This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa File: 1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa (raw, json) Hash identifier: b8UIwKBGwQvnPU5rb5HmxS7AOM6kLHCX3jObkwd1Afg= Subject key identifier: 5B:4B:D8:47:FE:4A:63:96:78:E0:C6:2D:7B:F3:C1:43:0B:F9:FD:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A82388BE249F7CCEFEBC90 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.28.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:23:88:be:24:9f:7c:ce:fe:bc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=4ef95e94-b07d-4dec-99b4-b1715548ec40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:81:71:dc:f1:d1:c9:04:dd:1f:38:99:14: 70:a9:19:84:2e:11:f9:83:e8:6c:54:58:3b:53:b0: b7:c0:f7:06:fa:fd:5e:29:90:70:24:2d:c5:82:63: c4:09:3e:fd:c0:bf:e8:d0:cc:80:39:2e:4d:8f:d0: 82:46:65:b4:90:41:fe:82:24:65:2d:e7:5d:4a:27: e1:87:8e:c6:71:e7:bc:d3:a0:8c:5e:ae:aa:66:06: 5f:8e:0f:52:6a:72:b1:51:a7:87:38:5f:f5:6f:85: 09:e7:6e:89:fa:76:7e:62:a9:a6:a3:e4:ea:ff:13: 31:29:08:c9:f6:31:55:db:28:4d:09:74:12:c5:a5: 1c:38:3a:38:99:0e:66:0d:e9:e0:64:a5:88:97:a8: 74:43:40:28:dc:ce:14:29:ec:e3:a2:3b:62:e0:ea: 76:3d:02:a0:18:36:df:51:f0:ad:75:6a:b7:7c:6e: f9:c2:13:bc:20:44:ba:35:29:3a:48:12:9d:39:db: ca:79:0d:11:d7:92:63:f1:2a:c3:67:ba:79:21:46: 86:7e:10:f2:7f:27:ac:bd:84:b7:23:85:2e:0e:5a: d0:9c:da:5a:0b:37:eb:9e:71:6d:de:35:3e:8c:65: 76:3f:f4:b3:cd:67:29:a1:ea:7c:9c:5b:3d:4a:50: a7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4B:D8:47:FE:4A:63:96:78:E0:C6:2D:7B:F3:C1:43:0B:F9:FD:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1397a0dd-f293-3ac1-8c96-16ac3e4e28c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6a:d8:d5:71:58:61:4a:4d:78:72:fc:ca:18:79:c8:79:25: 26:46:23:26:a8:43:0a:20:05:a1:65:2f:c0:93:03:85:79:2a: 47:2f:83:a1:13:7f:40:b8:e0:0d:b3:b1:09:b8:9a:c5:bd:61: c4:14:ba:37:fe:72:ce:cc:e7:d1:f2:78:8a:b6:3b:82:d5:ca: aa:20:e6:49:b8:33:92:45:8a:f2:36:42:f5:04:01:0d:88:1d: 7f:dc:0e:62:56:3a:55:33:59:b4:ed:84:74:46:44:34:74:5b: c2:6f:f2:82:b5:70:e2:a0:05:cc:d4:9f:bd:1d:8a:b4:a0:f3: b3:06:c2:8d:92:47:a2:2b:9e:03:98:e8:ec:de:a2:7e:24:57: 9b:b0:bb:81:52:e9:b0:e0:93:62:c0:3a:35:91:d5:86:3a:df: 01:f9:c6:92:91:53:e3:01:ec:3e:82:b7:b5:cc:e7:71:86:79: 0d:d2:ce:8b:87:f3:00:37:67:f1:97:c5:5d:4c:33:47:2e:08: 19:d2:0a:c4:7f:1a:e0:e5:1d:9a:c4:9d:ad:20:40:32:68:a8: 52:33:56:78:df:28:0f:84:b0:e9:65:e8:b0:14:87:a3:48:27: 4f:3d:d3:c1:ba:ed:e1:04:84:3b:40:44:99:f8:35:00:8b:4f: 81:a6:b9:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqCOIviSffM7+vJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk NGVmOTVlOTQtYjA3ZC00ZGVjLTk5YjQtYjE3MTU1NDhlYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3WBcdzx0ckE3R84mRRwqRmELhH5g+hsVFg7 U7C3wPcG+v1eKZBwJC3FgmPECT79wL/o0MyAOS5Nj9CCRmW0kEH+giRlLeddSifh h47Gcee806CMXq6qZgZfjg9SanKxUaeHOF/1b4UJ526J+nZ+Yqmmo+Tq/xMxKQjJ 9jFV2yhNCXQSxaUcODo4mQ5mDengZKWIl6h0Q0Ao3M4UKezjojti4Op2PQKgGDbf UfCtdWq3fG75whO8IES6NSk6SBKdOdvKeQ0R15Jj8SrDZ7p5IUaGfhDyfyesvYS3 I4UuDlrQnNpaCzfrnnFt3jU+jGV2P/SzzWcpoep8nFs9SlCnzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtL2Ef+SmOWeODGLXvzwUML+f37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTM5N2EwZGQtZjI5My0z YWMxLThjOTYtMTZhYzNlNGUyOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERq2NVxWGFKTXhy/MoYech5JSZGIyaoQwogBaFlL8CTA4V5Kkcvg6ET f0C44A2zsQm4msW9YcQUujf+cs7M59HyeIq2O4LVyqog5km4M5JFivI2QvUEAQ2I HX/cDmJWOlUzWbTthHRGRDR0W8Jv8oK1cOKgBczUn70dirSg87MGwo2SR6IrngOY 6Ozeon4kV5uwu4FS6bDgk2LAOjWR1YY63wH5xpKRU+MB7D6Ct7XM53GGeQ3SzouH 8wA3Z/GXxV1MM0cuCBnSCsR/GuDlHZrEna0gQDJoqFIzVnjfKA+EsOll6LAUh6NI J08908G67eEEhDtARJn4NQCLT4GmuSI= -----END CERTIFICATE-----Generated at Sun Jan 11 17:08:22 2026 by rpki-client