This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36ca63fd-377f-351b-9287-abbcb1f4f7a6.roa
File: 36ca63fd-377f-351b-9287-abbcb1f4f7a6.roa (raw, json)
Hash identifier: MkYHSR1ifs0sCDeMEYStoGfGXNlPZFI+uiwCJZTAWh8=
Subject key identifier: E8:BE:97:C2:4E:AB:AF:40:03:0F:FC:39:35:5C:AF:F8:F6:D5:A4:24
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C3BE13024C9A0775455427E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36ca63fd-377f-351b-9287-abbcb1f4f7a6.roa
Signing time: Fri 19 Dec 2025 02:00:31 +0000
ROA not before: Fri 19 Dec 2025 02:00:31 +0000
ROA not after: Thu 19 Mar 2026 01:00:31 +0000
asID: 19905
IP address blocks: 173.17.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3b:e1:30:24:c9:a0:77:54:55:42:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 19 02:00:31 2025 GMT
Not After : Mar 19 01:00:31 2026 GMT
Subject: CN=ee097c00-53ba-473d-8f26-28d25a53c30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:5e:10:b1:17:b2:2a:18:65:23:d4:14:8b:
dd:9e:6b:80:3d:5c:a9:ab:18:7e:d0:d4:68:92:fb:
ed:db:0e:03:68:68:e3:1a:cc:c5:5a:a6:b7:8e:b0:
30:e6:04:af:bb:98:8a:f3:82:61:3e:31:1a:4b:99:
ff:2c:45:3e:c2:9b:af:f3:d3:78:6a:de:a1:99:7e:
92:10:55:99:a8:99:f2:5c:f4:14:33:d5:2d:0d:b1:
f2:fa:8e:76:50:b5:32:86:ac:9c:8a:46:dc:f2:63:
94:00:8b:23:e5:d9:2f:bc:e7:01:e9:3e:fa:ea:6a:
9f:80:d0:e1:89:fd:68:4c:d7:7e:ba:03:06:9f:63:
8b:b0:d9:2e:ec:c1:26:14:ac:eb:4f:a7:c5:dc:50:
fe:b3:a5:04:92:3f:21:98:05:84:55:45:4f:5e:26:
7d:ce:f7:dd:21:6c:d2:0f:6c:0b:1b:4d:0c:1b:96:
70:ba:ec:25:51:e7:9e:25:30:ef:41:b6:8a:0a:40:
10:f6:21:d7:49:d9:6e:ee:2e:95:42:d2:ba:02:f3:
21:82:e0:fc:8d:4a:2b:94:91:49:37:2e:e4:06:2f:
79:0b:d6:4a:d2:d5:67:8d:c5:0a:13:23:56:89:73:
1d:7a:dd:a5:38:0b:8f:14:7b:b8:cf:76:2c:2c:18:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BE:97:C2:4E:AB:AF:40:03:0F:FC:39:35:5C:AF:F8:F6:D5:A4:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/36ca63fd-377f-351b-9287-abbcb1f4f7a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:24:a5:41:e8:c0:d7:a7:d6:30:63:d1:52:cb:e7:1f:aa:eb:
04:1e:01:2e:e2:4e:df:a4:23:72:36:30:3e:8a:d8:db:64:50:
20:b8:a1:80:98:80:ac:40:b6:3a:6a:80:4a:55:a8:84:c0:c8:
90:d8:cb:26:41:45:6b:09:2c:82:a1:25:2e:6e:dd:3f:2c:72:
c5:c3:82:ba:26:0b:ba:c6:03:c9:86:d8:20:c9:05:13:e8:61:
e0:06:de:99:70:c8:a7:43:90:86:c9:23:0c:c1:66:2e:e5:62:
d2:e1:71:16:0a:f8:23:dd:e8:25:53:93:70:a1:71:42:73:8c:
7c:63:04:3d:22:46:a4:09:ae:e5:34:b4:45:38:93:50:34:d2:
3d:93:6d:9b:4a:6a:50:f8:01:bc:d6:dc:54:4a:91:03:6a:7b:
07:18:1e:01:6b:04:7f:a5:e7:6b:d0:5d:b0:c0:a1:6f:0d:ad:
e4:3c:9b:93:36:00:32:72:70:ac:aa:c4:11:14:cc:df:5b:13:
47:fb:32:da:b9:21:b3:91:42:02:92:8c:5c:38:3e:5b:29:9f:
99:8e:bc:c4:96:49:91:3f:11:fb:c6:67:35:e8:38:5d:56:5e:
13:2a:02:37:bc:2f:74:5c:40:87:18:cb:8d:5a:81:e1:b2:a6:
14:44:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:09:10 2025 by rpki-client