This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1877b3f-cc18-3ac8-a2a7-5ad9fdbd5f73.roa
File: d1877b3f-cc18-3ac8-a2a7-5ad9fdbd5f73.roa (raw, json)
Hash identifier: etTRxCir0pdeUZPvfh+87EgVSKkLF5jK2cd6qNrvvBU=
Subject key identifier: 60:C4:2E:FA:6A:11:1D:98:A9:9F:1F:37:0A:25:FF:DA:62:04:A0:DC
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C69F146F743975A16A17CAC70
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1877b3f-cc18-3ac8-a2a7-5ad9fdbd5f73.roa
Signing time: Sun 04 Jan 2026 14:00:38 +0000
ROA not before: Sun 04 Jan 2026 14:00:38 +0000
ROA not after: Sat 04 Apr 2026 13:00:38 +0000
asID: 30036
IP address blocks: 173.29.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:69:f1:46:f7:43:97:5a:16:a1:7c:ac:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jan 4 14:00:38 2026 GMT
Not After : Apr 4 13:00:38 2026 GMT
Subject: CN=12e84d99-15ac-4466-bf63-2f834a3e622c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b9:37:fd:d7:ba:dc:bc:12:5b:8c:38:9f:2d:
ee:04:c9:a2:27:5b:1a:2a:5d:ba:7c:7e:98:d0:86:
22:f5:96:dc:56:bf:d4:af:93:16:6f:c7:fe:0b:b5:
8c:6c:62:57:84:3d:4a:c4:3e:e0:f8:13:6b:be:95:
c6:2b:98:e1:3b:39:96:5e:74:9c:1c:ee:cb:5a:cc:
42:92:13:1c:36:fc:a3:2a:f9:9e:59:6b:bc:07:51:
8e:28:3b:fb:da:63:65:bb:2a:02:8b:5f:bf:ab:8a:
71:f0:7c:0e:a4:c9:97:9f:fe:78:30:7d:3f:35:ba:
51:19:ad:d6:aa:1d:e3:8e:64:e8:d5:61:69:50:62:
4b:15:ef:4a:a6:c3:a1:eb:47:89:e4:64:df:79:b6:
df:ab:62:5f:0c:0b:7b:fd:92:06:b5:24:ad:44:69:
7b:c5:9b:ff:2f:fb:46:23:8c:b1:34:b7:6f:a6:0a:
df:d4:37:d7:c1:b0:91:c0:bf:e1:61:b2:48:a8:f3:
4b:bb:44:b7:f7:8a:7f:54:ed:4e:64:62:43:36:44:
14:95:14:14:e0:6e:23:05:3a:b3:c0:d0:ed:ef:b4:
eb:a7:6a:97:4c:68:dd:a7:af:df:f1:53:9e:ec:04:
91:66:20:c5:3e:cd:6e:c9:58:30:62:05:78:cc:19:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C4:2E:FA:6A:11:1D:98:A9:9F:1F:37:0A:25:FF:DA:62:04:A0:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1877b3f-cc18-3ac8-a2a7-5ad9fdbd5f73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:b8:12:56:f8:53:de:f8:81:c4:5d:da:65:bf:e3:3f:57:0f:
08:49:6d:98:4a:c1:e5:5c:0d:2e:9f:9f:da:f9:db:94:d9:05:
f7:96:73:fd:c1:32:17:79:a5:01:ee:98:29:7c:67:7b:29:90:
f3:16:a7:1c:90:36:a4:c9:2e:9b:71:93:5c:08:8c:dd:34:98:
cb:6a:ed:8d:49:38:b6:8e:0a:a6:d1:a0:0c:87:26:e3:35:fd:
99:7f:65:bc:86:08:b0:91:c1:55:c7:5d:81:90:c7:cb:85:54:
5f:e5:c1:7d:7b:63:9f:b9:90:21:c4:ae:8f:da:5e:47:b7:0a:
46:57:f0:ab:d7:e7:c8:c3:7a:4b:34:3b:a5:3f:21:e7:cd:74:
8e:4d:b4:de:36:1d:f2:4f:6c:20:5f:f6:74:57:9b:19:a0:79:
19:87:6e:dc:2f:24:95:c1:78:a0:16:66:e8:cc:3d:0b:bc:38:
48:de:4f:0d:4d:37:d4:0a:f8:1f:fa:cf:f5:f9:7d:46:18:4f:
4b:39:dd:4d:30:3e:0b:67:97:9c:e3:c4:ba:72:2c:30:77:b7:
8f:f5:55:74:5a:38:11:47:fc:18:0c:bb:68:3c:0d:13:c2:62:
af:a2:62:ff:39:2c:c2:90:58:3f:df:1a:6e:60:14:d9:e4:dd:
10:6b:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 15:43:06 2026 by rpki-client