This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93e9af73-c731-3f54-ba56-3a1652f647a3.roa
File: 93e9af73-c731-3f54-ba56-3a1652f647a3.roa (raw, json)
Hash identifier: GznLxqKFUVsBuL6tcE/oqSiG8H2Lu+3fXz7Y3AJE/A0=
Subject key identifier: 94:4A:F1:6D:A9:8C:6F:F6:C2:A1:D8:C2:D2:C9:70:9F:19:CE:8A:67
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C45A68CCBA26233235B3A4D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93e9af73-c731-3f54-ba56-3a1652f647a3.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.23.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:8c:cb:a2:62:33:23:5b:3a:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=a3fa6bcd-bc35-4bc1-8abb-70874c677f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:21:8a:8b:2c:3f:f1:3c:48:e7:eb:61:25:23:
c5:d4:12:07:37:16:79:46:7c:3e:ef:d8:89:51:5a:
a0:bb:73:66:6f:6b:91:f3:08:3e:61:2d:3d:35:5a:
a7:99:31:9c:f3:18:81:09:11:ab:a6:de:d3:49:65:
8e:da:f9:2d:bc:bf:1c:61:0c:a4:7f:3a:04:f8:7a:
48:5f:be:42:50:fe:64:d5:8b:c7:7a:04:98:db:6b:
14:3d:cb:4a:6c:87:41:68:01:3d:ed:56:91:0a:e0:
68:21:c5:08:7d:f5:e3:e8:95:94:af:5e:19:47:23:
69:56:5a:de:cb:ed:2d:eb:ce:5c:f4:ae:5e:a5:0c:
92:64:84:ab:7e:80:14:c0:29:4a:0a:11:4a:18:9b:
60:a2:d8:dd:f9:f8:77:f2:3f:46:a4:15:3f:b9:ed:
67:14:a4:3f:b6:c2:95:d4:8d:49:18:c9:ec:77:1c:
78:97:2d:bb:b8:d1:5f:fb:16:ba:36:e9:72:e1:95:
55:a0:43:aa:64:37:0d:23:f0:f6:4b:70:99:81:2d:
56:1d:bd:6c:df:81:dc:9b:d1:ad:13:61:b5:a3:d5:
73:ce:d6:b4:27:16:15:df:f8:95:4b:c4:36:fe:15:
75:3c:e9:af:0b:65:10:01:4a:85:8d:8c:5d:74:6c:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4A:F1:6D:A9:8C:6F:F6:C2:A1:D8:C2:D2:C9:70:9F:19:CE:8A:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93e9af73-c731-3f54-ba56-3a1652f647a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:c9:7f:94:f8:7b:c2:5d:c4:7f:78:d6:12:ab:c7:23:1d:ea:
70:0f:6e:e0:04:f5:d8:6c:05:2c:40:a3:f8:01:93:41:61:3e:
ed:7e:c7:10:2e:ca:b8:41:fa:32:f8:2c:2c:c8:98:15:0b:89:
cf:a5:12:c5:a7:be:e9:ce:4e:cd:28:25:77:90:60:d2:df:18:
ed:3a:60:ee:88:85:81:f7:5d:cb:d0:c6:a1:9c:df:64:47:61:
df:5a:05:1f:fe:3c:eb:b8:04:14:3a:df:3c:3c:95:27:0c:2f:
5d:74:62:59:dd:b2:ae:59:8b:61:71:0d:52:a9:9d:0b:18:3f:
57:18:9d:9c:88:72:a7:8c:ed:cd:53:6e:1f:e7:57:ee:3c:48:
07:30:55:7c:98:ce:8b:a0:a0:13:9e:cb:77:fb:6a:42:cc:eb:
4a:29:3b:8e:de:d5:b5:48:d9:2c:c7:b6:61:dc:78:16:4f:7b:
04:aa:f4:90:78:1c:9d:89:d0:e8:7f:55:ea:52:12:18:f2:85:
3f:09:bb:5f:0b:2a:6a:90:24:2c:6a:e1:c1:25:53:9e:4f:ba:
84:33:1d:56:9f:92:53:99:a9:7d:f8:e0:71:4a:07:16:8f:90:
fe:59:28:a8:59:ae:98:d5:2f:ea:7a:e6:aa:95:18:ba:9f:14:
a5:25:01:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpozLomIzI1s6TQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk
YTNmYTZiY2QtYmMzNS00YmMxLThhYmItNzA4NzRjNjc3ZjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyGKiyw/8TxI5+thJSPF1BIHNxZ5Rnw+79iJ
UVqgu3Nmb2uR8wg+YS09NVqnmTGc8xiBCRGrpt7TSWWO2vktvL8cYQykfzoE+HpI
X75CUP5k1YvHegSY22sUPctKbIdBaAE97VaRCuBoIcUIffXj6JWUr14ZRyNpVlre
y+0t685c9K5epQySZISrfoAUwClKChFKGJtgotjd+fh38j9GpBU/ue1nFKQ/tsKV
1I1JGMnsdxx4ly27uNFf+xa6Nuly4ZVVoEOqZDcNI/D2S3CZgS1WHb1s34Hcm9Gt
E2G1o9Vzzta0JxYV3/iVS8Q2/hV1POmvC2UQAUqFjYxddGxsuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJRK8W2pjG/2wqHYwtLJcJ8ZzopnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTNlOWFmNzMtYzczMS0z
ZjU0LWJhNTYtM2ExNjUyZjY0N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRecMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7Jf5T4e8JdxH941hKrxyMd6nAPbuAE9dhsBSxAo/gBk0FhPu1+xxAu
yrhB+jL4LCzImBULic+lEsWnvunOTs0oJXeQYNLfGO06YO6IhYH3XcvQxqGc32RH
Yd9aBR/+POu4BBQ63zw8lScML110Ylndsq5Zi2FxDVKpnQsYP1cYnZyIcqeM7c1T
bh/nV+48SAcwVXyYzougoBOey3f7akLM60opO47e1bVI2SzHtmHceBZPewSq9JB4
HJ2J0Oh/VepSEhjyhT8Ju18LKmqQJCxq4cElU55PuoQzHVafklOZqX344HFKBxaP
kP5ZKKhZrpjVL+p65qqVGLqfFKUlARk=
-----END CERTIFICATE-----
Generated at Wed Dec 24 10:33:06 2025 by rpki-client