This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa File: 2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa (raw, json) Hash identifier: VuQPxW7GQhESilMWyA/XLg2LxxXAbNr5UKGT4LlaCGA= Subject key identifier: D9:BB:AC:E8:23:13:8E:6F:D8:33:D0:07:65:E2:99:A8:FC:CE:62:2B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC0E8F175391EE5C508700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.31.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:0e:8f:17:53:91:ee:5c:50:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=923bbe50-dbce-4580-8516-ac78517329d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:ec:63:97:5d:f5:18:5d:7b:45:e5:c2:3b: 0e:1d:1e:43:d0:c3:43:6a:eb:e6:58:a1:4b:f0:42: 20:09:39:36:0e:d6:fe:39:5d:64:9a:8c:0b:ed:ba: 68:15:0e:39:be:e2:64:9b:39:7e:cf:91:1a:fa:5a: 6a:d8:37:cf:db:ec:e6:aa:4c:5c:89:39:b8:c0:58: 27:17:1c:95:9b:28:9e:bd:2c:db:f0:38:37:2a:70: e8:a2:65:b7:01:b2:82:be:2f:0a:d8:2f:55:c2:62: c2:c5:4f:35:04:4d:de:4c:bf:7a:f3:d2:73:17:a9: 52:cd:34:52:9c:c7:a6:d5:c1:9c:1c:71:55:b4:97: fd:2c:8b:0c:a1:34:9b:42:ee:d2:ef:cb:d8:14:4f: cd:23:8a:30:f7:8f:d2:08:35:d4:50:85:16:a3:a8: 86:b3:77:de:f2:a1:c0:06:8e:7d:4c:ee:f2:11:50: 83:82:95:c5:69:f0:7b:94:da:a2:d9:78:44:f4:54: 4b:20:48:67:4c:b9:f7:f9:fe:4e:f9:bb:a5:0d:43: f5:3d:20:22:50:d8:36:fb:37:20:0e:da:70:8d:15: 25:1f:5a:70:6d:d1:17:86:fc:f6:a5:9d:46:b4:be: ed:57:49:22:9a:a2:de:cf:e7:38:ce:4b:4d:8d:d3: 81:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BB:AC:E8:23:13:8E:6F:D8:33:D0:07:65:E2:99:A8:FC:CE:62:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6b:2e:7d:60:19:4e:82:06:09:c9:9a:d0:c3:d1:8f:dc:82: e5:d5:0e:0c:7b:0e:11:21:df:27:8d:18:9a:f8:6c:1f:60:73: 99:0d:83:69:b7:a6:1d:5d:2d:3a:1f:21:ae:a8:95:fc:b3:d2: e6:9a:e5:c2:04:cd:8e:7c:84:c8:62:08:13:e4:af:e3:f1:50: 61:03:97:50:8b:47:c1:0b:62:8f:5a:3a:75:6b:e2:db:01:ba: 3d:2f:54:ce:6f:b0:07:8c:43:d7:4e:8a:34:86:f4:c6:b6:0b: 13:67:5a:a9:c5:be:26:3e:15:b7:1d:f5:9a:ad:39:33:a5:f8: 76:2c:86:5c:b7:61:2d:33:57:0c:d3:f7:aa:ca:09:c8:57:5c: b4:e5:51:c1:41:dd:bf:ac:a1:cf:7a:b3:84:9c:d8:bd:be:ca: b2:2b:ac:96:94:38:32:56:df:83:f7:29:a7:b7:b4:d1:2a:82: 77:9c:65:1a:f0:33:a8:67:81:5b:41:43:c8:68:ac:ea:2e:bc: b2:54:d0:d3:cd:a4:48:0c:f8:19:e7:68:22:81:d8:1a:08:b2: e0:6e:9b:bc:79:15:c0:ac:c2:84:ee:d2:9c:a2:65:b2:c4:2f: 79:33:5b:3e:dc:4f:87:c8:c9:e7:a9:91:b1:76:2e:53:73:09: 43:3a:38:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3A6PF1OR7lxQhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk OTIzYmJlNTAtZGJjZS00NTgwLTg1MTYtYWM3ODUxNzMyOWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy7sY5dd9Rhde0XlwjsOHR5D0MNDauvmWKFL 8EIgCTk2Dtb+OV1kmowL7bpoFQ45vuJkmzl+z5Ea+lpq2DfP2+zmqkxciTm4wFgn FxyVmyievSzb8Dg3KnDoomW3AbKCvi8K2C9VwmLCxU81BE3eTL9689JzF6lSzTRS nMem1cGcHHFVtJf9LIsMoTSbQu7S78vYFE/NI4ow94/SCDXUUIUWo6iGs3fe8qHA Bo59TO7yEVCDgpXFafB7lNqi2XhE9FRLIEhnTLn3+f5O+bulDUP1PSAiUNg2+zcg DtpwjRUlH1pwbdEXhvz2pZ1GtL7tV0kimqLez+c4zktNjdOBfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm7rOgjE45v2DPQB2Ximaj8zmIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmFmMzU3MmQtZTdkNC0z ZWQ3LWE5ODQtODljZDJhNWUxNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBrLn1gGU6CBgnJmtDD0Y/cguXVDgx7DhEh3yeNGJr4bB9gc5kNg2m3 ph1dLTofIa6olfyz0uaa5cIEzY58hMhiCBPkr+PxUGEDl1CLR8ELYo9aOnVr4tsB uj0vVM5vsAeMQ9dOijSG9Ma2CxNnWqnFviY+Fbcd9ZqtOTOl+HYshly3YS0zVwzT 96rKCchXXLTlUcFB3b+soc96s4Sc2L2+yrIrrJaUODJW34P3Kae3tNEqgnecZRrw M6hngVtBQ8horOouvLJU0NPNpEgM+BnnaCKB2BoIsuBum7x5FcCswoTu0pyiZbLE L3kzWz7cT4fIyeepkbF2LlNzCUM6OEo= -----END CERTIFICATE-----Generated at Sun Jan 11 01:45:39 2026 by rpki-client