This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2752ef36-549d-3c59-b2da-60b1c8b1f2e0.roa File: 2752ef36-549d-3c59-b2da-60b1c8b1f2e0.roa (raw, json) Hash identifier: rtqxPO+IqQyQjACKoqtX52Y+oIY33Q4lFY9jV8Pwz4U= Subject key identifier: B4:73:11:E7:7A:D7:2B:FF:89:6E:5B:58:B5:8E:2C:A9:72:20:80:41 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC19D3930649EB7916D6CC Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2752ef36-549d-3c59-b2da-60b1c8b1f2e0.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 173.19.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:19:d3:93:06:49:eb:79:16:d6:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=2238ff59-2073-424d-8b4a-5575e6db1492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:e2:7f:d4:c5:4a:13:27:4b:d8:1a:ee:8b: 5a:dd:02:bf:83:c1:65:8a:64:5e:ad:76:93:61:23: 20:c4:0f:fb:91:1c:12:3b:97:df:90:cc:33:8a:1a: a7:a7:8e:b0:9a:bf:09:42:36:cd:df:1c:43:5b:b3: 86:66:78:8b:75:26:b6:fe:e4:50:e6:67:b4:c5:1b: 65:62:51:44:7c:fd:b1:c5:65:a9:32:98:40:6c:fb: 6c:9f:13:ff:87:59:b4:68:00:c7:cc:97:54:0f:16: 43:f5:f6:6e:d9:1e:6d:78:a8:69:54:bc:57:59:9f: 68:49:8a:b6:8a:3a:c5:fe:08:70:ea:b2:b1:f5:a0: f1:84:7c:13:cb:b4:87:2b:ef:e1:22:10:a3:26:f0: 81:ef:c1:c8:73:7f:b7:8d:a0:5e:74:e0:12:47:fa: 83:02:ce:05:22:9a:ae:e1:7c:c7:85:08:54:a8:d6: 24:f0:89:9d:63:00:53:54:7a:94:fa:62:8c:95:87: 59:94:f9:ed:dc:8e:82:80:e5:32:83:77:5b:42:65: e8:75:2b:6c:08:06:63:c8:af:c3:c7:53:c6:0f:c6: 44:05:cc:22:c6:13:c7:3c:07:66:f9:a3:a6:97:27: 00:be:86:96:7d:c7:04:ca:bd:5a:2a:b8:fd:00:a0: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:73:11:E7:7A:D7:2B:FF:89:6E:5B:58:B5:8E:2C:A9:72:20:80:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2752ef36-549d-3c59-b2da-60b1c8b1f2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:05:94:2c:f5:08:1f:3c:8a:01:ba:f8:aa:4c:42:0e:66:c7: da:8a:99:b4:e6:b3:53:84:ae:a7:91:97:a4:05:ae:33:16:a4: d4:96:12:12:90:57:4b:2c:d9:fc:c0:33:14:d7:47:c9:c1:28: ca:c4:de:6a:66:0b:44:75:02:55:af:13:ab:55:49:78:b1:db: fc:bb:e0:6c:15:72:9d:93:2c:d4:83:cd:a8:26:5a:98:39:3d: b7:a9:f3:13:71:6e:fc:dc:d0:29:79:e1:c3:0d:9b:74:0a:73: ce:4f:ea:60:0f:24:4f:7f:21:14:9b:f6:db:50:52:3a:78:67: 84:58:25:95:9f:5c:ae:a6:a7:20:61:af:fc:d1:4d:ca:75:08: b8:db:30:e0:57:0b:7a:bc:5c:cf:dd:ef:f2:2b:f2:77:b4:1b: af:31:de:28:25:09:3f:e7:63:4e:c4:ab:92:2a:63:59:98:c6: 47:1c:bf:45:ec:0a:24:bb:f0:36:c3:0f:44:4d:ea:b0:17:49: c8:c8:d1:d7:12:13:b8:e7:54:b6:d6:5c:97:38:ba:0c:81:39: 5f:73:71:ff:f8:2b:a5:b5:bc:c3:4d:8d:e8:16:5f:c6:ab:45: 86:90:c2:80:57:ab:d0:72:39:ff:63:e9:cc:0a:cd:72:5b:81: 07:b8:c7:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3BnTkwZJ63kW1swwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MjIzOGZmNTktMjA3My00MjRkLThiNGEtNTU3NWU2ZGIxNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1rif9TFShMnS9ga7ota3QK/g8FlimRerXaT YSMgxA/7kRwSO5ffkMwzihqnp46wmr8JQjbN3xxDW7OGZniLdSa2/uRQ5me0xRtl YlFEfP2xxWWpMphAbPtsnxP/h1m0aADHzJdUDxZD9fZu2R5teKhpVLxXWZ9oSYq2 ijrF/ghw6rKx9aDxhHwTy7SHK+/hIhCjJvCB78HIc3+3jaBedOASR/qDAs4FIpqu 4XzHhQhUqNYk8ImdYwBTVHqU+mKMlYdZlPnt3I6CgOUyg3dbQmXodStsCAZjyK/D x1PGD8ZEBcwixhPHPAdm+aOmlycAvoaWfccEyr1aKrj9AKCCewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRzEed61yv/iW5bWLWOLKlyIIBBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjc1MmVmMzYtNTQ5ZC0z YzU5LWIyZGEtNjBiMWM4YjFmMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIFlCz1CB88igG6+KpMQg5mx9qKmbTms1OErqeRl6QFrjMWpNSWEhKQ V0ss2fzAMxTXR8nBKMrE3mpmC0R1AlWvE6tVSXix2/y74GwVcp2TLNSDzagmWpg5 Pbep8xNxbvzc0Cl54cMNm3QKc85P6mAPJE9/IRSb9ttQUjp4Z4RYJZWfXK6mpyBh r/zRTcp1CLjbMOBXC3q8XM/d7/Ir8ne0G68x3iglCT/nY07Eq5IqY1mYxkccv0Xs CiS78DbDD0RN6rAXScjI0dcSE7jnVLbWXJc4ugyBOV9zcf/4K6W1vMNNjegWX8ar RYaQwoBXq9ByOf9j6cwKzXJbgQe4x6s= -----END CERTIFICATE-----Generated at Sun Jan 11 17:09:30 2026 by rpki-client