This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86d6c431-f4cf-38ce-bf3b-a13315ca5ab1.roa
File: 86d6c431-f4cf-38ce-bf3b-a13315ca5ab1.roa (raw, json)
Hash identifier: mmPLWefhnZt7IsxsS/i39CA5NCUtC3tA9QtotrxVbJ4=
Subject key identifier: 5E:4A:6F:D2:33:E9:C8:5E:7A:11:1C:E7:30:BA:24:07:CC:B6:32:9D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C45A6952EE30C08B0AF0E1880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86d6c431-f4cf-38ce-bf3b-a13315ca5ab1.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 150.195.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a6:95:2e:e3:0c:08:b0:af:0e:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=3e4f7c8b-f176-4e57-889a-0595ca57de5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:f8:3b:4e:68:cd:6b:1b:8b:28:5c:94:f3:
08:6d:8b:5a:37:84:2a:cd:5a:4d:80:68:f9:0c:57:
4c:08:ad:7b:dc:fc:e5:cd:41:0d:34:c5:4d:51:9f:
89:f1:44:99:67:77:e8:ed:53:8f:2d:3d:d0:5f:ba:
f5:75:b8:26:a3:15:45:6f:24:fa:ef:1a:01:64:bc:
e5:a6:39:1f:d0:df:3f:8a:cf:61:96:fd:e0:2e:ee:
cf:fd:a1:11:64:61:e8:a3:69:3f:fa:b2:18:c0:89:
e5:67:d1:3f:19:e5:52:b7:b3:a5:07:d8:68:e9:c6:
d7:28:21:f9:f0:74:25:28:0c:47:50:09:37:fb:ad:
79:d0:01:fe:53:28:73:e3:c1:21:46:e1:e4:11:f4:
c2:66:69:35:79:5a:25:51:e5:40:66:d1:36:82:80:
79:1e:7c:87:55:90:d0:ec:96:49:85:ae:ce:38:b6:
3e:81:6b:09:23:23:13:f5:98:5f:71:e4:86:40:d0:
7f:ca:bf:01:3c:40:47:9d:f8:8f:45:b0:22:5a:21:
5b:37:f5:42:b1:4b:b6:5f:c2:19:e0:b2:19:ab:99:
60:c5:fa:e6:28:8c:72:86:1d:25:44:f7:f0:53:fd:
8d:2d:ad:25:63:cc:33:08:97:a7:6f:c4:be:67:8e:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4A:6F:D2:33:E9:C8:5E:7A:11:1C:E7:30:BA:24:07:CC:B6:32:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86d6c431-f4cf-38ce-bf3b-a13315ca5ab1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.195.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ae:8b:59:76:7a:7c:a5:2b:db:65:d6:5a:0d:d3:96:83:ef:
7e:b4:f2:6b:3e:1f:57:41:66:ce:b2:3f:e3:65:78:23:9b:d1:
57:30:0c:89:09:8c:f6:73:c8:31:ac:30:53:2f:e8:75:e8:91:
59:f1:38:e6:6e:90:93:4f:45:0b:bd:f9:80:de:68:b9:2d:0b:
62:9a:b9:86:8a:61:7a:0e:d5:0a:82:59:9e:e1:90:b2:4d:14:
94:18:b9:e4:00:07:da:55:a8:02:5c:6e:52:25:49:47:e1:8d:
3d:57:c4:9d:f4:dc:11:a6:51:2c:ef:3d:2b:e0:f8:27:28:44:
d2:05:b9:6f:08:72:48:ea:5f:a0:88:3b:d3:97:c7:c2:87:8d:
a6:09:c5:93:a3:eb:94:fc:8a:46:70:e7:c7:28:bf:ce:35:1f:
d2:9f:23:b8:a5:09:64:1e:4e:d2:21:c1:88:21:af:8d:66:3b:
e9:b6:f4:49:87:fd:d0:cb:0c:54:1c:ba:09:e4:cf:44:c6:1f:
55:ce:3b:5d:8b:3b:43:a8:e4:e9:27:8c:25:35:90:e0:ad:4d:
cf:b3:1f:19:11:4c:0e:f7:13:be:31:9b:f0:61:1c:ba:d1:44:
ad:68:a0:ce:94:8b:80:28:16:ea:ce:89:9c:7d:39:9c:41:0e:
84:cf:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:49:25 2026 by rpki-client