This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ffdf7d9-9fb8-3baf-b047-4aa041041f96.roa File: 4ffdf7d9-9fb8-3baf-b047-4aa041041f96.roa (raw, json) Hash identifier: ugcdQBqQTt9vc9+6BqG9ZyuHyXXVn/ZrULL2qP0kv+U= Subject key identifier: 30:98:89:1A:EC:68:63:65:9F:22:AB:CE:24:2A:D8:C5:A4:AF:07:E2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BDC6F118F06EA00EA6CA4B840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ffdf7d9-9fb8-3baf-b047-4aa041041f96.roa Signing time: Fri 14 Nov 2025 21:29:20 +0000 ROA not before: Fri 14 Nov 2025 21:29:20 +0000 ROA not after: Thu 12 Feb 2026 21:29:20 +0000 asID: 30036 IP address blocks: 173.23.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:6f:11:8f:06:ea:00:ea:6c:a4:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 14 21:29:20 2025 GMT Not After : Feb 12 21:29:20 2026 GMT Subject: CN=bc95a586-ec22-44b5-8f64-f9039c0229ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:49:5c:71:49:ac:41:76:61:99:9e:2d:c5: 68:98:8b:28:bf:91:e9:f9:5c:b9:45:07:33:f9:c8: 22:fc:aa:7d:72:53:07:01:d6:b9:a5:70:85:4b:9b: 60:97:48:aa:e0:ab:92:54:f0:54:6f:00:46:52:71: 84:ca:06:53:81:c5:09:f9:9b:ae:f0:2b:f1:81:c5: 7a:14:ea:7b:4f:0c:3b:38:06:9f:1a:f9:a8:fb:42: 4d:74:31:d0:f3:94:f8:04:83:37:55:cc:f8:d6:b5: 46:b5:e8:61:e4:fd:b5:87:8a:37:5a:50:34:e6:ef: 2f:62:5c:bd:18:cc:5f:b8:6e:e9:98:c4:9d:a2:ac: 45:8d:f4:33:2d:be:07:52:e4:d8:6e:17:74:7e:fe: d2:99:43:42:3c:05:6e:62:b2:ca:de:66:7c:a9:6e: 89:ff:55:23:3f:b1:82:ab:a7:91:cd:54:e9:56:01: 49:14:8f:49:20:78:d0:b0:34:d3:1c:77:ce:5c:22: 2c:93:6c:2e:17:5d:49:6b:43:68:f7:3e:b5:09:aa: 51:db:0c:34:bd:69:b5:2f:cb:10:06:56:be:2d:a7: eb:95:09:a3:64:2c:8b:5b:f7:22:1c:d9:4a:29:31: 81:48:c3:72:56:fe:f5:35:36:22:e9:6f:17:fc:e0: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:98:89:1A:EC:68:63:65:9F:22:AB:CE:24:2A:D8:C5:A4:AF:07:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ffdf7d9-9fb8-3baf-b047-4aa041041f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4f:57:de:d4:33:23:02:39:b4:4b:32:cd:ca:6b:74:3e:75: 44:d4:65:8f:0f:40:09:8e:41:67:07:86:be:52:55:8a:94:5e: ab:89:ce:f9:08:c3:41:88:0e:23:c5:14:bc:11:bc:70:c3:e7: 7b:6a:fe:ff:f9:a5:0e:2b:c1:be:07:8b:ce:cd:0f:ba:b9:42: 56:52:a2:ec:27:d7:4e:44:b7:71:0d:25:12:8f:df:22:26:23: fd:e8:35:01:b5:a5:37:99:a6:a2:d5:a8:c8:fa:8e:34:7d:b4: 9d:8e:11:3e:87:ca:06:73:a1:80:92:56:c9:05:fb:42:2a:06: f5:85:ba:c9:dd:31:9a:d6:78:31:9a:f7:ae:ec:05:68:10:68: db:cf:6d:ca:19:fd:40:f1:fa:ab:2b:7f:0a:73:7d:db:01:fd: 1d:17:4b:71:93:5c:5b:4b:b9:16:43:8b:99:4b:7c:f0:be:80: 2a:d7:37:9e:9f:10:fc:86:04:29:bd:e0:73:0b:54:61:78:21: 55:71:0d:7a:a0:4a:23:ed:db:57:ca:42:7b:7f:ad:c4:a2:1a: e5:96:29:b1:2c:1d:9b:77:25:5a:50:b8:58:e3:36:64:9f:03: 0e:71:43:6c:f1:57:26:82:35:f9:b3:1e:8a:0b:d0:18:67:cd: 03:53:45:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvcbxGPBuoA6mykuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExNDIxMjkyMFoXDTI2MDIxMjIxMjkyMFowLzEtMCsGA1UEAxMk YmM5NWE1ODYtZWMyMi00NGI1LThmNjQtZjkwMzljMDIyOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0FJXHFJrEF2YZmeLcVomIsov5Hp+Vy5RQcz +cgi/Kp9clMHAda5pXCFS5tgl0iq4KuSVPBUbwBGUnGEygZTgcUJ+Zuu8CvxgcV6 FOp7Tww7OAafGvmo+0JNdDHQ85T4BIM3Vcz41rVGtehh5P21h4o3WlA05u8vYly9 GMxfuG7pmMSdoqxFjfQzLb4HUuTYbhd0fv7SmUNCPAVuYrLK3mZ8qW6J/1UjP7GC q6eRzVTpVgFJFI9JIHjQsDTTHHfOXCIsk2wuF11Ja0No9z61CapR2ww0vWm1L8sQ Bla+LafrlQmjZCyLW/ciHNlKKTGBSMNyVv71NTYi6W8X/OA2zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCYiRrsaGNlnyKrziQq2MWkrwfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGZmZGY3ZDktOWZiOC0z YmFmLWIwNDctNGFhMDQxMDQxZjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRdXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5PV97UMyMCObRLMs3Ka3Q+dUTUZY8PQAmOQWcHhr5SVYqUXquJzvkI w0GIDiPFFLwRvHDD53tq/v/5pQ4rwb4Hi87ND7q5QlZSouwn105Et3ENJRKP3yIm I/3oNQG1pTeZpqLVqMj6jjR9tJ2OET6HygZzoYCSVskF+0IqBvWFusndMZrWeDGa 967sBWgQaNvPbcoZ/UDx+qsrfwpzfdsB/R0XS3GTXFtLuRZDi5lLfPC+gCrXN56f EPyGBCm94HMLVGF4IVVxDXqgSiPt21fKQnt/rcSiGuWWKbEsHZt3JVpQuFjjNmSf Aw5xQ2zxVyaCNfmzHooL0BhnzQNTRSI= -----END CERTIFICATE-----Generated at Tue Nov 25 12:10:19 2025 by rpki-client