This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa
File: c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa (raw, json)
Hash identifier: eaoZQoUT6UUJn/HIsYW7fFrfpFBE0y2qRnW//l7xcSM=
Subject key identifier: 8A:24:DB:50:45:90:7E:56:A1:2D:D9:AD:CA:20:6A:A4:44:2D:90:F4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C48712F237BC9B19B5EEC60E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa
Signing time: Tue 23 Dec 2025 14:00:39 +0000
ROA not before: Tue 23 Dec 2025 14:00:39 +0000
ROA not after: Mon 23 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.31.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:48:71:2f:23:7b:c9:b1:9b:5e:ec:60:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 23 14:00:39 2025 GMT
Not After : Mar 23 13:00:39 2026 GMT
Subject: CN=6613f483-3e54-451b-919b-d5cd859c8b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2a:ea:4f:2a:b2:fa:57:c8:5e:6a:72:ef:03:
19:bc:9a:d2:7b:bf:b7:6e:6f:16:b1:5c:25:47:c0:
27:20:e0:b1:e2:70:a5:cd:26:8c:eb:f5:5d:f7:26:
bc:0e:5a:a5:f9:c8:8d:e3:9f:4a:d6:45:86:98:13:
ee:84:d8:d3:32:64:e2:bb:c1:94:12:27:68:b1:af:
9d:5b:3e:3c:64:b3:3f:3e:fb:08:3e:da:1e:06:54:
ef:f1:09:3b:ca:8d:3a:b6:e5:43:49:52:88:c8:2c:
ea:f2:ce:fc:43:af:d4:ab:08:79:8f:6f:1c:30:32:
db:b0:30:47:af:8b:98:48:0c:4e:16:88:16:95:89:
1c:5c:2d:00:1b:1b:99:f5:b8:3e:4d:a1:59:77:c0:
9a:29:a8:e1:f0:5c:74:e1:6d:c5:fc:99:7f:d7:4c:
d6:89:89:22:61:32:de:6a:be:b0:96:52:39:88:83:
c2:f3:61:45:07:79:8e:cc:fe:c6:d7:fd:98:82:dc:
5a:54:32:a0:e0:7f:ad:a7:66:90:73:6f:ba:cd:1f:
b4:ea:53:d4:50:38:6c:fb:ad:3b:9b:0c:03:88:23:
c4:a2:e2:cd:61:6f:71:6b:2c:b4:01:16:53:62:91:
c1:e0:51:cb:84:cf:f5:d5:39:20:4e:8b:ce:b9:9a:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:24:DB:50:45:90:7E:56:A1:2D:D9:AD:CA:20:6A:A4:44:2D:90:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5a9d3f2-860f-30db-aec5-c9d5ddb59189.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.31.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:73:a5:96:de:3c:75:09:c8:8a:15:d3:af:40:81:ec:da:d1:
d2:ce:31:9e:20:c1:c4:b2:09:9c:cd:7f:9c:f4:8c:cc:b4:3f:
66:55:f8:33:9e:65:ad:26:73:f6:79:0b:b3:82:91:39:2e:aa:
0c:1f:eb:b8:44:71:e2:76:f7:cb:4e:2a:be:36:4f:1e:fc:7d:
2c:64:9d:6c:e6:9b:d0:25:2f:03:88:22:72:a0:65:7d:1c:bd:
e1:5e:e5:3e:64:84:19:b4:60:f8:57:54:60:d2:98:ad:5e:72:
36:f3:0f:c8:96:21:e5:74:a1:9c:fb:8b:7c:f9:99:e1:ab:00:
cc:10:dc:14:70:95:9f:3b:6d:a2:f8:93:2d:94:4e:12:f8:78:
10:03:8b:d3:4c:62:ab:d5:a0:59:35:c2:90:8a:0d:dd:a8:8d:
f3:cb:9c:09:85:c5:40:1f:79:64:af:39:ec:10:a7:51:2d:9c:
3b:e9:26:5b:21:12:27:46:04:72:46:63:b3:b7:fe:1b:df:3a:
da:fb:f1:65:95:f4:7c:7d:40:7e:d3:6b:ff:0f:55:36:d6:62:
da:99:9e:5f:f6:68:85:40:6c:f0:aa:02:bd:f5:f8:3e:5c:e0:
d5:81:6f:ec:94:3b:bb:33:ba:2d:b4:c2:ad:b9:b0:08:fc:e4:
32:fb:31:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:43:09 2026 by rpki-client