This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba4c534e-c145-3caa-abb1-ccd8778393d1.roa
File: ba4c534e-c145-3caa-abb1-ccd8778393d1.roa (raw, json)
Hash identifier: uX59SL5DWVFQiiRp8whUB3CTtip3Vt6X+P2zicAUTck=
Subject key identifier: DC:14:4E:AC:18:A9:DB:FB:F9:DA:5F:17:D2:E1:40:E7:B3:06:77:10
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C45A824022B03B9866A478C18
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba4c534e-c145-3caa-abb1-ccd8778393d1.roa
Signing time: Mon 22 Dec 2025 14:00:39 +0000
ROA not before: Mon 22 Dec 2025 14:00:39 +0000
ROA not after: Sun 22 Mar 2026 13:00:39 +0000
asID: 30036
IP address blocks: 173.29.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:45:a8:24:02:2b:03:b9:86:6a:47:8c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Dec 22 14:00:39 2025 GMT
Not After : Mar 22 13:00:39 2026 GMT
Subject: CN=124ef0a1-feec-4af8-9475-bfbcd0b1ce75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:ab:32:a7:9a:6d:8e:a5:ab:ca:26:ba:fc:
5f:1c:13:2d:81:17:3a:b1:e4:e6:1a:c5:db:4d:ee:
6c:6a:ab:1e:33:54:89:f2:d9:41:0e:b4:a6:98:06:
22:fc:c6:10:09:d4:b6:36:b6:d6:3c:a5:11:e6:26:
83:79:4f:fc:96:35:7e:88:d9:d2:2e:09:7f:d0:19:
d3:52:00:f6:58:1b:2f:c8:e4:13:e5:eb:0a:4b:e7:
74:a0:ca:d2:e6:dd:54:e9:9b:e3:6a:e9:f5:72:8c:
3f:f7:5f:b6:77:5d:b3:f7:48:d3:c5:b1:db:22:4e:
6c:72:d4:f8:97:aa:95:08:1a:0b:a9:d0:5a:5b:98:
ff:f3:ed:12:73:d8:a2:2b:33:93:21:e0:bd:5e:e3:
e8:b6:c5:c1:46:e3:64:b0:7c:cd:e4:e2:6b:c5:16:
71:63:a4:3c:f8:d5:b8:fb:1a:f4:22:45:9c:06:81:
d6:fc:a5:a1:53:3c:86:19:4c:27:13:68:1e:69:5f:
18:14:de:c3:eb:b4:85:99:68:be:a6:99:6c:22:c7:
8a:60:02:34:99:ad:83:e0:34:c5:2e:ad:ce:47:f7:
6f:ef:b3:02:04:36:31:3e:e8:90:c4:8d:b2:18:8c:
a9:51:6b:ec:ef:40:dc:4f:67:c2:37:a3:bb:37:72:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:14:4E:AC:18:A9:DB:FB:F9:DA:5F:17:D2:E1:40:E7:B3:06:77:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba4c534e-c145-3caa-abb1-ccd8778393d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.29.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:31:60:7f:d1:da:ff:15:e2:74:9e:92:b1:41:de:80:d6:e1:
3b:16:eb:09:94:bf:fd:71:83:14:89:6e:7f:76:81:60:7e:85:
2e:6d:1f:c1:d0:1b:8d:71:46:6f:25:1d:b8:c6:77:77:f7:ed:
60:7d:3b:7b:65:cb:42:e0:d7:85:d8:a6:c9:9d:a3:53:f7:41:
4d:9b:7b:43:18:da:3b:2f:35:ad:05:50:dc:29:75:6f:4a:74:
b5:76:5a:a4:63:68:cd:62:b4:a5:fb:d7:01:4d:d1:15:88:85:
a0:85:f9:8e:75:93:79:89:d3:8d:2e:bf:57:83:9d:37:42:92:
e2:71:6b:cf:da:77:9a:1b:e2:3c:68:d1:ef:7f:3c:a1:65:70:
3c:e0:76:70:70:dc:9e:3c:65:1f:49:f5:5a:43:6a:a1:25:88:
59:dd:24:0b:c6:bb:6a:4d:bc:5d:35:26:02:04:8c:59:8b:3a:
c9:23:4f:67:f0:28:bd:e9:1f:2a:ae:b6:48:84:71:e0:e9:45:
c5:e0:5e:24:41:f4:78:e1:e1:e4:0f:09:53:dc:e1:8e:9b:ab:
09:ed:71:c9:e3:c5:bb:6f:e3:ca:ba:89:bf:ff:71:f0:2d:dd:
a7:b3:c9:c7:3f:bd:9c:cd:c4:11:e9:27:be:fd:f2:7a:b1:91:
79:da:e1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:46:03 2026 by rpki-client