This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa
File: d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa (raw, json)
Hash identifier: DjOJJ/aWku92HNn+GUKBQrPxPVvi3evhbYy8JM9b62g=
Subject key identifier: 8E:18:A3:C9:E6:E2:A9:F4:FF:A1:9A:44:EF:43:71:E8:0B:DD:CB:C4
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C45A66FCCA30772BD7C1AE600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.16.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:6f:cc:a3:07:72:bd:7c:1a:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=65365c51-82d4-4035-a852-062e71e577fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:e8:25:47:34:bc:41:6b:2b:e1:2e:24:00:
50:8f:6f:16:c4:92:9a:b0:84:a4:f5:1f:8d:c9:5c:
dd:ab:3c:ca:69:c7:cf:f0:a7:f4:50:b3:37:24:87:
5c:35:ce:d2:1b:1b:d7:ca:ff:f3:fd:e7:42:6b:35:
f7:e7:bb:85:90:e3:45:c7:b6:0d:3e:05:1d:ac:b5:
b3:dd:30:ec:ee:16:3f:f3:c1:8c:65:c5:ee:4a:d6:
af:22:4a:a5:6b:cf:10:53:23:72:7e:28:ee:de:4c:
d8:00:49:41:c6:12:e5:85:f2:c5:27:f6:92:f7:10:
a8:12:a5:a3:85:a4:64:b7:5a:a3:69:c1:a6:c1:05:
32:94:7d:4a:f3:56:e9:e0:4c:6c:1d:5e:5c:96:da:
00:d2:52:0f:62:95:79:49:a4:bf:4c:33:72:56:73:
7c:18:6f:e8:36:bb:a6:8f:d3:4f:d1:d7:b7:b0:30:
6c:98:22:a0:fa:c5:35:55:4a:5a:55:4d:fd:98:2c:
d5:2b:86:ea:50:8d:0c:19:42:4e:83:60:d3:1b:82:
e5:0d:b3:b7:f6:08:4b:74:46:de:4e:3b:ca:65:1c:
1c:ea:d0:13:92:72:86:5f:60:ae:2b:3f:ab:64:59:
3a:ac:49:bb:d3:a8:2c:f4:93:3a:53:c6:e0:68:d2:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:18:A3:C9:E6:E2:A9:F4:FF:A1:9A:44:EF:43:71:E8:0B:DD:CB:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0a1f8c9-5bb7-3998-b52c-08d885dc095b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.16.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:f8:d8:b5:37:73:0d:4e:c6:5b:9e:22:00:3d:63:01:a5:3b:
ab:2a:a1:a3:2b:1e:10:ac:e3:d4:07:4b:aa:7f:c7:2d:7e:d5:
ab:2b:2d:6f:0d:b0:cb:30:81:a7:be:07:11:ed:8f:cc:37:43:
64:9f:19:c5:88:92:b6:9b:f8:ab:eb:3e:9e:60:f0:a3:6a:4b:
80:ff:70:4c:24:18:a2:fd:d7:0c:4e:1b:4a:c7:4d:2e:9c:84:
f8:0e:4c:70:53:ef:11:be:05:89:bb:cd:f5:99:83:74:b5:6e:
62:70:92:2d:28:7e:33:75:48:85:7f:c3:71:55:fb:c4:92:bb:
e7:b0:0d:45:1e:7c:24:ce:67:ab:f7:ad:24:2c:83:bb:1f:6b:
33:f8:94:33:80:25:62:25:87:0b:3d:9f:6c:d6:22:8d:ed:e3:
cd:6c:d8:d0:a1:f8:53:38:b3:8f:d0:c5:d2:53:97:63:29:7e:
a8:92:11:b0:47:42:85:58:ae:6f:d8:6f:0b:33:64:b8:9e:5a:
a6:ff:73:89:f3:23:be:ef:11:3e:bb:26:81:f3:e4:42:90:9a:
f1:3e:9f:fc:5c:95:eb:fd:b0:74:e7:af:38:8f:3a:1c:b1:9e:
73:f4:81:16:c9:24:6f:9d:8b:06:2d:82:b3:53:ee:85:7c:c5:
44:33:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 09:45:37 2026 by rpki-client