This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a4db36a-637e-343a-9b4f-81b75136b0d8.roa File: 4a4db36a-637e-343a-9b4f-81b75136b0d8.roa (raw, json) Hash identifier: F62K0hzfLa5CYiHOTzTq6UoauvKmgcJU259E47FUrzA= Subject key identifier: 3F:8F:29:E9:F2:56:BA:70:D9:06:06:86:D4:82:68:87:76:18:4E:DE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BCF006F7ED67F3CACBB1DF700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a4db36a-637e-343a-9b4f-81b75136b0d8.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 30036 IP address blocks: 173.28.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:6f:7e:d6:7f:3c:ac:bb:1d:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=bda91957-8f94-46f1-bc94-ba21f7feb0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:79:7f:e1:03:65:bb:a8:b2:0f:09:e5:19:8c: 47:07:6a:f4:ca:a9:db:01:2c:1b:73:dc:d1:e1:63: 69:9e:b6:8c:b9:d5:74:74:15:fa:99:4d:a2:53:84: 04:84:49:70:82:87:17:61:05:c0:32:a0:c2:1e:d6: 86:68:4c:67:88:d5:b2:84:03:2a:fe:5c:4a:78:56: db:14:08:00:fc:3d:b0:61:07:bb:ed:b2:a0:48:71: d8:37:cb:8c:50:c0:a0:79:94:66:5b:82:56:aa:cd: 87:96:91:7b:aa:3b:31:fb:00:f5:02:6a:b0:18:12: 9c:ce:fc:e1:5d:e9:4f:63:cd:85:66:7e:9d:36:c2: 8d:4b:99:a1:90:a4:2e:0d:38:18:72:5b:30:15:50: 5c:50:b4:0d:a4:3e:f5:c1:df:cb:94:46:c3:e9:d2: bb:ea:09:e1:6d:41:6e:c2:1e:07:81:ca:61:06:47: 52:ae:e2:a9:ac:a6:1e:ce:6a:cf:70:34:e4:d8:1e: c6:9e:9d:db:10:85:bb:54:f8:4c:ff:cb:4b:29:f3: 14:f7:22:e0:e0:ab:68:bd:d6:86:8d:4a:4d:a0:dd: bc:9c:bb:4c:d7:a4:5e:99:19:7b:07:ff:47:85:ef: e5:e7:ae:8e:77:42:45:4b:d8:08:8b:66:07:ba:80: 40:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8F:29:E9:F2:56:BA:70:D9:06:06:86:D4:82:68:87:76:18:4E:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a4db36a-637e-343a-9b4f-81b75136b0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7e:28:72:76:d1:e4:29:ce:9e:d2:0d:77:66:6b:fc:42:11: 27:82:80:fe:1b:2a:22:5f:25:f3:63:4b:4c:e1:43:25:f9:ee: 96:6e:2c:4b:46:35:64:87:1e:a0:03:5a:42:bc:66:ce:96:63: c7:23:5e:02:1d:5f:2a:d7:84:ac:08:ac:11:47:a5:22:2e:d8: 1c:09:6c:98:a7:32:51:56:eb:1a:1f:1a:3e:21:75:ab:76:a2: 1b:fb:c5:c8:00:92:9b:ac:70:c9:df:25:db:17:12:d9:02:2a: 71:5e:2f:c3:92:c6:9b:8e:5d:07:75:5c:a1:ca:84:12:45:c9: a6:25:fd:06:9d:09:44:e1:9d:68:7a:29:10:28:39:e9:0a:e0: f3:88:5b:d2:5a:25:68:3a:be:d8:31:29:8c:76:4b:7c:98:ad: 27:fd:83:0e:26:9d:53:bb:3b:6a:e5:3a:44:74:86:a5:ec:20: 41:07:75:8b:19:c7:74:77:33:c6:75:e3:3d:bf:85:86:42:aa: 1e:0d:31:a5:a4:eb:f0:7c:66:26:0b:4c:50:eb:43:b6:d4:7b: 3c:b0:b0:19:eb:54:96:81:a5:73:d9:50:c1:60:cb:20:37:73: 97:7c:02:d9:e3:0e:e1:ec:8f:c9:54:61:d6:99:b4:db:77:9d: 97:cc:e9:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAG9+1n88rLsd9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk YmRhOTE5NTctOGY5NC00NmYxLWJjOTQtYmEyMWY3ZmViMGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHl/4QNlu6iyDwnlGYxHB2r0yqnbASwbc9zR 4WNpnraMudV0dBX6mU2iU4QEhElwgocXYQXAMqDCHtaGaExniNWyhAMq/lxKeFbb FAgA/D2wYQe77bKgSHHYN8uMUMCgeZRmW4JWqs2HlpF7qjsx+wD1AmqwGBKczvzh XelPY82FZn6dNsKNS5mhkKQuDTgYclswFVBcULQNpD71wd/LlEbD6dK76gnhbUFu wh4HgcphBkdSruKprKYezmrPcDTk2B7Gnp3bEIW7VPhM/8tLKfMU9yLg4KtovdaG jUpNoN28nLtM16RemRl7B/9Hhe/l566Od0JFS9gIi2YHuoBAjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+PKenyVrpw2QYGhtSCaId2GE7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGE0ZGIzNmEtNjM3ZS0z NDNhLTliNGYtODFiNzUxMzZiMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV+KHJ20eQpzp7SDXdma/xCESeCgP4bKiJfJfNjS0zhQyX57pZuLEtG NWSHHqADWkK8Zs6WY8cjXgIdXyrXhKwIrBFHpSIu2BwJbJinMlFW6xofGj4hdat2 ohv7xcgAkpuscMnfJdsXEtkCKnFeL8OSxpuOXQd1XKHKhBJFyaYl/QadCUThnWh6 KRAoOekK4POIW9JaJWg6vtgxKYx2S3yYrSf9gw4mnVO7O2rlOkR0hqXsIEEHdYsZ x3R3M8Z14z2/hYZCqh4NMaWk6/B8ZiYLTFDrQ7bUezywsBnrVJaBpXPZUMFgyyA3 c5d8AtnjDuHsj8lUYdaZtNt3nZfM6Yk= -----END CERTIFICATE-----Generated at Tue Nov 25 09:08:15 2025 by rpki-client