This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa
File: 9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa (raw, json)
Hash identifier: yBbWmhYfUxFp2XhqOtUXf2/JmRq2ko7XFwwHuNUN9bQ=
Subject key identifier: 10:46:CE:4C:AC:E9:A0:A3:82:7D:CC:8A:66:CA:F5:0A:A6:61:0F:31
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C42DBC1B497ADD5F130A25A40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.29.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:c1:b4:97:ad:d5:f1:30:a2:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=3e6724b3-5468-4a9e-a1d5-dfd6b81fe7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:4e:88:3d:f3:3b:c1:c3:4f:d1:a4:e6:67:
ef:5f:3d:20:68:0f:8f:57:0b:10:f9:7f:9e:d1:b6:
7b:06:b0:6f:c7:41:25:ef:e8:f8:d9:3a:17:2f:62:
cc:83:b5:2c:3a:22:86:16:c1:88:2d:79:66:ef:21:
8e:ee:69:4e:b3:cf:d3:5a:e2:8c:ae:4a:e9:d0:74:
5c:34:fd:45:ae:72:4e:d6:eb:7d:c8:ee:a5:39:45:
78:6e:ac:8b:a0:96:b6:fb:2e:16:d5:5c:77:b3:6f:
97:44:4f:fd:5c:3e:5c:d4:0a:e0:81:36:3e:77:88:
34:33:04:72:a2:a7:0a:cd:30:d2:a3:c9:b7:9a:ae:
e1:b9:8b:f6:17:89:78:65:53:bd:d1:ba:ca:1f:5f:
d1:ce:c4:c5:df:d8:b8:51:be:56:59:d6:2f:80:dd:
fa:78:67:de:b4:cf:ea:34:ff:43:b7:68:76:06:fa:
83:40:0c:c9:d3:a3:14:2d:bd:f9:44:6f:b9:e7:d7:
1c:62:26:20:88:63:8b:e7:47:32:d1:61:2f:8f:6a:
05:6b:7b:5c:80:a8:99:a2:3c:a8:d3:bc:fb:6a:a5:
a5:18:38:59:c6:91:9d:3d:00:ff:cf:1b:da:55:c3:
7a:a5:e8:33:29:a9:82:0b:82:23:e2:06:83:53:c2:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:46:CE:4C:AC:E9:A0:A3:82:7D:CC:8A:66:CA:F5:0A:A6:61:0F:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:de:6c:26:78:67:c4:cc:13:b4:23:26:d7:af:82:22:c7:fb:
f3:c4:f4:d6:b4:d0:c6:36:20:de:05:af:51:d5:5d:fb:5d:27:
02:5a:bf:c1:00:c9:e7:13:f4:da:94:f0:fd:92:0e:42:5a:e9:
c6:91:b7:e9:f4:0a:b7:9f:d9:a9:6b:fb:b6:e1:cb:7b:97:8c:
1d:f0:73:b0:66:88:99:22:46:ca:b1:53:6b:01:41:5f:38:00:
61:6c:80:77:7f:8c:bd:01:53:48:db:2e:8b:38:bd:22:6e:f3:
5d:e0:82:62:c4:e4:30:e2:68:53:13:5e:8b:1a:e0:0e:53:a3:
48:bb:48:77:68:98:26:fe:4e:e6:05:42:dc:9b:ab:27:6b:2a:
d2:66:55:4a:27:18:fd:c2:99:7a:a0:3f:af:d8:e9:f0:8b:a5:
08:73:e2:04:79:72:9c:5d:95:a8:13:00:8d:a9:dd:90:59:41:
2a:82:35:71:b5:bf:96:2d:83:70:44:f5:de:c9:b1:34:85:5c:
8d:c4:fb:72:83:f4:32:a9:19:73:62:c4:74:12:ea:ae:e1:99:
6f:96:a0:26:6f:53:aa:6d:70:23:58:aa:cb:af:6e:33:a3:f1:
e9:90:2f:b1:e4:a4:1c:fe:93:14:b0:74:0c:ea:ba:cc:58:51:
b1:d9:08:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:47:15 2025 by rpki-client