This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88821259-86eb-3f8e-9596-d8278bba51aa.roa
File: 88821259-86eb-3f8e-9596-d8278bba51aa.roa (raw, json)
Hash identifier: tpYxkDMgqZ8Q/AM+RrUnMJg8on3yP2LLmEhpAdt9kaE=
Subject key identifier: 59:D5:17:FE:25:E3:41:12:1C:79:E8:69:31:02:F8:D8:D4:24:DF:80
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C242681B0CDA576E37889F100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88821259-86eb-3f8e-9596-d8278bba51aa.roa
Signing time: Wed 10 Dec 2025 14:00:38 +0000
ROA not before: Wed 10 Dec 2025 14:00:38 +0000
ROA not after: Tue 10 Mar 2026 13:00:38 +0000
asID: 30036
IP address blocks: 173.20.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:24:26:81:b0:cd:a5:76:e3:78:89:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 10 14:00:38 2025 GMT
Not After : Mar 10 13:00:38 2026 GMT
Subject: CN=dff1c1af-ecc3-4580-a910-3dc483c4403a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:bb:ee:cb:b2:d5:63:0d:8c:b8:c7:e9:ee:
57:b6:68:b4:4f:4d:84:96:f3:bb:ef:b6:0f:c2:5b:
5f:8e:8c:70:5c:26:73:e8:0b:fc:d9:23:20:62:cb:
7e:b9:48:e5:7c:c7:42:f7:26:d4:ba:ca:e9:df:1b:
de:e5:94:82:6f:f3:89:ff:5a:76:b1:02:55:ec:82:
74:fc:bd:63:37:e5:9b:93:0e:ef:43:09:b0:84:26:
30:fd:cd:66:27:8b:d1:f3:0e:87:1b:b0:b0:c1:e1:
ec:48:94:10:c3:0c:6b:eb:f8:57:93:ca:a7:f8:aa:
10:01:bf:55:03:62:2b:93:25:c6:98:47:3d:68:74:
f4:44:eb:ff:e7:1c:5e:a7:dd:f7:1f:43:87:2c:be:
26:5a:b6:ee:5d:d5:e6:67:92:16:76:76:a8:4c:f5:
12:8c:09:3c:cc:85:bb:bc:28:19:b4:84:db:4c:10:
3f:25:41:ea:9a:da:aa:c0:6f:97:da:f5:eb:1e:cc:
c2:9b:cf:06:4b:7e:1a:4f:ba:2b:89:33:81:8b:cd:
37:9b:84:b3:57:57:4e:ab:0e:b6:cf:7f:a7:d9:7c:
f5:aa:b1:b2:76:fd:8a:40:bf:91:b0:3f:4c:9a:a0:
c6:62:fa:32:19:ac:6b:66:e0:ec:b4:7c:1c:97:d5:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D5:17:FE:25:E3:41:12:1C:79:E8:69:31:02:F8:D8:D4:24:DF:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88821259-86eb-3f8e-9596-d8278bba51aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.20.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:36:c8:2d:c6:22:53:29:7b:d8:b7:36:76:2b:35:4f:14:9a:
97:1b:2f:cf:47:7f:ba:3b:c0:a9:2f:f3:6b:60:7b:a6:1d:14:
e6:b4:d1:fe:d9:a6:4d:a4:3f:b7:50:19:cd:9f:c7:61:de:e5:
e4:22:77:80:10:96:a2:ae:68:95:5a:ff:d0:26:2d:f8:7b:74:
27:f2:3d:b4:21:4e:33:76:31:9f:eb:9c:e6:df:5c:5e:f5:f0:
23:32:05:a5:0b:ba:b7:01:8f:79:42:37:0c:00:d5:f3:09:81:
ba:f7:fd:83:cd:3e:d0:dd:7c:29:f3:8e:0f:96:83:f3:d9:74:
6d:1b:47:76:13:61:f1:78:dd:a6:3d:11:17:ea:d8:a0:61:8d:
4e:a0:c8:f5:be:ee:c5:aa:75:4e:11:7a:e7:56:84:eb:e8:2a:
72:b7:06:5f:35:b9:c1:4f:8e:a2:73:61:eb:f4:d0:3b:95:2d:
17:23:7c:c4:81:b0:10:d2:9e:57:3c:ad:72:3c:dc:c2:ce:f8:
82:91:98:87:7d:68:9d:8d:54:42:9a:b6:0c:27:dd:01:cc:58:
cc:89:3b:b0:8b:b4:b9:4a:41:c0:62:85:f9:64:8a:c1:c8:cb:
56:70:49:7a:00:c7:93:90:22:fb:4e:5a:73:94:d8:24:d6:87:
b1:d7:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 12:27:12 2025 by rpki-client