This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa
File: 9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa (raw, json)
Hash identifier: DKL4PX6RiH1lXukk2epkl8bCVBBcJ/6CN72JBMyguNo=
Subject key identifier: 63:D4:3B:39:D6:DA:69:0C:AF:B7:7E:3C:C0:D3:D9:45:DB:97:DD:8C
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C42DBC2255CA97A33D1891200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa
Signing time: Sun 21 Dec 2025 14:00:40 +0000
ROA not before: Sun 21 Dec 2025 14:00:40 +0000
ROA not after: Sat 21 Mar 2026 13:00:40 +0000
asID: 30036
IP address blocks: 173.23.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:42:db:c2:25:5c:a9:7a:33:d1:89:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 21 14:00:40 2025 GMT
Not After : Mar 21 13:00:40 2026 GMT
Subject: CN=c8ec42e3-e901-47db-9bfe-ff5249dae283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:73:a4:49:d1:b4:0e:55:c6:44:99:8a:6f:a3:
64:d2:63:87:77:6c:25:bc:28:19:67:ed:17:4f:58:
52:c5:3e:d3:c7:2c:1d:a7:f3:99:74:46:5e:ff:45:
41:8c:6d:85:ab:23:7f:11:5b:e6:36:ef:7f:5f:98:
bd:17:29:40:2c:2b:46:f3:3d:0c:0f:5c:d8:0d:4d:
9b:7b:e3:da:e5:2e:bb:12:ac:16:05:ad:0c:dc:39:
d2:4d:bb:1b:f9:d2:b7:9b:0d:cb:8e:6c:f8:fe:5f:
b5:7e:ae:8f:5b:e5:38:1b:11:27:ae:63:82:d5:81:
a3:67:25:02:91:5c:e0:9a:10:c0:ec:d7:9b:fc:3e:
41:fa:51:bb:b6:a0:3f:6a:11:ba:01:14:ab:83:b2:
23:dd:d7:48:d4:c9:ff:54:6b:13:6c:65:aa:c7:36:
12:a8:47:cc:98:23:8d:e1:0b:ac:9a:9b:f3:62:45:
6c:91:5b:ed:bc:eb:63:53:4b:f6:9f:c6:1a:2d:1a:
68:88:43:5a:82:d3:52:bb:a8:2c:b3:63:88:05:b9:
80:f5:3f:0f:b9:d2:f9:9d:d0:22:52:07:d1:c3:e2:
8e:a6:9e:26:42:8e:20:33:f9:65:57:ef:87:c5:88:
3f:df:5e:35:37:74:22:fb:96:ea:0f:c6:00:42:f0:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D4:3B:39:D6:DA:69:0C:AF:B7:7E:3C:C0:D3:D9:45:DB:97:DD:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:25:51:87:47:63:03:52:33:4d:77:b0:eb:0e:8f:10:4e:ed:
87:08:be:66:53:06:1e:d1:8e:3b:39:37:68:39:d9:47:b3:ea:
39:95:6c:ae:45:f4:ca:77:cc:ec:d1:79:c1:02:24:e5:d1:ba:
36:31:92:ec:78:8f:29:8d:72:91:bf:c1:b7:4b:82:7a:9c:47:
82:35:b8:84:ea:27:14:1a:99:62:91:e6:96:56:8b:b1:16:7f:
da:04:07:c3:50:c9:99:92:8b:b2:f0:b7:9a:f9:4e:d0:99:a6:
06:e3:74:57:69:f5:f5:06:c4:41:7f:0b:98:d5:46:a6:d7:9b:
f7:0e:a3:71:1e:c3:1b:81:3d:7c:6b:2f:89:03:2f:8b:d0:0a:
08:1c:88:74:e5:fc:c5:d4:16:5c:3b:fd:c4:7d:37:7b:5f:b3:
c6:3f:29:35:19:c4:0f:53:53:a5:ed:ad:1c:11:de:b1:cf:02:
33:0f:6f:db:7a:ae:54:4c:40:45:6b:1a:32:d7:90:24:05:cb:
0b:4d:0a:9a:18:46:e5:57:42:58:bf:a6:ee:75:ac:f7:3b:04:
6d:b7:b0:d6:02:24:02:eb:37:ae:5a:d0:ca:d0:81:bc:5c:f2:
6e:64:8b:4b:d5:79:9d:a2:aa:84:5b:0c:cf:4d:47:b7:66:50:
84:b8:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:47:28 2025 by rpki-client