This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/653be4d7-a460-3355-9824-3a25e54a7b42.roa File: 653be4d7-a460-3355-9824-3a25e54a7b42.roa (raw, json) Hash identifier: YjjqNa85z+0WuF1Z3jZbze1DlxO6zS+NQIhWJz+Q2Iw= Subject key identifier: BF:C8:77:F0:71:17:91:95:3F:91:40:BF:D2:46:7B:7C:BC:46:37:6F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BCF0070898C55968AD5CA4980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/653be4d7-a460-3355-9824-3a25e54a7b42.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 30036 IP address blocks: 173.28.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:70:89:8c:55:96:8a:d5:ca:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=a4b900b6-e2d6-47e4-b5f6-f04f1a567f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:e0:af:de:20:b8:5f:66:1d:9c:43:6e:fc: 23:2e:12:fb:4e:04:ca:3f:5a:fa:56:4c:29:73:2b: 90:98:db:a9:6e:af:78:14:c5:4b:ff:79:fe:0b:22: 85:24:71:ee:be:ed:42:cc:77:22:fc:76:03:1e:61: cd:d0:1d:3d:48:db:8d:86:4f:33:1e:5a:26:22:96: 30:02:3d:36:97:d6:e9:69:cb:40:7a:b4:d0:32:c8: fd:9d:40:0e:47:40:4b:23:25:ec:0d:88:af:12:2a: 60:1b:ae:bb:59:82:a0:37:bb:e8:f3:72:64:36:77: 99:55:24:b2:bd:81:f4:76:1e:f2:44:ea:a9:02:03: 1a:05:91:4d:43:77:5c:d7:b0:e5:0b:d1:f2:b8:99: 39:91:1d:39:8f:63:44:48:35:d7:68:2d:ee:ea:2d: 32:6a:ff:f1:9e:51:61:73:58:f7:2c:30:9c:96:1c: c8:9c:49:60:71:5e:f1:5e:85:56:f3:9f:0e:41:28: 48:73:ad:35:55:37:03:a1:a1:08:5c:d5:fa:6d:5a: 5a:91:4a:6f:25:a2:22:88:f3:e8:00:8b:a6:12:7e: dd:15:71:f5:46:1d:10:d9:10:19:56:2a:48:e5:2e: b7:e6:c3:e7:84:c0:c2:43:d8:55:c4:63:c6:3b:29: aa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C8:77:F0:71:17:91:95:3F:91:40:BF:D2:46:7B:7C:BC:46:37:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/653be4d7-a460-3355-9824-3a25e54a7b42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:fa:f3:f4:4e:ef:2e:6c:b8:7c:1a:61:34:b8:88:38:9e:5f: d6:d5:96:65:0c:b2:54:61:da:b0:05:4d:5e:33:b6:fc:74:eb: be:b8:4c:df:d8:09:1e:46:80:e6:07:64:88:d9:41:f2:16:75: 91:af:c7:26:ac:3e:d9:2d:df:78:e4:81:09:cd:57:92:16:e8: 5a:a4:73:25:44:7f:7c:a8:7a:29:cc:fd:69:6b:aa:06:dd:4d: f3:92:6d:d2:45:37:ef:6a:cc:3b:73:c0:c7:29:34:40:21:b5: 33:37:a1:8d:47:b9:e2:0d:3c:0e:f6:aa:47:bb:ef:c6:2f:4d: ba:e2:c9:85:b4:32:aa:78:29:b8:7d:43:1b:f4:a4:b7:72:04: 2f:45:7f:ce:86:a2:88:23:69:88:7b:5a:9a:a4:e8:65:c6:1e: a7:28:3f:8f:09:81:8f:ba:a6:f0:83:4e:8d:78:61:cf:be:fc: c4:cd:a0:ef:08:e9:73:70:cc:75:e4:ad:33:17:b1:5b:ed:c2: 75:21:5a:ab:20:d0:90:1c:8b:70:a5:eb:be:f2:00:63:97:29: d7:80:10:87:73:9e:ab:9a:11:13:a2:e2:76:cd:97:d1:aa:8f: 77:8c:19:f2:3e:96:17:8a:8b:2c:a3:51:44:f4:2f:0f:cb:b3: c2:f7:3f:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAHCJjFWWitXKSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk YTRiOTAwYjYtZTJkNi00N2U0LWI1ZjYtZjA0ZjFhNTY3ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMXgr94guF9mHZxDbvwjLhL7TgTKP1r6Vkwp cyuQmNupbq94FMVL/3n+CyKFJHHuvu1CzHci/HYDHmHN0B09SNuNhk8zHlomIpYw Aj02l9bpactAerTQMsj9nUAOR0BLIyXsDYivEipgG667WYKgN7vo83JkNneZVSSy vYH0dh7yROqpAgMaBZFNQ3dc17DlC9HyuJk5kR05j2NESDXXaC3u6i0yav/xnlFh c1j3LDCclhzInElgcV7xXoVW858OQShIc601VTcDoaEIXNX6bVpakUpvJaIiiPPo AIumEn7dFXH1Rh0Q2RAZVipI5S635sPnhMDCQ9hVxGPGOymq5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/Id/BxF5GVP5FAv9JGe3y8RjdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjUzYmU0ZDctYTQ2MC0z MzU1LTk4MjQtM2EyNWU1NGE3YjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/68/RO7y5suHwaYTS4iDieX9bVlmUMslRh2rAFTV4ztvx06764TN/Y CR5GgOYHZIjZQfIWdZGvxyasPtkt33jkgQnNV5IW6FqkcyVEf3yoeinM/Wlrqgbd TfOSbdJFN+9qzDtzwMcpNEAhtTM3oY1HueINPA72qke778YvTbriyYW0Mqp4Kbh9 Qxv0pLdyBC9Ff86GoogjaYh7Wpqk6GXGHqcoP48JgY+6pvCDTo14Yc++/MTNoO8I 6XNwzHXkrTMXsVvtwnUhWqsg0JAci3Cl677yAGOXKdeAEIdznquaEROi4nbNl9Gq j3eMGfI+lheKiyyjUUT0Lw/Ls8L3Pww= -----END CERTIFICATE-----Generated at Tue Nov 25 09:07:53 2025 by rpki-client