This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28c108a8-055a-3386-8983-b364c0e31f14.roa File: 28c108a8-055a-3386-8983-b364c0e31f14.roa (raw, json) Hash identifier: AAEV9ikj9f3c783uapYqF7mKy+tvazAZY5NG4avvYfA= Subject key identifier: 43:B0:CF:12:35:9B:F5:79:14:C3:56:23:87:C8:E1:FB:15:7B:2E:EA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6C71C148BE56DE9A239E60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28c108a8-055a-3386-8983-b364c0e31f14.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.28.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:71:c1:48:be:56:de:9a:23:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=0de0e2c3-dce9-4deb-ac73-d209c7bbf66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:47:70:88:43:f3:a0:93:d9:8a:01:91:c7:01: b6:21:f5:6f:47:84:4e:a2:80:e1:32:bd:d4:4c:2b: 0c:8c:2c:20:09:66:d5:36:b7:2c:8a:7b:26:e2:0f: 5a:b9:e5:9d:cd:ca:f6:a7:9a:96:12:1e:e0:90:0d: d3:58:2a:30:d8:11:83:75:f4:79:cc:91:c2:b0:c4: 74:54:64:0d:84:1c:7f:c9:59:3a:8e:d2:2a:d3:04: cc:bf:60:59:0d:04:57:60:ae:4e:7f:aa:29:66:67: cd:1b:c3:f6:5e:2b:b9:dc:c8:00:e2:18:93:d8:d6: 32:88:51:f7:4d:f3:f4:47:29:eb:ff:54:85:b5:cb: b6:48:a4:8a:7b:00:5b:c4:69:a8:40:10:79:18:67: 35:d5:be:9c:a5:e8:5d:b6:e6:c0:02:09:98:a3:b7: 7b:01:66:e8:91:b9:1f:7d:96:58:d6:b6:85:fa:e8: 04:5c:ee:c0:20:dc:d2:8a:10:81:3b:b9:ee:28:bf: 85:a3:30:fa:45:a3:b6:57:16:a1:d4:bf:7e:b7:51: b7:02:00:51:63:c1:aa:12:3a:61:ea:14:77:f9:e9: 78:05:ef:10:70:64:80:75:b6:aa:68:0f:bc:b1:b7: 20:84:f9:5d:06:75:af:f4:55:a4:92:11:55:c5:1d: f9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B0:CF:12:35:9B:F5:79:14:C3:56:23:87:C8:E1:FB:15:7B:2E:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28c108a8-055a-3386-8983-b364c0e31f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c7:d5:17:3b:52:01:6c:d3:b5:5c:73:6d:8a:93:09:55:2c: bc:cf:ac:ce:9e:3d:bc:4e:a2:6c:6a:d1:af:8b:6a:07:98:ed: c7:4e:e1:b3:51:89:98:de:3e:d2:87:58:b6:45:1d:c1:a6:fe: 16:2e:75:7c:fd:54:d6:06:05:09:82:9a:d6:45:ad:a5:17:51: 46:27:8e:c4:1b:e7:ba:8d:b5:55:8e:6d:67:b1:df:d0:40:35: d2:3b:ce:54:7b:aa:a4:c8:2e:85:29:40:44:f2:bf:30:1f:35: 8a:b2:6e:82:97:52:8b:03:a7:6e:38:35:b0:00:ac:7c:27:3c: 1b:ee:fb:7c:c8:13:39:df:c0:95:6a:a9:3c:da:13:74:cb:21: 48:df:99:06:a2:34:1b:4b:0f:72:55:12:ba:95:32:e0:55:31: d3:25:71:f2:d2:0f:0b:ea:df:97:6a:a3:f4:7b:c5:3e:77:a1: 6a:98:c7:44:ef:0c:0e:6c:fd:16:a6:a9:9c:76:58:b3:41:90: c0:4d:4b:c3:a0:de:73:58:e3:d8:37:a3:98:3f:d6:88:35:f3: 84:af:05:0d:e8:9e:f3:7f:f8:4f:58:b7:14:ad:ad:10:91:2e: e8:46:b2:b9:1f:6b:91:74:c0:7d:46:79:61:b7:82:45:14:0f: 7b:79:0f:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHHBSL5W3pojnmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MGRlMGUyYzMtZGNlOS00ZGViLWFjNzMtZDIwOWM3YmJmNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUdwiEPzoJPZigGRxwG2IfVvR4ROooDhMr3U TCsMjCwgCWbVNrcsinsm4g9aueWdzcr2p5qWEh7gkA3TWCow2BGDdfR5zJHCsMR0 VGQNhBx/yVk6jtIq0wTMv2BZDQRXYK5Of6opZmfNG8P2Xiu53MgA4hiT2NYyiFH3 TfP0Rynr/1SFtcu2SKSKewBbxGmoQBB5GGc11b6cpehdtubAAgmYo7d7AWbokbkf fZZY1raF+ugEXO7AINzSihCBO7nuKL+FozD6RaO2Vxah1L9+t1G3AgBRY8GqEjph 6hR3+el4Be8QcGSAdbaqaA+8sbcghPldBnWv9FWkkhFVxR35owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOwzxI1m/V5FMNWI4fI4fsVey7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjhjMTA4YTgtMDU1YS0z Mzg2LTg5ODMtYjM2NGMwZTMxZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDH1Rc7UgFs07Vcc22KkwlVLLzPrM6ePbxOomxq0a+LageY7cdO4bNR iZjePtKHWLZFHcGm/hYudXz9VNYGBQmCmtZFraUXUUYnjsQb57qNtVWObWex39BA NdI7zlR7qqTILoUpQETyvzAfNYqyboKXUosDp244NbAArHwnPBvu+3zIEznfwJVq qTzaE3TLIUjfmQaiNBtLD3JVErqVMuBVMdMlcfLSDwvq35dqo/R7xT53oWqYx0Tv DA5s/RamqZx2WLNBkMBNS8Og3nNY49g3o5g/1og184SvBQ3onvN/+E9YtxStrRCR LuhGsrkfa5F0wH1GeWG3gkUUD3t5D+U= -----END CERTIFICATE-----Generated at Tue Nov 25 10:36:20 2025 by rpki-client