This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e52e62e-9d4f-3327-98ef-5a701b8285d6.roa
File: 5e52e62e-9d4f-3327-98ef-5a701b8285d6.roa (raw, json)
Hash identifier: mTcSYxp2brcKn/ou8JTbdu8djhZ7dZ1k3kWtIR1FvbI=
Subject key identifier: 76:98:9E:15:A5:3E:06:9A:F4:9B:FF:9D:2C:B8:9A:3D:4B:28:42:96
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C45A6702FCECA11D5ADE011E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e52e62e-9d4f-3327-98ef-5a701b8285d6.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.17.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:70:2f:ce:ca:11:d5:ad:e0:11:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=5e8d1055-38e1-4591-9967-39c949f0cc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:ce:6b:1f:0b:fb:a3:2a:a7:da:2f:92:02:
f6:a4:31:02:45:39:9f:9f:cf:3d:b8:72:79:d0:50:
5e:ea:35:96:d9:a8:8f:a9:85:96:bc:62:bf:ff:0f:
8f:ac:58:4a:d4:4c:61:3b:ad:da:d4:27:5b:49:19:
b8:ea:0e:48:5e:e6:b1:2c:01:fa:d4:17:97:e6:86:
19:d9:a6:7f:91:81:ad:af:fb:ed:25:25:31:f8:24:
89:62:ba:1d:77:7b:b6:86:80:24:2d:75:f6:36:6d:
80:2b:b7:7f:da:c2:cf:58:33:ab:e5:17:12:5a:5f:
f9:72:38:11:9d:9c:72:7d:a4:f8:f2:ec:70:ba:f8:
2e:a2:35:22:1e:eb:06:1e:c2:39:df:d3:eb:e6:34:
39:7b:30:0c:e9:f9:c3:79:41:17:03:2d:1e:80:38:
35:0b:11:ec:9f:26:94:e0:6c:dd:36:2d:97:42:27:
63:7f:11:c4:3c:61:3f:a4:3d:dc:76:c6:aa:82:81:
94:9a:16:73:dc:0a:9b:d8:3d:7a:e8:af:4a:09:8e:
df:5f:10:de:fb:42:7f:8e:36:e3:a0:92:8c:99:6d:
80:99:d0:45:49:d7:c4:f2:77:3d:3d:e7:01:73:5c:
37:da:fd:36:3b:2b:80:b3:6d:0d:80:bc:96:9f:7b:
c2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:98:9E:15:A5:3E:06:9A:F4:9B:FF:9D:2C:B8:9A:3D:4B:28:42:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e52e62e-9d4f-3327-98ef-5a701b8285d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:62:b1:53:9a:12:fe:9b:b0:c4:02:6d:aa:73:e4:fe:c6:38:
9c:5a:c6:f2:7d:5c:ad:33:96:15:a1:d2:10:ab:91:15:15:a3:
26:c9:e2:02:57:02:cd:ea:47:8f:ef:c2:ac:85:db:14:dd:06:
de:ae:38:11:f5:5f:77:1a:5f:5f:e3:16:d3:fa:cb:62:c6:f9:
d6:eb:fe:87:05:39:fc:1b:07:07:fb:57:b2:95:78:fb:b6:71:
df:f3:cb:45:47:26:2e:33:2c:9e:d2:65:c9:e9:a6:7f:61:e2:
13:3b:38:c2:09:9b:3e:14:db:54:55:35:0c:23:fc:f4:3f:ae:
c9:01:b3:42:0a:62:d0:10:a2:11:3d:b4:fc:e2:63:b3:be:09:
30:2b:59:69:df:84:83:bb:0a:50:e2:78:6c:11:41:ae:ce:e6:
01:d3:c7:87:1a:f5:20:5a:66:64:a1:fe:08:38:72:f8:32:7f:
1f:19:2b:84:a9:44:b8:4b:23:fd:d3:9d:85:2d:38:f5:97:6c:
90:7c:e5:f3:8e:cb:c0:d3:0e:5c:76:6b:c9:ea:7a:6a:d8:a5:
2f:aa:e9:b2:3d:91:a0:40:55:a4:12:86:1a:4f:4a:53:fe:51:
37:73:8f:dc:9d:e6:c4:50:7f:7e:ae:6b:ba:0c:a5:e5:b5:9c:
bd:95:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:48:35 2025 by rpki-client