This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09457e15-48da-3306-8f1f-fe9e2da0fa29.roa File: 09457e15-48da-3306-8f1f-fe9e2da0fa29.roa (raw, json) Hash identifier: 1xSXb7m6l0GdDn0iDDK/JYjC4eg7WXMZVLZm5sdMHh4= Subject key identifier: 90:8E:DC:C3:92:C4:B6:02:23:71:B0:11:84:1D:9A:BE:7B:6D:2C:CE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A8309050E7245EA01F0D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09457e15-48da-3306-8f1f-fe9e2da0fa29.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.31.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:30:90:50:e7:24:5e:a0:1f:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=63f4fbc8-b244-4258-9c98-119cce95afd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:80:7c:d7:e8:11:26:b3:ef:49:f3:e9:7d:13: fa:1c:f4:88:d1:88:cb:dc:46:b0:10:b5:05:34:fd: 73:cb:b4:3e:f6:3f:f4:e8:65:83:d8:04:b9:6d:02: 55:93:8b:56:de:c3:a3:d9:21:44:e0:c2:56:9e:90: e7:56:ce:34:7b:22:d7:53:8b:f0:d6:80:7f:7f:02: 19:5b:43:b2:32:d8:46:cf:33:80:da:f0:a7:ac:21: e1:db:fd:fc:47:86:67:0d:92:95:6f:ee:08:0a:db: bf:f0:e4:29:21:30:10:69:ae:a7:ce:68:9d:3e:6a: 92:b5:89:16:15:12:2f:1a:31:3d:e6:d0:87:2c:14: 88:eb:c3:41:e0:dd:a1:8e:0d:06:e6:1b:5f:60:68: 59:47:85:37:c8:ff:80:0d:7e:89:e2:4c:c5:ab:f0: 4f:da:9f:08:a4:22:9b:3b:f4:fb:60:b7:78:b8:ab: 39:9a:1b:81:41:ec:b9:63:19:37:95:3d:84:33:eb: 04:76:81:f5:18:15:6c:fc:26:86:6a:62:d1:8d:95: 40:bc:f7:6a:3d:ac:88:40:ee:33:5c:08:82:09:28: 74:48:78:2a:4a:8c:e9:ef:b4:40:5a:6f:cd:da:9e: d1:d0:d4:09:5b:49:29:34:87:3a:4f:1b:0a:13:45: 73:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8E:DC:C3:92:C4:B6:02:23:71:B0:11:84:1D:9A:BE:7B:6D:2C:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09457e15-48da-3306-8f1f-fe9e2da0fa29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ad:db:a6:8f:79:27:cc:29:e5:ba:a2:c0:0c:be:72:19:56: e1:fa:99:64:51:f9:0a:8b:da:7a:2c:5a:96:0d:6d:06:53:63: 0e:e1:c6:76:db:cc:56:60:ea:3f:4f:45:8c:e5:ee:9e:2e:2c: e4:82:36:38:3e:f0:58:56:de:58:23:77:dc:5d:8d:9d:bb:62: 35:a2:3b:de:ad:c2:62:2e:88:e3:5c:ab:b9:1e:7f:ca:51:cd: 20:56:b0:3d:7f:be:a6:a2:38:41:30:51:88:ff:11:0b:3a:93: 22:3f:6b:9e:71:69:8b:25:48:9c:ca:4d:94:18:64:58:24:a9: c2:c4:b1:b0:e9:b9:2c:8f:b0:4f:1a:a3:de:97:bb:c8:d5:5d: 0e:ac:58:93:02:f1:24:25:83:7c:39:69:1d:7f:c0:94:05:e9: 66:35:89:8c:c2:41:4c:36:82:29:4f:0b:ee:09:01:c8:f6:9b: 8f:9a:bb:ab:f0:2f:38:d4:4c:77:01:b7:dd:be:1a:0d:27:0b: b0:77:dd:ac:ee:f2:7a:2e:60:04:ef:be:c4:36:16:39:ec:d7: b8:e8:92:cd:1b:8c:c4:9a:db:b3:76:0f:6d:2f:8e:81:06:98: b4:03:96:e7:90:cf:00:eb:01:0e:8d:9e:d5:e4:01:96:4c:81: 1f:c7:db:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqDCQUOckXqAfDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NjNmNGZiYzgtYjI0NC00MjU4LTljOTgtMTE5Y2NlOTVhZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIB81+gRJrPvSfPpfRP6HPSI0YjL3EawELUF NP1zy7Q+9j/06GWD2AS5bQJVk4tW3sOj2SFE4MJWnpDnVs40eyLXU4vw1oB/fwIZ W0OyMthGzzOA2vCnrCHh2/38R4ZnDZKVb+4ICtu/8OQpITAQaa6nzmidPmqStYkW FRIvGjE95tCHLBSI68NB4N2hjg0G5htfYGhZR4U3yP+ADX6J4kzFq/BP2p8IpCKb O/T7YLd4uKs5mhuBQey5Yxk3lT2EM+sEdoH1GBVs/CaGamLRjZVAvPdqPayIQO4z XAiCCSh0SHgqSozp77RAWm/N2p7R0NQJW0kpNIc6TxsKE0VzmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCO3MOSxLYCI3GwEYQdmr57bSzOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDk0NTdlMTUtNDhkYS0z MzA2LThmMWYtZmU5ZTJkYTBmYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOt26aPeSfMKeW6osAMvnIZVuH6mWRR+QqL2nosWpYNbQZTYw7hxnbb zFZg6j9PRYzl7p4uLOSCNjg+8FhW3lgjd9xdjZ27YjWiO96twmIuiONcq7kef8pR zSBWsD1/vqaiOEEwUYj/EQs6kyI/a55xaYslSJzKTZQYZFgkqcLEsbDpuSyPsE8a o96Xu8jVXQ6sWJMC8SQlg3w5aR1/wJQF6WY1iYzCQUw2gilPC+4JAcj2m4+au6vw LzjUTHcBt92+Gg0nC7B33azu8nouYATvvsQ2Fjns17joks0bjMSa27N2D20vjoEG mLQDlueQzwDrAQ6NntXkAZZMgR/H2+c= -----END CERTIFICATE-----Generated at Sun Jan 11 15:43:24 2026 by rpki-client