This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40e9350d-b9ae-3cd6-a153-a9110340de2c.roa File: 40e9350d-b9ae-3cd6-a153-a9110340de2c.roa (raw, json) Hash identifier: 5E7119kNSiRoEJKBpQ7l4UnDOMem1RYFJdVYemiWD/A= Subject key identifier: 5C:E6:92:1D:DD:9B:78:EB:21:98:79:EB:DF:97:6D:38:50:AB:5A:04 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C5666FF4BDC94CAFEC655BD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40e9350d-b9ae-3cd6-a153-a9110340de2c.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 19905 IP address blocks: 173.23.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:ff:4b:dc:94:ca:fe:c6:55:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=b2ccbe04-c54c-4f0d-b230-908b18f4d25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:d5:59:65:4d:69:69:69:9e:9c:f2:f0:07: 5b:82:75:8b:4f:9f:1a:7e:36:37:20:ec:91:25:b0: 15:4f:45:45:ce:3d:16:04:fb:3e:9c:93:11:7d:da: d0:37:69:25:14:51:d1:ac:19:6a:5e:0c:f9:71:4c: 5e:73:92:fe:23:fc:14:7b:69:3f:8e:17:4a:f7:32: 1c:23:09:2b:35:91:fd:0e:8d:1c:69:88:cc:43:7a: 68:9b:e8:cf:44:f9:b2:fb:d8:bb:97:8c:9b:20:ec: f7:01:dc:4d:9e:2b:ec:89:90:5f:e7:87:b4:bd:f8: 56:4a:b4:dc:29:69:b8:9f:22:1c:1d:ea:63:d0:75: 6a:ed:cf:4c:d6:5d:c1:73:c3:f3:cd:45:52:db:fc: cf:e3:56:68:42:a6:39:20:62:33:30:2c:42:17:22: 24:33:3e:89:e6:36:ab:0f:84:69:f6:8a:5d:22:96: d8:82:40:88:36:a5:22:7a:8a:47:a9:f8:54:c7:c5: 62:2f:44:63:02:15:d6:09:82:4c:75:72:b4:4a:75: 6d:f2:40:6f:5b:d9:14:ff:fa:04:ed:93:c5:9e:78: 44:d1:14:af:66:b9:02:0d:e9:4f:b9:f0:d2:91:59: d8:33:59:d9:f0:6e:43:ad:4f:c2:0e:ea:f4:8a:92: a3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E6:92:1D:DD:9B:78:EB:21:98:79:EB:DF:97:6D:38:50:AB:5A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40e9350d-b9ae-3cd6-a153-a9110340de2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:eb:86:93:00:f0:0a:9c:0d:73:c8:4e:43:f1:fa:63:a5:4c: bc:58:07:0f:e4:2c:f7:0b:17:71:c4:80:8d:27:e1:18:d1:b2: 28:19:42:40:67:d5:82:cf:7a:7d:a7:a2:f4:e2:62:c6:10:63: 0a:1c:dd:fc:87:c3:8f:44:a4:cc:92:36:73:c7:0e:88:58:4f: 6e:75:f4:ab:c2:ad:3d:66:0e:af:de:53:ff:4e:74:34:1f:0a: 8b:ef:d9:4f:b2:f1:f6:04:39:0a:a6:4d:48:a0:87:69:1e:9b: 2c:d0:61:98:0d:96:d7:eb:26:59:4d:74:6c:42:32:a6:c3:ee: fc:87:da:65:92:3e:b6:f1:ae:0f:0a:6e:a0:61:04:e3:aa:28: 44:f8:ed:a5:f6:9a:23:c0:a6:ab:56:36:f3:8f:2c:de:51:49: 8b:9d:19:df:39:f8:99:d4:01:a5:1b:4c:13:79:ac:77:7e:16: 97:6d:3b:02:41:9e:67:b3:d2:d6:43:f5:de:04:40:6e:4f:80: aa:dc:2b:8d:6f:6c:4b:89:12:36:f9:84:4e:6b:63:cb:e1:9a: 80:93:22:2c:cf:f7:b4:97:a9:cc:89:cb:92:e1:02:9b:31:1a: e5:32:e4:2c:60:de:2a:18:bb:79:fb:b6:40:7e:69:68:03:36: f6:89:db:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZv9L3JTK/sZVvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YjJjY2JlMDQtYzU0Yy00ZjBkLWIyMzAtOTA4YjE4ZjRkMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTXVWWVNaWlpnpzy8AdbgnWLT58afjY3IOyR JbAVT0VFzj0WBPs+nJMRfdrQN2klFFHRrBlqXgz5cUxec5L+I/wUe2k/jhdK9zIc IwkrNZH9Do0caYjMQ3pom+jPRPmy+9i7l4ybIOz3AdxNnivsiZBf54e0vfhWSrTc KWm4nyIcHepj0HVq7c9M1l3Bc8PzzUVS2/zP41ZoQqY5IGIzMCxCFyIkMz6J5jar D4Rp9opdIpbYgkCINqUieopHqfhUx8ViL0RjAhXWCYJMdXK0SnVt8kBvW9kU//oE 7ZPFnnhE0RSvZrkCDelPufDSkVnYM1nZ8G5DrU/CDur0ipKjzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzmkh3dm3jrIZh569+XbThQq1oEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDBlOTM1MGQtYjlhZS0z Y2Q2LWExNTMtYTkxMTAzNDBkZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLrhpMA8AqcDXPITkPx+mOlTLxYBw/kLPcLF3HEgI0n4RjRsigZQkBn 1YLPen2novTiYsYQYwoc3fyHw49EpMySNnPHDohYT2519KvCrT1mDq/eU/9OdDQf Covv2U+y8fYEOQqmTUigh2kemyzQYZgNltfrJllNdGxCMqbD7vyH2mWSPrbxrg8K bqBhBOOqKET47aX2miPApqtWNvOPLN5RSYudGd85+JnUAaUbTBN5rHd+FpdtOwJB nmez0tZD9d4EQG5PgKrcK41vbEuJEjb5hE5rY8vhmoCTIizP97SXqcyJy5LhApsx GuUy5Cxg3ioYu3n7tkB+aWgDNvaJ24E= -----END CERTIFICATE-----Generated at Sun Jan 11 01:46:19 2026 by rpki-client