This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa
File: 088057c9-ae1d-339e-a8fd-ce606d190c40.roa (raw, json)
Hash identifier: cZuDfYoW8thD89oQFgeK6Sv8redUGBDcz2fDH+Fs/Us=
Subject key identifier: C0:01:4B:D8:3A:04:73:98:A2:F6:C8:2E:E9:3A:D5:AF:13:62:BD:7C
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C37B11E3742B25EE574C365F0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa
Signing time: Wed 17 Dec 2025 14:00:39 +0000
ROA not before: Wed 17 Dec 2025 14:00:39 +0000
ROA not after: Tue 17 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.17.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:37:b1:1e:37:42:b2:5e:e5:74:c3:65:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 17 14:00:39 2025 GMT
Not After : Mar 17 13:00:39 2026 GMT
Subject: CN=2ae52cf9-2664-4074-97e6-69c0989829bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:76:8f:d6:47:9b:5d:65:78:ba:3a:c5:7e:
3c:3e:4b:6c:d5:e5:88:45:ca:8b:46:c9:ab:00:c8:
94:53:3a:a8:5b:81:ee:c4:29:cb:3c:5e:73:6a:b3:
be:9d:29:35:3e:60:4e:9f:a4:6a:d5:80:07:72:a5:
8b:9c:58:d0:f5:9e:92:94:f6:6f:bf:67:27:5e:b0:
52:f4:ef:fe:4d:83:78:b5:13:59:a0:a7:98:5b:35:
65:22:e8:79:73:4e:5a:96:ec:b4:15:6c:ce:ce:8b:
7e:ee:45:70:a3:3e:4d:87:46:02:b3:91:21:05:7a:
46:22:ab:2e:cd:dc:86:ef:32:bc:6f:78:2c:09:bd:
f3:74:7c:b4:8a:24:d8:0d:c5:bd:75:76:3e:25:7d:
43:9b:c0:51:7e:35:ea:43:a7:e0:3d:7b:82:75:c5:
15:24:91:5c:81:6c:f1:c6:bb:62:4b:ad:ca:28:e1:
2d:5e:53:58:7a:67:bd:95:5b:aa:19:b4:cf:05:41:
17:a8:81:41:c8:5a:70:29:77:d7:28:6f:fc:fe:0c:
23:64:65:ab:bb:6d:ad:9e:65:08:ab:2a:1b:c3:40:
76:a0:53:ae:55:27:14:1c:98:9d:81:38:c4:97:0e:
07:3d:d8:97:ac:95:42:2a:2e:a4:82:c9:e5:99:5a:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:01:4B:D8:3A:04:73:98:A2:F6:C8:2E:E9:3A:D5:AF:13:62:BD:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:b2:07:6b:6e:e0:85:3b:b1:57:94:b4:f6:ed:59:a4:f6:0d:
50:50:38:76:11:fc:e5:01:f8:59:8e:c2:52:58:67:55:8b:da:
3b:75:29:34:8f:2f:d7:bc:8d:b0:12:62:2f:b9:51:70:81:21:
3c:48:83:0a:ac:19:df:df:9f:a9:73:2a:2a:02:ad:11:1e:3e:
18:4b:2f:96:c9:3c:09:ce:b7:d1:32:0a:87:ed:c9:e4:eb:2e:
65:04:39:d1:9b:9a:46:21:5a:46:1d:4f:9a:d6:58:89:a6:4d:
63:b1:33:fa:b2:e4:8e:4f:d7:2c:19:fc:5c:e6:63:c4:e1:c6:
45:c9:5e:e9:ba:81:6d:c3:11:38:06:05:1a:79:3e:4c:3e:5f:
f6:8c:c3:09:c4:1e:24:5a:aa:33:e6:cf:39:8d:80:17:bf:14:
5b:87:00:30:34:88:e4:b4:75:dc:62:78:1e:c4:f9:1b:42:e8:
6a:55:85:54:9d:92:a5:26:4d:7e:9c:1a:6d:23:31:02:1a:73:
37:ad:56:84:38:47:67:d3:9e:dd:77:f2:70:6f:84:8b:84:70:
c4:0a:50:f0:19:ab:9d:46:25:77:dc:a8:30:3d:f7:5a:f9:31:
cb:5b:bf:cd:9a:dc:95:1a:33:76:10:26:d4:52:e1:57:b2:66:
de:a9:45:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw3sR43QrJe5XTDZfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk
MmFlNTJjZjktMjY2NC00MDc0LTk3ZTYtNjljMDk4OTgyOWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIp2j9ZHm11leLo6xX48Pkts1eWIRcqLRsmr
AMiUUzqoW4HuxCnLPF5zarO+nSk1PmBOn6Rq1YAHcqWLnFjQ9Z6SlPZvv2cnXrBS
9O/+TYN4tRNZoKeYWzVlIuh5c05aluy0FWzOzot+7kVwoz5Nh0YCs5EhBXpGIqsu
zdyG7zK8b3gsCb3zdHy0iiTYDcW9dXY+JX1Dm8BRfjXqQ6fgPXuCdcUVJJFcgWzx
xrtiS63KKOEtXlNYeme9lVuqGbTPBUEXqIFByFpwKXfXKG/8/gwjZGWru22tnmUI
qyobw0B2oFOuVScUHJidgTjElw4HPdiXrJVCKi6kgsnlmVpjcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMABS9g6BHOYovbILuk61a8TYr18MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDg4MDU3YzktYWUxZC0z
MzllLWE4ZmQtY2U2MDZkMTkwYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrREIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACayB2tu4IU7sVeUtPbtWaT2DVBQOHYR/OUB+FmOwlJYZ1WL2jt1KTSP
L9e8jbASYi+5UXCBITxIgwqsGd/fn6lzKioCrREePhhLL5bJPAnOt9EyCoftyeTr
LmUEOdGbmkYhWkYdT5rWWImmTWOxM/qy5I5P1ywZ/FzmY8ThxkXJXum6gW3DETgG
BRp5Pkw+X/aMwwnEHiRaqjPmzzmNgBe/FFuHADA0iOS0ddxieB7E+RtC6GpVhVSd
kqUmTX6cGm0jMQIaczetVoQ4R2fTnt138nBvhIuEcMQKUPAZq51GJXfcqDA991r5
Mctbv82a3JUaM3YQJtRS4VeyZt6pRbc=
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:11:24 2025 by rpki-client