This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1197c38a-80f3-3e4f-9d55-d6f1995d0ec7.roa File: 1197c38a-80f3-3e4f-9d55-d6f1995d0ec7.roa (raw, json) Hash identifier: PYfPk2yHp6d9T1Djssa/WQyNuZKalAC5HW1+rXJPrb0= Subject key identifier: BD:56:98:80:E8:15:AB:50:F0:63:29:E6:2E:E4:05:8C:CC:19:C0:DA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C41768252D4839E4BAB011AE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1197c38a-80f3-3e4f-9d55-d6f1995d0ec7.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 173.23.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:82:52:d4:83:9e:4b:ab:01:1a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=088edea4-0db5-4b4d-a303-ca8c6b3dcb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:44:b0:9f:0e:71:dd:bd:59:1d:f3:9b:98:cb: 05:a9:fe:2d:d9:99:ce:d2:5c:38:25:c4:5e:cb:a6: d5:78:e2:de:0e:ce:f9:4f:3e:25:17:13:db:c2:c8: e3:fe:e5:11:16:df:0e:87:70:b5:02:5b:3b:46:5c: 16:8f:e1:97:a9:8d:98:21:27:73:d6:78:a4:f3:24: b2:21:75:63:c7:c8:8d:87:01:d3:41:b0:10:9b:74: 6b:51:d7:19:53:2f:fc:56:e8:87:ab:0f:83:03:a4: 84:b8:53:68:7a:c9:6e:55:26:c1:82:c0:f2:ab:0f: 63:e8:46:d0:b3:30:e4:15:11:28:66:fc:cd:42:9e: dd:13:03:50:23:11:70:e0:99:4c:c5:34:2c:85:1c: b9:aa:e6:2e:61:d3:a9:95:3f:7b:50:e4:82:5f:a8: e5:2c:76:a4:1e:f4:8c:0d:20:6f:6b:65:70:00:b9: 9d:6e:db:c9:96:2c:3a:26:1c:ea:0b:1f:9a:27:e5: e3:f7:08:8b:8c:08:0f:e2:7e:45:a7:3b:94:e8:5f: 33:5e:05:28:6e:7b:42:8f:a9:d1:05:82:7b:75:4e: fc:82:0b:00:2a:6c:b4:c5:a5:4d:5c:31:ba:44:95: 6b:10:ad:5a:c5:15:94:c7:bf:81:e6:88:3d:d7:c7: 85:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:56:98:80:E8:15:AB:50:F0:63:29:E6:2E:E4:05:8C:CC:19:C0:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1197c38a-80f3-3e4f-9d55-d6f1995d0ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:69:6d:25:64:7e:3f:8e:89:b2:24:aa:3f:e5:8a:fc:9f:ba: 87:bd:3f:54:ae:ec:32:f3:c1:ca:7e:96:a2:48:c6:c7:6c:18: bd:c0:5f:2d:f8:97:4c:fa:c1:77:e9:44:ab:57:f0:23:88:4f: f5:2b:48:43:32:67:99:b9:9b:f6:63:d6:18:f5:5a:24:1c:bd: 75:fb:0c:ca:ce:8b:be:20:4b:7a:79:57:d7:6e:9f:55:f1:47: 5e:27:99:68:56:fc:80:d3:2b:fc:fe:a4:86:38:f9:cb:05:71: 01:aa:25:e6:1b:e4:a8:ee:a5:37:cb:6c:e9:9f:a6:58:9c:a6: bb:a7:81:23:2b:de:dc:f7:3f:8e:de:8e:2c:6b:5a:07:fa:c4: 64:96:f9:a7:42:14:ae:1c:57:0f:39:84:ad:ec:e0:60:ce:18: b7:18:f3:37:55:bb:bd:ca:5f:1b:ee:64:5f:3b:27:f6:59:15: 0d:45:f3:bc:0e:82:a4:db:0a:5c:6b:75:f9:66:23:26:03:3f: 55:fc:98:09:86:58:a0:31:ac:df:04:9b:d8:ec:cb:6a:f4:2f: 38:55:b2:0d:d9:b2:c5:ac:89:bf:d9:9a:0e:59:89:03:d0:e5: 97:07:34:59:71:f9:ad:62:da:d4:9a:5c:93:56:fa:38:1a:a7: fa:7a:c5:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdoJS1IOeS6sBGuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk MDg4ZWRlYTQtMGRiNS00YjRkLWEzMDMtY2E4YzZiM2RjYjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUSwnw5x3b1ZHfObmMsFqf4t2ZnO0lw4JcRe y6bVeOLeDs75Tz4lFxPbwsjj/uURFt8Oh3C1Als7RlwWj+GXqY2YISdz1nik8ySy IXVjx8iNhwHTQbAQm3RrUdcZUy/8VuiHqw+DA6SEuFNoesluVSbBgsDyqw9j6EbQ szDkFREoZvzNQp7dEwNQIxFw4JlMxTQshRy5quYuYdOplT97UOSCX6jlLHakHvSM DSBva2VwALmdbtvJliw6JhzqCx+aJ+Xj9wiLjAgP4n5FpzuU6F8zXgUobntCj6nR BYJ7dU78ggsAKmy0xaVNXDG6RJVrEK1axRWUx7+B5og918eF6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1WmIDoFatQ8GMp5i7kBYzMGcDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTE5N2MzOGEtODBmMy0z ZTRmLTlkNTUtZDZmMTk5NWQwZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExpbSVkfj+OibIkqj/livyfuoe9P1Su7DLzwcp+lqJIxsdsGL3AXy34 l0z6wXfpRKtX8COIT/UrSEMyZ5m5m/Zj1hj1WiQcvXX7DMrOi74gS3p5V9dun1Xx R14nmWhW/IDTK/z+pIY4+csFcQGqJeYb5KjupTfLbOmfplicprungSMr3tz3P47e jixrWgf6xGSW+adCFK4cVw85hK3s4GDOGLcY8zdVu73KXxvuZF87J/ZZFQ1F87wO gqTbClxrdflmIyYDP1X8mAmGWKAxrN8Em9jsy2r0LzhVsg3ZssWsib/Zmg5ZiQPQ 5ZcHNFlx+a1i2tSaXJNW+jgap/p6xXA= -----END CERTIFICATE-----Generated at Sun Jan 11 09:46:09 2026 by rpki-client