This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa
File: fa38c4c0-2930-37f2-aa5d-8781e808672d.roa (raw, json)
Hash identifier: tpCGdaukHUDxbsaawURCbG/eahFuHX9B+UB+YG0wL/w=
Subject key identifier: E3:AD:41:0E:41:71:EA:A1:31:35:BE:B6:AE:B1:FF:87:9D:C5:A7:3D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C45A84691D79604F2227C6F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.25.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Dec 2025 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a8:46:91:d7:96:04:f2:22:7c:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=6280fa44-5c24-4e8f-b751-d9e5ce91eb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:26:79:26:25:8a:48:5a:14:9f:51:9f:ca:
d7:0f:10:50:a3:d9:16:06:87:5f:62:f3:5c:fa:47:
06:4f:b1:73:fd:25:7c:1d:0e:94:1a:11:67:49:77:
e7:ff:2f:21:00:54:10:11:29:d5:26:57:ef:b3:7d:
fe:c1:91:60:66:8e:44:86:66:e9:ac:c6:ba:06:71:
bc:0e:cf:6d:c5:41:07:d6:c1:3d:9a:e7:7e:91:7c:
55:b0:34:29:52:92:9e:f1:64:35:77:8a:ff:e3:c6:
cd:ec:a5:3e:9b:ee:07:29:0e:f4:cf:36:7d:80:e7:
da:1d:ad:13:7a:b3:1e:f8:b6:a4:e9:7f:7f:b7:f7:
d9:65:6e:0d:bd:0e:0f:c6:3c:0b:f0:9c:0f:7b:dd:
05:48:42:39:7f:07:34:f5:91:b5:81:0d:98:b9:cf:
fa:3f:3b:7e:26:df:2d:87:db:4c:fd:ec:2d:3f:1b:
8e:15:96:c5:c5:e6:a1:0b:64:f8:be:62:a4:3c:c2:
7e:01:6d:c3:57:7e:b8:f0:31:a2:c4:0c:27:36:93:
3c:ac:26:1b:db:a5:34:86:c0:21:31:b5:75:81:73:
cf:46:3d:3c:18:5f:ef:ad:2d:f4:80:2c:60:12:ef:
be:60:58:6b:4b:0d:ca:77:1e:e7:bb:44:de:86:60:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AD:41:0E:41:71:EA:A1:31:35:BE:B6:AE:B1:FF:87:9D:C5:A7:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa38c4c0-2930-37f2-aa5d-8781e808672d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.25.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:32:33:51:8d:66:79:6a:6e:83:9c:87:ee:dd:89:21:38:93:
26:10:fb:af:b1:6d:ff:41:34:c2:c3:c4:db:6e:39:7b:ec:d3:
b2:d3:c5:86:06:ce:f5:60:af:d2:e8:ac:6f:bc:54:37:a1:cb:
f9:22:41:f1:1d:d3:7f:e8:56:82:9e:d3:a5:a6:ea:5c:f2:bf:
20:40:73:78:0c:7d:af:ec:7d:6d:34:15:c2:d0:3e:23:27:78:
94:6d:a5:84:fd:78:d5:b1:aa:d7:c2:4f:eb:e4:b1:7e:d0:bb:
7d:3c:3d:99:06:7e:f1:da:d3:41:f9:07:08:fb:41:44:cb:4b:
e5:25:5c:43:a8:02:f9:2a:24:65:47:b5:66:1e:cc:8c:20:4b:
95:34:1d:c8:f7:15:9c:11:6b:e7:a9:36:0f:75:c6:c5:86:1c:
ec:67:e6:13:c8:30:b7:81:ef:11:4c:3d:96:46:9b:a1:e2:c9:
41:ff:55:06:5b:c7:18:20:9e:3a:62:14:11:40:12:f0:32:c3:
34:4e:0c:5c:1b:67:e1:42:c8:51:14:e6:d4:7b:b8:43:c2:99:
e1:81:03:6d:c6:19:0a:7f:7b:31:0d:d3:a0:a8:02:da:a8:f7:
f9:41:ec:75:ee:7d:17:72:72:69:d8:37:d4:78:c7:87:be:5f:
60:02:6e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:48:38 2025 by rpki-client