This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593485a7-c008-3e53-82f6-d39ddaa6358a.roa File: 593485a7-c008-3e53-82f6-d39ddaa6358a.roa (raw, json) Hash identifier: dN6kO3yIPN0722v6RGzrVSaf6npV/CPdtFDiuU/oMOA= Subject key identifier: 67:87:65:31:3A:38:FB:41:40:41:98:75:E8:59:DA:F0:C6:5C:F7:14 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C487126D225A587054A702280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593485a7-c008-3e53-82f6-d39ddaa6358a.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.18.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:26:d2:25:a5:87:05:4a:70:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=0317a289-b9c1-49fc-b12d-7af10ca77cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:9d:4e:47:41:3c:6c:36:7f:7b:9a:89:75: 09:c4:e0:cd:63:21:18:7f:e2:42:94:44:00:cf:f8: 88:8d:ce:85:7c:50:d2:47:8c:62:32:27:e5:a6:be: e1:ce:8f:aa:5d:a3:f3:96:20:bb:68:22:69:be:d7: d8:fc:a2:13:2b:77:e8:7b:52:b4:95:2d:24:d8:e4: 4d:3b:8a:e3:12:de:01:7d:42:14:85:9a:46:cf:40: 26:4c:d2:ed:0e:58:5b:1a:39:a6:a1:56:0c:e3:27: 9a:47:86:b4:1b:e8:a1:a5:fd:35:cd:82:69:84:82: 93:93:13:13:be:d0:0e:fb:df:41:db:f3:ae:8a:a4: e3:c3:8c:3e:3c:5a:43:58:ba:ac:2a:c6:3b:e1:04: 65:be:38:ae:ad:98:1a:7b:bd:78:9b:67:0a:d2:25: 91:a5:d7:67:ef:30:81:39:d9:06:6a:e8:c3:7b:b4: 86:6e:db:6e:1e:b7:b8:9d:ae:62:40:59:bc:39:e7: f8:87:73:b4:e3:26:6a:fc:3c:61:ec:72:80:3e:7b: 40:38:ea:f9:ed:0a:75:0c:77:05:26:a9:96:bb:ef: 59:ea:eb:f4:48:a6:c5:8e:fc:8c:99:9b:23:60:9e: 85:15:ac:97:5d:49:69:15:fa:ac:f0:85:0d:a9:cb: 1f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:87:65:31:3A:38:FB:41:40:41:98:75:E8:59:DA:F0:C6:5C:F7:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593485a7-c008-3e53-82f6-d39ddaa6358a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0a:47:b6:71:e2:fb:89:23:d3:7a:6d:00:fb:37:fc:d2:27: a4:11:3b:77:d4:23:ed:2c:34:5c:a7:00:7f:f5:d6:16:1a:45: cb:dd:7d:06:fe:54:48:28:1e:2d:32:27:4c:f3:25:26:ad:6b: 0d:ff:14:ae:85:fe:8b:df:cd:c4:e9:44:77:f9:74:9c:30:7f: 7f:5e:e3:7e:84:d3:f8:5b:01:83:cc:c7:56:de:7f:da:8e:72: da:69:ab:d1:0c:12:07:84:17:c4:4a:d4:46:80:59:d2:91:b6: 16:29:d6:b4:15:95:d7:6a:be:14:86:6a:f7:6b:f3:fd:0c:f7: 66:f1:b8:90:b6:2b:72:e8:99:47:39:d1:4f:af:23:32:da:01: 2a:32:dd:15:36:1c:c8:e1:65:1c:d0:ac:67:69:d7:80:7f:a0: 2c:b1:a9:4f:e2:c4:6d:4b:bf:22:ce:a7:38:cd:8f:4f:88:0d: a3:81:38:57:c5:bf:d2:78:2b:c8:7e:b8:2d:4b:03:83:93:94: 15:f2:3d:72:92:81:d0:19:15:b9:c9:19:88:aa:1d:0e:0c:2a: d9:cc:56:80:5e:ea:7e:99:b4:d2:39:29:69:20:6e:09:36:32: 75:35:11:86:99:bf:28:ab:57:2b:57:c9:20:b7:1b:17:4c:6a: f3:9d:ad:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcSbSJaWHBUpwIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk MDMxN2EyODktYjljMS00OWZjLWIxMmQtN2FmMTBjYTc3Y2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b+dTkdBPGw2f3uaiXUJxODNYyEYf+JClEQA z/iIjc6FfFDSR4xiMiflpr7hzo+qXaPzliC7aCJpvtfY/KITK3foe1K0lS0k2ORN O4rjEt4BfUIUhZpGz0AmTNLtDlhbGjmmoVYM4yeaR4a0G+ihpf01zYJphIKTkxMT vtAO+99B2/OuiqTjw4w+PFpDWLqsKsY74QRlvjiurZgae714m2cK0iWRpddn7zCB OdkGaujDe7SGbttuHre4na5iQFm8Oef4h3O04yZq/Dxh7HKAPntAOOr57Qp1DHcF JqmWu+9Z6uv0SKbFjvyMmZsjYJ6FFayXXUlpFfqs8IUNqcsfQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeHZTE6OPtBQEGYdehZ2vDGXPcUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTkzNDg1YTctYzAwOC0z ZTUzLTgyZjYtZDM5ZGRhYTYzNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIKR7Zx4vuJI9N6bQD7N/zSJ6QRO3fUI+0sNFynAH/11hYaRcvdfQb+ VEgoHi0yJ0zzJSataw3/FK6F/ovfzcTpRHf5dJwwf39e436E0/hbAYPMx1bef9qO ctppq9EMEgeEF8RK1EaAWdKRthYp1rQVlddqvhSGavdr8/0M92bxuJC2K3LomUc5 0U+vIzLaASoy3RU2HMjhZRzQrGdp14B/oCyxqU/ixG1LvyLOpzjNj0+IDaOBOFfF v9J4K8h+uC1LA4OTlBXyPXKSgdAZFbnJGYiqHQ4MKtnMVoBe6n6ZtNI5KWkgbgk2 MnU1EYaZvyirVytXySC3GxdMavOdrd0= -----END CERTIFICATE-----Generated at Sun Jan 11 09:46:11 2026 by rpki-client