This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbac3622-d922-3d32-93c8-7b1c3832c248.roa
File: cbac3622-d922-3d32-93c8-7b1c3832c248.roa (raw, json)
Hash identifier: jE4/n3z3/5gh8rPigz/nz4clxcpD2+Q0TiU9iZstRxU=
Subject key identifier: 30:43:82:2C:01:76:16:20:9A:93:B5:AB:BA:10:8F:A1:DE:06:00:78
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C42DC1BB24663D8C6D0219B40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbac3622-d922-3d32-93c8-7b1c3832c248.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.16.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:dc:1b:b2:46:63:d8:c6:d0:21:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=e021e9dc-1f16-4759-88a6-a08959f6b2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:d8:6f:66:9f:f3:9f:3a:04:5e:5e:42:fc:
f1:5f:18:06:a9:74:c8:52:b4:2f:0f:64:6e:09:6a:
e4:ec:43:65:0d:b9:73:23:7f:00:98:92:b1:c7:a2:
c8:4a:a1:d7:3b:98:cd:4e:e4:6e:b7:40:30:c1:1e:
a4:77:a2:bc:c2:3e:47:f3:c8:08:67:6f:74:b3:60:
a9:03:0b:5e:68:7f:01:fc:f0:be:56:6e:78:27:78:
48:91:a2:b2:65:9c:96:d1:12:f9:d9:14:48:4d:60:
ff:7e:f0:5a:db:02:28:fc:22:52:46:a4:03:a3:a1:
7c:ce:a6:60:6d:6a:23:ae:11:c8:f3:7d:90:59:3b:
7b:b3:ca:2f:60:1b:a3:5e:12:8d:e5:1c:17:c0:99:
e1:93:ef:c7:bc:b5:5f:05:c3:1e:8b:b1:a3:b4:47:
3b:20:c4:49:22:5c:9f:9f:12:b5:f3:b4:92:a4:e1:
ec:ed:3e:26:1b:9c:59:e6:aa:d3:e0:25:18:fb:07:
7c:cc:ca:58:e5:85:17:dc:34:a1:81:6e:bc:56:bf:
5e:e4:91:86:66:7b:17:2e:a2:45:9f:d6:e7:4c:b3:
a7:c9:87:da:3b:cc:33:fc:9e:da:24:e7:9a:e5:6d:
f3:bb:b5:d9:1d:f5:a2:d4:35:44:6f:1d:d1:1e:1c:
48:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:43:82:2C:01:76:16:20:9A:93:B5:AB:BA:10:8F:A1:DE:06:00:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbac3622-d922-3d32-93c8-7b1c3832c248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:da:1f:fb:6b:40:fb:b8:e6:cf:e0:0c:6c:8d:50:ba:fd:ee:
39:c9:45:2a:21:fc:97:b5:65:08:9d:81:74:58:02:b7:57:bb:
41:54:9d:db:e1:62:f9:c8:41:20:94:88:58:76:0d:d0:8a:5c:
0c:da:7a:45:4a:7c:29:95:a9:65:3e:2d:ff:57:bc:21:16:d6:
b9:d1:f9:e1:11:f3:98:e8:b1:b5:cc:05:5a:61:76:b8:54:e2:
1b:13:ca:e2:ce:8a:17:18:10:dd:53:d8:d1:ee:f8:2d:f4:f4:
de:f0:98:7e:fd:4e:06:79:52:8f:a1:78:57:0e:2e:aa:c7:9f:
e2:03:34:5f:72:8f:97:ab:5e:04:93:d7:24:4c:2c:8e:bb:08:
0f:02:76:db:21:55:dd:73:59:db:16:0e:d3:b6:39:08:a4:9a:
cc:e7:45:0d:df:71:a2:70:f0:2c:35:45:9a:83:3d:e4:aa:10:
49:1f:ad:5f:2a:34:cc:2d:b3:ca:8b:ea:61:0c:87:8c:34:be:
42:01:4b:fc:cc:38:20:2f:3e:e9:84:11:16:7f:f3:af:ff:14:
a9:56:24:8f:0b:3b:fc:23:de:e8:ed:5d:09:6b:cd:4d:bb:de:
e4:a8:03:0b:f5:42:a4:5a:7d:b6:1d:b4:4b:a1:99:65:b0:f9:
58:d0:c3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 09:46:08 2026 by rpki-client