This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa
File: ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa (raw, json)
Hash identifier: IXz7xnH+WCxgfODgnqy1K47CAcgrDBsdcllcNehAYQs=
Subject key identifier: 13:A1:19:EF:FF:17:3E:FB:C5:53:EC:73:70:C1:72:3A:44:1D:AE:EA
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C45A69AA580822792D4906780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.28.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:9a:a5:80:82:27:92:d4:90:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=9478e96d-ecb1-4966-9883-ba793e14c0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:58:7d:41:29:87:74:ae:4c:55:87:c1:34:
62:fb:f7:6b:c1:1f:91:89:47:17:f2:73:97:4f:e5:
dd:9b:cf:d3:99:37:1b:f2:b7:d2:d6:2c:60:a3:10:
20:32:29:0f:da:eb:b2:a4:b1:07:4d:57:b3:a4:a1:
70:c0:ab:03:18:b1:10:76:1c:c4:7f:66:e5:40:bf:
e8:69:14:ff:fe:38:49:0c:8c:65:c3:71:35:f6:69:
fb:b9:74:f2:ec:7b:22:e8:64:c8:cd:d7:43:da:ca:
ec:2d:b0:09:b6:c0:f9:0a:ec:0a:0e:61:b8:d7:13:
39:e2:1e:ba:13:10:aa:e1:af:27:27:6f:c0:ea:b0:
4e:51:0c:0a:8d:8e:ef:f3:18:7b:e8:a8:e1:95:63:
5c:50:61:30:b8:06:19:81:dc:eb:80:ca:ee:d2:1f:
70:e7:c6:59:fd:1e:f8:de:3b:48:13:58:c9:61:e1:
35:a0:f9:fd:7f:49:13:e0:a1:71:bc:e7:45:8d:70:
fd:b8:ea:64:4a:a9:e2:23:0d:e2:28:32:5d:f2:58:
ff:1f:67:45:e5:f3:fe:09:d3:d9:80:6f:43:52:44:
99:c5:f5:2c:15:79:28:19:d4:ab:ba:4e:97:80:28:
23:f3:96:7d:28:38:da:41:8e:e5:97:16:5f:d8:d8:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A1:19:EF:FF:17:3E:FB:C5:53:EC:73:70:C1:72:3A:44:1D:AE:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:bc:21:63:59:4f:48:47:48:86:bc:a5:f8:e6:00:18:3b:6b:
bd:d7:af:56:f8:52:1e:64:bc:91:fb:c2:fc:dc:ea:4b:64:7b:
68:92:1c:41:94:91:9b:c4:75:4a:8a:3c:7e:f7:1c:3c:13:ef:
ae:b4:38:8c:5b:27:d8:23:c7:30:47:ff:58:e1:79:6a:8a:bb:
1f:50:d3:ee:0f:fc:45:1a:15:e5:5f:08:2d:e6:e0:a5:ff:a5:
38:79:e6:40:9f:75:56:21:bd:50:62:f9:27:12:d6:9b:b2:70:
66:11:11:b0:b5:cf:98:a1:43:78:bd:4c:e7:09:47:88:6e:54:
fa:9e:22:c0:01:ce:2d:43:da:0e:28:84:b7:e1:4e:5e:15:fe:
68:f1:e5:fd:0f:e5:1f:39:e1:28:33:eb:1a:35:af:a0:f8:7e:
49:9b:e5:d5:61:a1:b8:90:ef:8c:91:5d:62:2e:b4:3a:ea:89:
71:d8:29:54:f5:f2:cf:38:ce:ae:30:b0:aa:20:a1:4e:02:ff:
ee:56:d9:9d:0b:ae:3f:c8:ec:e4:d8:93:e1:65:38:c8:78:21:
0a:ae:ce:6f:36:af:43:c8:7a:2d:c0:19:26:9a:e9:0c:69:01:
58:9d:52:c5:35:bc:26:db:a7:44:50:c0:3b:57:98:70:58:7e:
ea:64:26:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 01:46:17 2026 by rpki-client