This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6bc97fe-144e-37cb-908c-8939cb4aaa81.roa
File: d6bc97fe-144e-37cb-908c-8939cb4aaa81.roa (raw, json)
Hash identifier: +3SuJUHT9FpJ5tJ+IHl1SCtc/K+BbMhLjG9Abq9bsIA=
Subject key identifier: 93:5F:41:46:C9:8D:B0:36:76:A4:64:B3:3C:50:42:09:6E:D6:30:29
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C215B93F35ED8B68B66C87A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6bc97fe-144e-37cb-908c-8939cb4aaa81.roa
Signing time: Tue 09 Dec 2025 14:00:38 +0000
ROA not before: Tue 09 Dec 2025 14:00:38 +0000
ROA not after: Mon 09 Mar 2026 13:00:38 +0000
asID: 19905
IP address blocks: 173.20.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:21:5b:93:f3:5e:d8:b6:8b:66:c8:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 9 14:00:38 2025 GMT
Not After : Mar 9 13:00:38 2026 GMT
Subject: CN=63fa3841-841c-4732-94b9-db9b48c58906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:23:fd:28:f3:2c:8b:c6:94:83:7a:d2:55:
89:25:ca:57:9a:28:fc:ca:88:18:8e:15:d7:4b:5d:
a0:d3:5f:3d:be:fb:fa:09:91:64:e9:35:bc:41:63:
c0:c7:2d:9d:65:eb:96:58:62:b0:67:41:b0:a3:35:
c6:2a:7e:4b:ef:2b:8d:57:6d:89:a9:8a:4e:db:8e:
6c:22:03:83:53:80:d2:39:71:02:21:d5:4a:0f:9f:
fe:11:cf:5a:40:fd:65:32:e7:b1:3c:ea:41:99:cc:
72:a6:60:b6:be:22:43:d6:e2:73:c3:36:5b:06:30:
f9:0d:0e:70:d9:81:6d:06:75:69:7b:fb:bd:bc:a9:
d2:7f:ae:87:be:ec:c8:fe:57:d1:b9:68:a1:62:fa:
59:3c:81:aa:14:2d:f0:fd:6b:1c:0f:6f:1a:5d:a9:
7c:3a:0e:80:0e:1a:f3:da:9d:cb:98:09:9e:a1:b6:
8c:f9:ab:d6:a5:ee:97:6c:23:7f:b5:8e:66:26:f5:
03:5b:a7:5d:f4:c5:81:f5:8e:12:59:a8:68:5a:e7:
16:90:24:25:08:a8:85:7a:c7:9a:c8:d4:81:83:8d:
8c:97:57:85:59:4e:fd:61:4a:f5:07:31:5a:04:4a:
06:11:f9:55:8c:b7:6d:4f:60:7d:16:c2:18:4f:b3:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5F:41:46:C9:8D:B0:36:76:A4:64:B3:3C:50:42:09:6E:D6:30:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6bc97fe-144e-37cb-908c-8939cb4aaa81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:d0:37:a1:05:b6:da:34:b2:e3:78:96:c7:20:f4:98:f1:68:
8b:9f:bd:1e:52:19:a8:bc:71:8a:32:55:54:58:a8:3f:1b:6a:
7c:0e:4f:7b:b5:78:29:30:64:97:0a:6c:96:3c:52:92:25:dc:
6b:54:14:30:19:5d:de:5d:de:3b:6e:db:41:9f:f4:91:e1:5a:
8d:03:ce:63:7d:39:49:96:51:31:b3:f9:c9:75:f2:3d:65:26:
b5:41:17:8e:89:bc:94:34:52:f4:00:1f:1d:64:24:bb:ce:ee:
8d:d9:05:8d:60:da:1d:3c:56:21:fc:e0:a6:4e:85:20:cc:c2:
8e:09:5e:fb:aa:8f:ca:21:ea:44:2f:3f:3f:af:68:2a:eb:3b:
9e:ed:04:f2:c0:10:e2:4d:fd:48:11:1d:a1:ba:d8:54:6d:bc:
88:09:5d:09:28:29:e3:d2:27:68:1c:c7:4c:43:25:cd:1d:7d:
b5:4a:30:bc:f1:43:a6:49:5d:0a:6f:76:99:7a:e3:3b:c0:f0:
85:05:3e:fc:aa:15:c7:ed:00:ff:84:7e:59:9b:cd:42:30:56:
5b:b7:55:96:1f:43:9b:e7:54:a6:f7:6e:b8:42:4b:71:45:e4:
12:a8:33:09:c4:b0:f9:40:ec:59:9a:0f:e8:ef:db:ca:eb:24:
ba:a3:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 17:09:30 2026 by rpki-client