This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56d05b63-896b-303f-a4bd-c4bc437b861c.roa
File: 56d05b63-896b-303f-a4bd-c4bc437b861c.roa (raw, json)
Hash identifier: 8W82Jvw0vRgHQPYlT2mA5iK37RG9FuAEeUCX5m/Pt7s=
Subject key identifier: 12:AB:45:35:CB:88:8B:77:B1:B2:2A:F3:24:FC:23:9C:65:DB:97:2A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C3BE12F49C6EE747EF1821700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56d05b63-896b-303f-a4bd-c4bc437b861c.roa
Signing time: Fri 19 Dec 2025 02:00:31 +0000
ROA not before: Fri 19 Dec 2025 02:00:31 +0000
ROA not after: Thu 19 Mar 2026 01:00:31 +0000
asID: 30036
IP address blocks: 173.28.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3b:e1:2f:49:c6:ee:74:7e:f1:82:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 19 02:00:31 2025 GMT
Not After : Mar 19 01:00:31 2026 GMT
Subject: CN=dbdffda1-d877-4edf-bb0d-8b70495cdace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:67:2b:cc:96:19:23:80:4f:a3:fd:67:e0:
09:0f:c0:7f:60:ac:6f:ea:58:ef:f2:19:92:c3:42:
33:10:86:5f:d9:d4:59:f1:ac:9d:b1:21:3e:81:85:
3f:6c:a9:e4:f6:20:6d:b6:22:db:9b:9e:78:77:c7:
95:e0:a2:1a:3f:bc:f8:54:f6:d1:a2:25:58:f0:5c:
13:44:14:bd:25:29:5c:63:6c:54:c7:c2:cf:15:b3:
e1:bb:d2:73:4f:89:f9:1d:24:ec:78:e1:85:57:f0:
6c:25:ca:59:51:bb:ee:2b:2b:dc:9a:08:fb:8a:10:
01:a9:f2:6b:4a:58:3c:f8:94:94:95:91:16:81:9c:
92:c3:ea:76:b3:8c:65:66:04:a0:13:05:1d:95:22:
43:85:52:2d:1a:ed:48:20:b5:3e:0a:9e:bb:f3:f7:
69:df:ee:ad:c4:e5:1b:4e:ab:c0:a3:4e:06:98:a9:
41:20:1c:98:78:4e:e3:d5:21:88:1e:ef:d3:59:c9:
0d:f0:b7:b5:08:b9:59:50:b2:56:65:23:33:e0:0f:
d7:6a:39:8d:67:e0:07:38:ba:f9:d0:13:d1:7e:a9:
07:bc:3e:71:f7:9a:05:7b:6c:62:a1:61:b6:03:7a:
c8:45:25:0f:35:0e:2f:02:4f:ad:09:8f:fe:26:b1:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AB:45:35:CB:88:8B:77:B1:B2:2A:F3:24:FC:23:9C:65:DB:97:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56d05b63-896b-303f-a4bd-c4bc437b861c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.28.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:ec:c2:74:3f:94:3c:f2:53:b5:82:72:b4:6b:30:ce:95:04:
d6:64:8e:74:05:0f:76:e2:3e:67:f4:d9:70:1e:96:93:d0:f0:
02:c8:7c:ea:07:48:37:20:37:92:fc:27:d1:30:e0:6a:7d:8e:
c8:4e:e4:fe:f0:e5:f7:4e:34:a2:a8:a3:88:93:f2:04:c9:f1:
c3:65:2c:97:03:00:f9:7e:40:02:7a:51:a9:36:08:85:b0:5b:
07:d1:be:d4:4b:70:a2:75:0f:7b:d6:08:87:8d:b9:98:4e:fb:
ca:1f:a8:70:19:fc:9e:94:b4:77:28:d3:3e:0b:a3:29:88:31:
6b:86:18:9e:39:d9:13:19:f6:df:7e:05:fb:5b:6b:2a:f3:21:
e4:d9:70:9e:c3:5e:17:45:ab:89:81:04:53:6f:2e:5b:b8:ae:
82:b4:bf:23:bb:fe:ce:10:0e:f3:9a:4e:99:cf:0a:8f:9e:32:
7b:27:55:dc:e1:59:45:eb:f2:8e:4a:bf:a2:11:ef:8c:ee:a7:
4a:88:28:54:f4:80:b1:2f:3d:51:49:77:b2:29:65:82:0a:8c:
e2:39:8a:ba:9c:70:ba:a7:16:03:90:24:72:e5:9f:c6:94:87:
09:1d:1e:54:6b:58:a6:1d:a4:da:61:4c:40:ed:ac:d8:c1:bc:
fb:8a:16:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:36:07 2025 by rpki-client