This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5166e63f-4cf9-344f-8eb0-7310a0c381aa.roa
File: 5166e63f-4cf9-344f-8eb0-7310a0c381aa.roa (raw, json)
Hash identifier: 0ytjBHiBhjre1G24ooPg7nNrtD2K51NhoCQ4OuEaFrE=
Subject key identifier: 4B:4C:1B:A9:41:3B:07:D2:45:4B:75:4D:04:96:70:06:B7:FF:8C:58
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C37B11EA072622203F96184C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5166e63f-4cf9-344f-8eb0-7310a0c381aa.roa
Signing time: Wed 17 Dec 2025 14:00:39 +0000
ROA not before: Wed 17 Dec 2025 14:00:39 +0000
ROA not after: Tue 17 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.17.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:37:b1:1e:a0:72:62:22:03:f9:61:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 17 14:00:39 2025 GMT
Not After : Mar 17 13:00:39 2026 GMT
Subject: CN=608a1edf-c7d4-4ac6-bdd6-4204ebfc98e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:19:96:71:86:aa:f2:b3:53:53:df:5b:61:
26:3c:f8:d4:98:31:3a:40:e1:51:37:e9:95:66:0e:
57:53:6b:65:a8:51:44:9d:36:a8:c5:a8:12:64:e2:
8e:60:75:29:1b:40:8d:0e:8d:70:7e:e4:05:83:bb:
5a:89:a8:79:86:61:50:4d:3f:0c:55:5a:e7:49:60:
88:81:0a:dc:c8:36:e3:80:cc:1a:04:aa:c6:89:c6:
8d:50:46:6f:6b:a3:4a:82:38:c7:84:90:b4:b9:29:
61:6c:62:fd:3e:b9:ef:71:3f:fb:fd:9f:d4:32:47:
5e:f3:34:89:3e:f7:bc:b9:74:d3:a0:ba:9e:0a:3a:
d5:54:7c:6f:1c:7b:47:a9:39:82:fc:07:20:25:24:
16:c6:97:1b:1a:3d:39:ff:8c:ba:51:35:a5:fd:a4:
d7:0b:62:ae:80:a0:1e:08:52:9a:53:a0:4c:5e:10:
6b:44:c1:dd:97:58:65:13:e4:41:b1:79:e6:ed:f5:
fa:b8:4b:0a:7b:3b:09:5d:22:95:8d:1d:f0:bb:df:
c6:76:56:b9:d5:0e:55:48:60:6c:93:8a:31:39:17:
4b:80:63:46:e7:7a:61:06:87:98:5f:4f:c0:10:f5:
c0:42:a9:65:d3:41:02:28:a5:08:36:3d:f3:e0:44:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4C:1B:A9:41:3B:07:D2:45:4B:75:4D:04:96:70:06:B7:FF:8C:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5166e63f-4cf9-344f-8eb0-7310a0c381aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:79:dd:b4:bc:54:59:19:7b:ef:25:4c:94:6e:ed:7f:06:97:
4f:74:9e:e2:67:60:79:6d:1d:3f:56:2a:8e:cd:81:36:40:46:
ae:af:6f:6e:01:66:85:4b:a9:ab:99:a3:e1:7f:c7:7d:c7:1f:
ec:93:f6:a7:82:ec:32:e7:04:94:b2:d9:5a:8b:f2:1b:34:75:
12:73:ee:7a:b0:5e:ac:02:98:fc:40:ae:b1:1b:cc:88:92:68:
41:ce:f1:3a:37:86:e5:a2:65:34:07:c7:d0:9c:9d:dc:a9:c7:
2a:98:37:66:de:3a:e3:85:c6:32:71:a8:78:b3:f8:02:b3:53:
47:4f:12:14:fd:55:1c:84:f2:47:da:36:60:50:14:fb:ee:a2:
19:7b:0d:3a:0f:32:fc:d7:a3:d6:f4:5b:46:85:5f:49:d6:f2:
48:df:3a:4a:4e:f1:80:3c:3c:02:8f:dc:27:4e:5f:d1:9e:43:
56:c8:de:40:d2:29:76:f1:e3:d4:a5:5d:26:01:b6:cb:49:20:
38:1f:5b:ef:b0:a3:5e:79:e8:c8:a8:6e:40:f8:42:6c:67:81:
58:e6:13:d6:73:03:30:23:8e:30:df:67:f1:21:f0:8d:d9:0d:
cf:39:36:48:ce:74:9e:bf:6b:6f:49:e2:d5:db:ca:54:56:07:
1a:41:51:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw3sR6gcmIiA/lhhMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk
NjA4YTFlZGYtYzdkNC00YWM2LWJkZDYtNDIwNGViZmM5OGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSkZlnGGqvKzU1PfW2EmPPjUmDE6QOFRN+mV
Zg5XU2tlqFFEnTaoxagSZOKOYHUpG0CNDo1wfuQFg7taiah5hmFQTT8MVVrnSWCI
gQrcyDbjgMwaBKrGicaNUEZva6NKgjjHhJC0uSlhbGL9PrnvcT/7/Z/UMkde8zSJ
Pve8uXTToLqeCjrVVHxvHHtHqTmC/AcgJSQWxpcbGj05/4y6UTWl/aTXC2KugKAe
CFKaU6BMXhBrRMHdl1hlE+RBsXnm7fX6uEsKezsJXSKVjR3wu9/Gdla51Q5VSGBs
k4oxORdLgGNG53phBoeYX0/AEPXAQqll00ECKKUINj3z4ES9EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEtMG6lBOwfSRUt1TQSWcAa3/4xYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTE2NmU2M2YtNGNmOS0z
NDRmLThlYjAtNzMxMGEwYzM4MWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEh53bS8VFkZe+8lTJRu7X8Gl090nuJnYHltHT9WKo7NgTZARq6vb24B
ZoVLqauZo+F/x33HH+yT9qeC7DLnBJSy2VqL8hs0dRJz7nqwXqwCmPxArrEbzIiS
aEHO8To3huWiZTQHx9CcndypxyqYN2beOuOFxjJxqHiz+AKzU0dPEhT9VRyE8kfa
NmBQFPvuohl7DToPMvzXo9b0W0aFX0nW8kjfOkpO8YA8PAKP3CdOX9GeQ1bI3kDS
KXbx49SlXSYBtstJIDgfW++wo1556MiobkD4QmxngVjmE9ZzAzAjjjDfZ/Eh8I3Z
Dc85NkjOdJ6/a29J4tXbylRWBxpBUdA=
-----END CERTIFICATE-----
Generated at Sat Dec 20 12:07:57 2025 by rpki-client