This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41e409a0-150b-310c-98a1-ac38223cdf3e.roa
File: 41e409a0-150b-310c-98a1-ac38223cdf3e.roa (raw, json)
Hash identifier: 0y85GUsLUj+J29D+5iPS6vLVW+TMRgm0xz3bxqvY4UI=
Subject key identifier: 24:40:97:FB:F3:0A:E4:9F:5B:69:CE:AF:81:F2:B8:6C:E1:C0:25:05
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C37B11AA9A665A6752FD10F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41e409a0-150b-310c-98a1-ac38223cdf3e.roa
Signing time: Wed 17 Dec 2025 14:00:39 +0000
ROA not before: Wed 17 Dec 2025 14:00:39 +0000
ROA not after: Tue 17 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.29.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:37:b1:1a:a9:a6:65:a6:75:2f:d1:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 17 14:00:39 2025 GMT
Not After : Mar 17 13:00:39 2026 GMT
Subject: CN=dd79aed9-a0c6-419c-9059-ee0428dc922b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:5e:dd:2d:af:15:26:4f:2b:c3:3f:7a:29:
c3:d8:3b:73:06:3d:c5:da:07:8d:fc:c2:6b:23:e3:
a6:8f:9d:fc:f3:70:68:51:91:f9:67:ec:3a:3d:57:
76:f6:83:19:dc:95:64:93:5e:db:ed:f3:0a:e6:ab:
59:c3:47:fb:32:3f:f7:bb:5d:e4:54:1b:0f:64:c1:
2c:2d:18:91:38:62:9b:f9:fa:89:e8:78:46:89:37:
09:b8:c4:13:6b:ff:72:f6:ec:c2:fc:a7:09:20:dd:
72:f5:f3:fb:f0:cb:b6:4c:78:56:33:28:90:29:d9:
81:89:29:08:6f:30:74:d9:d1:29:ac:5e:75:79:9e:
71:a3:e7:14:00:75:f5:26:2d:92:68:eb:0e:c5:e2:
21:04:7b:b1:66:6e:ed:20:15:23:96:a9:ba:0d:dd:
ec:da:4a:76:bb:85:90:d5:8a:c3:54:85:3a:11:e3:
f4:a1:c8:77:65:d3:6c:55:3e:5d:76:3f:67:b8:c9:
5b:7e:19:4e:f8:38:3b:d4:17:7b:dd:68:c5:cb:b3:
c8:cb:81:f8:7f:80:cf:c7:25:05:4e:01:f8:4e:6a:
3a:f2:55:60:82:89:39:b6:fa:ad:5f:a0:f7:9a:dc:
7b:5f:9d:2f:10:ca:c4:8d:5c:2b:2f:24:83:ab:c8:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:40:97:FB:F3:0A:E4:9F:5B:69:CE:AF:81:F2:B8:6C:E1:C0:25:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/41e409a0-150b-310c-98a1-ac38223cdf3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:a9:ae:11:41:12:44:ce:ee:bc:b2:2b:2d:8a:5f:c4:f3:94:
9e:ff:47:a8:eb:3a:bc:9c:3d:cb:88:27:76:58:40:c5:5c:ae:
0a:59:da:34:91:66:45:53:dd:6e:e6:8e:ae:11:5d:5d:a8:06:
10:47:94:ec:9a:f5:cb:9c:bf:9e:d2:a8:a2:d9:3c:bc:a0:24:
4a:93:5a:f5:0d:ac:42:49:12:dc:e9:64:5f:88:ef:f4:00:f4:
2d:09:fd:1e:e2:f2:1e:f6:f2:f9:e7:cb:40:9e:52:b5:db:60:
17:fd:15:0d:55:f8:32:0f:3c:9a:9e:5c:00:0c:c0:fb:33:90:
de:4d:af:24:c9:d9:9a:ca:87:c6:a9:d8:72:f7:15:40:e5:6c:
72:9e:c8:1c:31:45:bc:e2:77:30:dd:34:d9:44:b7:45:1f:8d:
e2:41:9d:6e:4c:79:ff:3d:d7:e7:c2:4e:f8:b4:31:16:61:9c:
da:38:cf:d9:06:de:21:3a:1f:ed:69:c7:e7:96:4a:e9:54:b4:
f5:73:23:9a:91:d6:e0:5d:39:a6:e4:4f:23:48:4d:ca:67:2f:
24:1a:6b:29:13:f4:4f:d1:3f:e3:d4:77:62:81:46:21:cd:3b:
c9:d4:d4:50:7a:57:e9:e2:6c:77:2c:cc:57:1c:35:e6:50:1f:
0f:a9:2d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:19:28 2025 by rpki-client