This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa
File: aa00663e-3fea-35f2-a463-c2b67682be78.roa (raw, json)
Hash identifier: CbeyPKjGcgngOrcH8i4zrZfVluA8/KJycsJGDxyPbgI=
Subject key identifier: 65:21:73:C7:14:C9:6B:F5:CC:BF:FF:A2:48:91:ED:91:3C:FF:9C:9D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C37B123DD155E7EC86D2ECD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa
Signing time: Wed 17 Dec 2025 14:00:39 +0000
ROA not before: Wed 17 Dec 2025 14:00:39 +0000
ROA not after: Tue 17 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.23.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:37:b1:23:dd:15:5e:7e:c8:6d:2e:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 17 14:00:39 2025 GMT
Not After : Mar 17 13:00:39 2026 GMT
Subject: CN=54eebf68-cb91-4f27-ba8b-93b5d4e73c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:67:43:06:cb:90:ee:29:5a:7f:dc:96:26:
d1:05:4d:b1:47:80:07:3a:85:9f:fd:a3:b8:08:62:
18:ce:b8:ec:c9:f2:a8:d1:45:40:41:8f:61:04:ae:
8c:c0:52:e1:14:ae:66:13:b2:5b:16:f6:40:dd:24:
bd:5d:9d:29:94:10:69:04:56:71:1c:17:77:0f:83:
9b:3e:a1:1d:92:50:d5:32:eb:99:2a:d0:98:30:2e:
48:68:9c:24:83:e5:fe:94:ab:7a:6f:96:7e:ab:6f:
d3:ce:4a:35:08:cc:ed:62:f8:73:7e:15:c6:cc:77:
a3:f6:5c:ce:2f:2a:fc:8c:2e:c0:e7:77:5f:c8:11:
28:b3:ff:b1:9b:6b:fc:df:73:5f:77:fc:25:0f:ee:
20:f5:e6:27:b8:fa:86:ea:9e:c7:91:24:ec:e6:1a:
7f:10:44:51:fd:78:ce:d3:8b:fb:c1:04:76:7e:05:
7e:2a:9a:73:76:4c:24:6d:37:43:7a:26:e9:75:40:
63:f6:20:9d:99:59:41:03:cb:b4:7b:13:4f:45:f6:
cc:ec:d0:39:6c:dd:73:11:06:4c:8c:0f:20:a9:55:
ff:da:2a:1e:aa:b9:d4:bf:7d:4c:a4:6d:39:0a:1b:
90:7d:9a:21:f3:ab:af:ab:6a:e5:b6:ef:38:79:0d:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:21:73:C7:14:C9:6B:F5:CC:BF:FF:A2:48:91:ED:91:3C:FF:9C:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:88:a8:21:71:35:a8:91:d2:81:05:b8:5e:77:33:9e:96:2d:
ab:3d:ac:67:87:af:f6:10:22:67:53:79:dd:07:3f:4b:51:c4:
f0:fe:bd:65:f6:5b:b0:37:37:31:67:47:1e:1f:03:10:20:82:
0f:9e:bf:1c:07:18:73:8c:32:07:9a:b7:8e:96:ff:43:d7:32:
86:c8:2c:33:a1:c1:e1:4f:a3:7e:96:7a:67:ca:8f:ac:88:39:
6e:32:da:46:0d:34:0a:27:49:cf:9f:7e:53:1d:a6:16:5d:00:
e5:00:71:cd:17:b2:61:2f:f2:1b:a2:25:74:47:33:94:cf:d4:
a9:0e:bc:41:84:9e:46:4b:2f:5f:af:02:00:5f:8f:3a:fb:ad:
9e:a7:c5:97:d5:e9:03:40:d7:9f:6b:02:fa:d9:15:f9:b1:fd:
04:81:14:8c:f8:63:53:7b:02:44:f1:9d:c9:a3:9e:b3:b7:d7:
3c:c1:c8:18:4c:df:19:6c:55:83:a3:4b:cd:6a:bd:52:58:d0:
4a:f5:2c:2d:0d:20:dd:84:c9:75:29:08:f1:34:a0:b5:e4:3b:
9f:8f:f3:75:15:73:50:f2:3e:fb:cd:2b:bb:ad:bb:0f:fa:06:
e5:2f:b1:84:09:a0:eb:08:46:f7:04:c7:38:3a:ee:83:45:5a:
2f:e1:cc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:09:30 2025 by rpki-client