This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa
File: c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa (raw, json)
Hash identifier: 67rWRG8VOSmqgAV+qY8FtYQr31lgdlc4hCXsJ9vNxZg=
Subject key identifier: F6:02:6F:FD:AF:D6:45:3C:57:9E:09:A5:8A:E1:BB:8E:07:C0:E0:C2
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C42DBE3AE9F5D3F346D3DDB80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.29.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:e3:ae:9f:5d:3f:34:6d:3d:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=ec45028d-8f05-4c99-b0e9-34264090b4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:dc:ef:84:52:8f:b4:f7:a2:7d:4b:ad:9c:
25:6a:fa:c9:6d:e0:cf:98:d5:2b:4a:65:4c:46:da:
9a:9f:d3:9c:32:7a:dd:83:b4:8e:d9:be:71:3a:6b:
e9:6a:6d:6b:0c:70:49:ea:0b:28:22:ca:f4:be:9a:
6b:8c:64:f0:d3:4f:b0:09:1d:25:8e:6c:91:86:24:
5b:21:bc:8b:df:ca:4a:2b:c0:50:2d:be:5e:f7:84:
77:19:28:9b:08:35:2f:f5:8f:84:69:1f:4a:f9:9a:
fb:f7:2b:57:d8:d0:ee:da:fd:28:79:41:d4:55:d6:
bb:6c:25:5b:a8:77:37:c1:a6:b6:eb:5f:b4:f0:58:
7f:92:da:96:a3:2c:2a:01:f6:b0:a3:46:c3:1c:95:
9b:64:a9:7f:c3:e3:43:61:09:a7:ca:62:6c:97:fe:
8f:b5:ee:3a:07:22:b9:3a:a2:73:f9:0a:bf:04:01:
c4:43:82:79:a0:2e:bb:b2:ca:b3:72:ca:ab:1e:39:
29:8f:6a:ec:69:45:32:89:c9:50:a3:80:ae:9f:3c:
08:d9:d2:38:46:fb:e8:dd:48:72:eb:be:0b:69:8d:
d8:cf:35:89:60:cf:f1:1d:6f:7a:60:21:dc:b9:46:
18:3e:bb:8c:b1:56:8a:19:5f:6d:b0:90:6a:c1:53:
f7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:02:6F:FD:AF:D6:45:3C:57:9E:09:A5:8A:E1:BB:8E:07:C0:E0:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c31ac901-2d87-3acb-8aa4-2af1eb4e6520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:99:c5:a1:17:0a:ba:79:a2:d2:7a:c9:02:94:74:39:6b:f6:
22:33:3c:b5:03:9f:72:4c:b5:13:c4:c6:6f:de:03:60:08:00:
85:6f:30:ca:9e:71:49:b0:d4:33:cf:61:bd:8a:3a:0d:50:35:
c4:2a:75:c6:b3:76:1f:3e:0b:f4:19:40:3a:9a:90:0c:37:e9:
e1:0d:2a:94:c2:8d:9f:35:e4:14:51:4e:9c:6e:0f:e1:20:2c:
17:69:ff:1b:c5:7e:e5:3b:92:22:be:88:5b:81:54:05:d5:55:
f9:a9:4b:01:fc:25:26:4f:d0:0d:aa:b4:34:5a:fa:8c:7d:61:
77:d7:ea:13:f4:42:32:d0:d7:83:5b:2c:62:f1:f2:f1:b2:fd:
ba:ef:8e:a9:bd:fc:b5:34:56:4e:2d:02:36:26:d4:0e:6b:10:
1c:35:bc:6e:08:71:92:83:b9:a7:c8:bf:df:ed:94:1d:d9:2d:
63:3b:e6:c3:a1:64:c9:b6:9e:ef:f0:bb:fa:10:99:ca:5a:66:
b9:2d:be:53:33:c4:d0:1e:a7:20:7e:98:0f:bb:08:db:9b:29:
4a:23:57:bf:16:32:1c:4f:67:ab:72:b6:9f:27:7c:33:65:fe:
3b:99:7a:d3:d7:03:0f:01:1f:9b:ff:3a:b5:bd:a4:61:41:fb:
e0:85:8f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 16:27:47 2026 by rpki-client