
1b:e6:70:51:98:ec:c8:34:5d:bb:80:69:be:9c:94:
67:32:0e:d6:42:ac:54:62:02:33:54:5d:f5:1c:e7:
d9:98:26:b8:f7:cd:1f:05:40:d2:e8:80:ed:63:2d:
22:4e:11:cb:65:3f:62:2a:ff:98:5a:af:97:a7:0e:
b5:f5:60:ba:3b:67:aa:ae:19:d8:02:42:47:9d:b4:
58:2e:4a:22:1b:c7:20:25:e1:7b:ff:d6:59:e6:94:
dc:28:11:6d:94:f2:55:d9:9a:8b:de:68:f7:e8:c4:
22:a5:c9:c4:d2:20:ff:38:a3:84:fb:b9:e8:e1:b1:
4f:f8:71:71:bd:19:e5:6f:54:93:18:ed:7d:49:4c:
21:ba:9f:c4:f8:48:7b:33:c0:9f:b9:08:58:9c:63:
c0:0d:56:b3:82:99:3f:4c:03:ea:8c:cb:e6:a1:5f:
0e:c8:d4:6c:aa:fe:ae:45:be:5f:95:c2:b2:c0:71:
bd:e9:68:d6:73:12:b8:63:e5:11:98:c0:18:7a:a6:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:8F:CC:17:BB:2C:5A:0B:6B:BB:EA:F8:2B:C8:4F:B2:95:53:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c210c397-ff23-3af1-981e-1d7737900b8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:67:c1:39:2c:69:37:20:71:1a:78:d0:d9:91:6b:fb:37:59:
fd:c1:ab:e8:a7:af:b4:be:0f:1e:d0:34:cb:e6:8b:a6:bb:f0:
30:b7:9e:2d:38:4c:a8:39:a9:6b:2f:85:6b:24:de:55:72:18:
14:f6:06:7d:9b:e0:38:ff:99:3c:36:50:97:fa:16:06:06:18:
3d:82:ac:aa:5b:a9:32:c5:af:e0:27:49:f7:26:9b:2d:73:1f:
01:73:bb:78:0f:2a:fc:0c:88:2e:27:76:39:c9:a9:af:92:cb:
45:40:1c:1a:71:1b:c2:04:88:87:5f:44:0c:6f:70:b8:9d:3d:
be:59:f0:55:46:42:dc:31:bc:d4:47:6d:ed:d2:86:3e:fd:25:
93:47:eb:85:1e:82:69:d0:c3:ba:63:f1:d7:cb:08:fa:3c:3e:
56:61:56:9e:69:f1:fa:1a:e5:b3:44:10:c2:c9:55:6e:90:a0:
0c:cb:8c:e4:eb:a1:c5:b3:f2:95:cf:81:77:2f:5c:7b:f8:d7:
52:39:19:a4:d1:e2:f3:53:7d:97:db:c6:6e:f4:de:d0:8b:9c:
bf:8f:af:8f:c0:36:a1:0e:ea:e9:04:3c:04:d2:6d:e0:09:40:
10:a7:8e:51:27:ea:5d:7b:e1:99:e9:92:d4:6d:9c:38:34:c6:
7d:be:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 01:47:36 2026 by rpki-client