This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdeeff8b-e99c-36bb-adc8-c206890065e5.roa
File: cdeeff8b-e99c-36bb-adc8-c206890065e5.roa (raw, json)
Hash identifier: ksNeYCU1TW9m6xf7JZSA5BOlEQZjem0TtmKC23u5BnY=
Subject key identifier: 91:39:0E:F3:68:92:91:91:5B:B8:E6:73:3E:41:02:79:D1:CA:3B:B7
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C4871D885A6DF379D6120EF00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdeeff8b-e99c-36bb-adc8-c206890065e5.roa
Signing time: Tue 23 Dec 2025 14:00:39 +0000
ROA not before: Tue 23 Dec 2025 14:00:39 +0000
ROA not after: Mon 23 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.17.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:48:71:d8:85:a6:df:37:9d:61:20:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 23 14:00:39 2025 GMT
Not After : Mar 23 13:00:39 2026 GMT
Subject: CN=5d067023-b0b8-4565-87d8-7d318e92a4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:13:8f:c8:0e:a0:82:c1:a3:c0:3a:e6:8d:2a:
64:72:46:87:39:7d:85:19:7d:a1:58:e7:1b:39:3a:
b4:78:01:6f:7e:74:de:86:46:48:39:b0:14:89:bb:
90:e8:98:f0:58:ae:a4:52:92:d7:e4:f4:93:9f:9b:
5e:5a:d7:3b:64:9b:ac:4e:b0:d1:95:15:5c:1d:c7:
87:5f:38:29:37:f7:85:ab:f3:c7:c8:3c:b7:d5:00:
1a:db:d6:6d:8e:bf:69:29:a8:2e:0d:c3:08:dc:76:
33:55:cd:75:45:0c:4e:e2:ef:6e:03:74:3b:67:88:
0c:42:af:48:1e:26:7e:06:ed:7d:28:36:11:ee:45:
c3:e6:03:32:e9:ce:98:95:ef:c5:0a:65:e9:71:e6:
73:d7:fb:1c:75:61:77:74:15:aa:46:03:d0:92:c9:
b9:88:83:69:db:52:26:e6:7c:5b:5f:72:f5:77:30:
cd:7f:93:3f:87:c5:d3:01:37:cb:93:65:0b:f7:b6:
7e:08:c5:cf:2f:6c:1b:51:45:7d:92:04:d0:01:61:
68:a6:6b:3b:97:a3:f3:1f:bf:c9:6d:b5:f6:ca:e6:
f7:22:c0:88:ca:1a:db:d2:aa:b5:3a:e7:fa:db:79:
3f:0b:b4:cb:3a:74:c1:c1:73:7f:5d:d8:75:22:3e:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:39:0E:F3:68:92:91:91:5B:B8:E6:73:3E:41:02:79:D1:CA:3B:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdeeff8b-e99c-36bb-adc8-c206890065e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:e2:63:d2:60:97:b4:49:aa:4b:9a:67:45:a8:92:67:9b:84:
91:90:de:d9:29:55:c1:10:09:65:c7:17:24:d4:44:61:cf:b6:
56:3c:82:ec:08:a4:32:73:92:5d:f4:5c:e0:b4:8d:4b:a3:74:
d8:79:c2:a3:4a:ea:46:02:a0:a0:e4:26:a7:95:c3:05:95:95:
30:a5:7f:e6:ac:8e:46:c6:4a:08:9a:28:61:cc:40:e1:b2:88:
c7:42:99:fa:2a:35:75:42:da:d7:6d:26:04:7b:0f:28:ba:ca:
ae:4c:10:63:01:af:b4:71:43:82:89:b4:76:7e:b6:4a:b8:ad:
95:06:f7:f7:6b:5c:46:e1:23:b6:1b:80:2b:3f:3b:0a:6e:82:
32:86:77:11:07:1b:87:3c:ff:60:02:01:69:7d:86:da:ea:b9:
29:f2:62:7a:35:e4:cd:1c:b8:1d:5a:a5:93:2a:bf:81:9d:cd:
75:44:8c:98:bc:95:08:9b:c6:1a:1e:ed:35:1e:88:d4:fb:93:
7d:bc:f0:85:05:87:c2:47:3a:b1:1f:e0:53:cb:94:e1:15:09:
59:52:8a:46:85:21:f8:8b:30:bc:85:32:2e:5b:32:5f:d0:88:
7a:66:c1:e5:cb:16:c5:59:df:63:e4:b7:a9:15:da:5e:28:4b:
8d:3e:30:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 01:45:42 2026 by rpki-client