This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5bf21c8-e3bb-3ee0-98a1-4759ac909043.roa
File: f5bf21c8-e3bb-3ee0-98a1-4759ac909043.roa (raw, json)
Hash identifier: /vJ1VjV1YmlrArAC0r0RAex9XSdpPVzyfhWQLMmzfNM=
Subject key identifier: A2:DF:F6:E8:18:2B:81:50:B4:A0:35:E8:1C:5E:BF:CB:86:5E:54:B3
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C3BE1337D53F15DFAEFB88000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5bf21c8-e3bb-3ee0-98a1-4759ac909043.roa
Signing time: Fri 19 Dec 2025 02:00:31 +0000
ROA not before: Fri 19 Dec 2025 02:00:31 +0000
ROA not after: Thu 19 Mar 2026 01:00:31 +0000
asID: 19905
IP address blocks: 173.24.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3b:e1:33:7d:53:f1:5d:fa:ef:b8:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 19 02:00:31 2025 GMT
Not After : Mar 19 01:00:31 2026 GMT
Subject: CN=f698f5c8-790a-46e4-9e90-9232332cb533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ff:9c:82:ec:00:ff:fd:bd:b8:e0:bb:71:84:
c6:a2:50:31:18:d1:e8:78:65:bf:dc:2a:a9:88:b6:
35:9a:c4:9a:70:64:ca:74:18:4d:42:af:92:50:de:
ed:a1:3f:57:b3:eb:62:f5:4b:a0:1f:34:47:16:f9:
ce:57:9d:d2:45:8e:a5:3c:bb:9f:32:d5:e1:a6:60:
d5:79:f1:86:2a:53:6d:f2:51:2b:f1:80:66:95:83:
a6:4b:6e:0b:c5:72:c5:80:1f:aa:f7:ed:30:a2:1a:
44:79:2c:08:6f:26:ee:8a:10:c9:48:f9:4b:de:35:
27:51:0c:5a:49:28:47:be:6f:d6:c6:d1:57:f3:26:
ad:be:87:ed:4a:f4:18:9a:d1:ad:12:fe:74:35:2c:
0e:cb:9d:86:81:92:c3:0e:70:71:c8:40:89:79:6c:
9e:e2:6c:db:f9:aa:f5:a9:a4:0a:2b:f5:8e:3c:85:
81:8f:06:7e:c5:92:ae:df:a6:25:a7:f9:d7:e4:bd:
17:eb:ee:b8:25:4d:3a:2d:46:30:99:81:ec:3e:d9:
00:52:6e:06:6f:22:0b:e1:9f:5c:4b:41:48:c2:63:
87:ad:ad:89:13:30:72:15:83:ae:1e:2c:24:7d:61:
ac:6f:81:18:82:4e:7d:e9:02:33:e9:0e:df:f0:26:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DF:F6:E8:18:2B:81:50:B4:A0:35:E8:1C:5E:BF:CB:86:5E:54:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5bf21c8-e3bb-3ee0-98a1-4759ac909043.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.24.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:80:eb:4c:53:17:73:29:c3:d2:90:ab:3f:a9:fb:0e:e6:5a:
1c:f2:4f:a4:cf:f8:d4:e1:6f:a5:56:15:37:b3:fc:28:9c:b1:
81:bc:af:23:f6:cd:a0:25:b0:df:f9:f0:41:94:ca:5f:6c:e9:
87:54:32:4b:d2:25:d2:d5:0b:98:c6:00:6a:d5:49:b6:e0:20:
60:8c:f6:c3:66:13:f8:3d:da:79:67:45:eb:6d:94:e2:21:cb:
42:24:c1:72:bd:95:ff:ab:f1:6f:0f:b4:df:ee:b7:d4:fe:d4:
f8:3b:b2:6e:62:c8:ec:c5:14:82:56:ec:d6:91:50:66:09:ed:
a3:6a:ca:2f:10:07:43:1d:9b:67:1b:92:a4:a9:4d:dd:7b:74:
80:1b:6b:aa:3a:bd:75:d1:2d:13:e4:63:d3:33:d0:e5:c4:d8:
e0:57:e7:aa:26:b9:bf:f3:52:e8:89:84:30:ae:c9:b8:6c:f5:
c5:ab:45:92:51:ad:2a:48:be:06:49:a1:4c:4e:a8:cf:52:6c:
1d:4d:21:e0:2d:26:7e:45:f9:8f:26:35:53:34:d7:b1:dc:10:
bd:bc:2c:b1:6b:d8:e3:98:0c:44:33:97:81:ee:f5:55:03:c0:
7b:98:5a:c2:bb:1e:ee:47:97:12:9d:67:dd:f5:02:95:a6:15:
e2:a8:12:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:12:41 2025 by rpki-client