This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db29e0ff-ee2d-3380-a478-c3efd8946e72.roa
File: db29e0ff-ee2d-3380-a478-c3efd8946e72.roa (raw, json)
Hash identifier: J+PJzeiBX1p+Uxnnybx7gkVxWUyFG8B+5Q8rKT9ddxY=
Subject key identifier: D5:BA:E6:BD:B0:FF:F7:D7:72:24:D6:A3:56:02:65:36:30:90:B6:62
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584C02A62011E0E251B1D0A59980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db29e0ff-ee2d-3380-a478-c3efd8946e72.roa
Signing time: Fri 28 Nov 2025 14:00:39 +0000
ROA not before: Fri 28 Nov 2025 14:00:39 +0000
ROA not after: Thu 26 Feb 2026 14:00:39 +0000
asID: 19905
IP address blocks: 173.17.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:02:a6:20:11:e0:e2:51:b1:d0:a5:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Nov 28 14:00:39 2025 GMT
Not After : Feb 26 14:00:39 2026 GMT
Subject: CN=c5938c26-3d29-44a8-b71c-f9eb16780da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:59:0c:c1:35:59:62:f4:ea:89:21:ad:25:5f:
92:e7:24:57:cf:9a:dc:14:6a:82:49:b0:0a:2b:85:
ab:ac:76:3c:58:7a:a0:b1:63:49:e5:82:8f:0e:ee:
61:0d:9e:9f:68:7e:6c:b5:67:06:b8:e7:9f:c3:1d:
d0:b3:a5:d2:e7:19:1b:d9:81:5d:d0:ba:20:a0:57:
14:c6:bc:ee:bb:23:cc:b1:ef:e3:b4:ee:4b:cb:f1:
a3:1b:62:45:22:94:23:fc:0d:98:5b:71:42:c7:69:
1d:82:f3:5f:03:99:46:f9:8a:d8:b0:d9:2a:43:26:
4b:d2:3a:fe:62:92:ec:84:2f:1c:7f:b2:66:3e:3f:
d4:12:6f:09:0b:77:0d:28:10:5f:5f:69:c1:0c:a5:
cd:34:24:f6:3a:83:87:11:84:a4:bf:f4:26:96:75:
d8:fd:7f:32:09:47:81:24:f6:5b:6a:ec:79:a4:3d:
cb:0b:04:71:9a:41:1a:92:a6:29:61:be:a0:39:67:
d1:be:90:81:ac:3c:48:0c:07:f2:80:60:f5:a4:b3:
d2:c0:1b:45:91:14:76:42:d4:43:d3:9c:20:8a:5d:
be:94:ac:76:b6:e7:40:01:e8:f0:74:4a:b4:d0:c6:
94:15:5d:4e:4f:85:b7:56:e5:c3:0d:36:cd:64:d5:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BA:E6:BD:B0:FF:F7:D7:72:24:D6:A3:56:02:65:36:30:90:B6:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db29e0ff-ee2d-3380-a478-c3efd8946e72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.17.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:a3:56:d1:27:58:c5:6f:b5:cb:36:8a:f9:3d:d6:aa:a7:c2:
ef:e2:15:32:26:b8:21:5c:4f:1c:92:41:4f:ab:6c:1d:6c:d7:
bc:33:5a:28:db:e3:71:e0:78:97:a4:52:21:ea:ea:fd:80:94:
58:61:8b:da:d5:9b:5a:5e:42:6f:9f:17:f0:a6:9f:07:57:f1:
0a:80:2f:05:4a:8c:fc:21:48:d3:49:d8:1a:85:cc:1b:5e:54:
01:34:3e:46:92:8c:4e:61:8d:8f:8d:32:90:2d:c9:4a:96:17:
55:d2:b4:74:a4:cc:c8:1f:f9:30:46:67:4b:73:96:bf:be:4d:
c5:78:ee:75:e9:a7:ed:26:7d:5b:57:7d:37:84:60:87:2b:ad:
2c:62:98:b3:5d:3a:af:1d:df:eb:30:12:c5:5d:6f:19:ae:6a:
bb:dd:7e:ae:ed:86:58:f5:64:22:1a:c1:e2:ae:44:b8:32:66:
39:4f:f8:24:b5:24:69:c1:67:c6:c1:be:19:c5:c0:71:c3:20:
2d:27:8f:76:ef:87:8d:fb:ee:64:ea:0d:60:be:b0:7b:83:1c:
20:b9:44:e2:b6:bf:31:ee:b5:67:fb:d7:92:07:68:47:7b:14:
fc:8b:7a:02:7c:de:41:26:1e:ae:7c:46:56:f3:66:1d:df:85:
8c:81:58:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:00:54 2025 by rpki-client