This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/708766bd-dad8-31a3-a3ad-c837a0328717.roa File: 708766bd-dad8-31a3-a3ad-c837a0328717.roa (raw, json) Hash identifier: WwXGepff4kQsYPd2YZox1MuVwe434FapjgZuLfKExmc= Subject key identifier: C2:5B:0A:BC:59:99:CA:EC:6B:66:44:49:69:9E:3F:A3:E9:47:07:A2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC0F9D0FA07FC107C2D380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/708766bd-dad8-31a3-a3ad-c837a0328717.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 19905 IP address blocks: 173.29.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:0f:9d:0f:a0:7f:c1:07:c2:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=9c18999b-0932-4d5c-81e4-95333d5d26bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:68:bf:f4:ac:17:14:02:f3:25:cb:ac:c5:90: cf:67:b4:ad:ef:76:1d:a1:43:56:60:47:93:b6:d1: 88:f5:cb:36:0a:ae:9a:08:ca:f7:85:4d:8d:4a:64: bb:a9:bb:ea:35:28:62:5e:31:58:9c:e3:87:b5:81: d3:71:87:47:5c:0c:1e:f3:ef:7b:0f:01:68:57:03: 12:8f:8a:80:f1:08:44:19:de:0e:bb:2f:1c:49:ed: 1b:c5:f9:4e:9d:20:2a:71:d7:1b:45:75:78:00:d0: 1f:28:43:15:0d:95:55:94:88:bc:49:11:92:66:ad: c7:7e:ae:38:04:31:00:50:d3:9b:54:f6:93:4d:bb: ec:e0:b4:0e:80:37:c0:35:3f:9f:58:bc:e8:ed:c6: 7d:40:c2:77:8f:21:b9:1d:f4:81:f0:35:f8:e1:5a: 65:8f:7e:c9:4e:2f:cd:47:ba:53:09:9a:b4:db:f6: 9b:50:eb:80:47:7b:b7:3b:23:ea:3b:dd:12:8a:72: de:34:c6:be:71:5d:97:9c:8d:78:d0:d0:d4:b7:c6: d3:47:83:20:7c:5e:1f:b3:9b:d4:f1:8b:00:95:52: e8:2a:3d:69:a1:37:f9:d3:1b:04:bd:cf:8c:71:70: 03:30:19:27:bd:e0:f3:f3:d2:d1:62:4b:07:84:a9: 97:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5B:0A:BC:59:99:CA:EC:6B:66:44:49:69:9E:3F:A3:E9:47:07:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/708766bd-dad8-31a3-a3ad-c837a0328717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:28:1b:5f:c5:77:ad:4d:80:7f:f9:dd:7b:7e:85:e2:bc:54: fa:00:c4:38:aa:b5:04:31:55:90:2c:a5:bc:e9:e5:f0:10:c4: d8:5a:75:50:7b:23:8f:c9:9c:de:7f:18:93:87:b4:bc:48:16: d1:e5:f3:82:45:64:b6:fe:2f:db:de:d4:9c:68:ab:e8:d1:4a: 71:90:d5:b3:78:a1:fe:65:48:0c:5f:37:b0:ba:47:fa:e0:e2: 5f:6d:05:4d:6c:cd:60:89:7d:ac:65:84:cc:ff:54:b2:3c:f2: a8:31:65:33:08:5b:a7:74:97:15:e6:f2:84:c3:16:0b:53:dc: 9e:a4:c4:45:9a:fe:a4:7a:30:21:15:d9:ea:eb:d4:fb:29:ea: bf:97:75:eb:d7:f7:25:a3:88:2a:f5:a0:33:fc:8e:55:18:c0: b8:e9:bd:b3:eb:b2:33:a6:13:cf:99:a8:77:75:52:d9:58:e9: ab:8d:6d:1e:3b:02:71:40:94:e6:94:34:90:5e:01:47:68:61: 1b:69:82:65:aa:e1:1c:84:b2:b2:f8:28:19:c1:cc:21:d3:5a: fa:2e:fc:5c:e4:63:70:38:50:4e:68:4b:56:1e:aa:a4:98:10: 7f:db:41:e2:1e:bc:59:28:37:09:b8:00:12:23:19:83:9d:72: 8c:db:24:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3A+dD6B/wQfC04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk OWMxODk5OWItMDkzMi00ZDVjLTgxZTQtOTUzMzNkNWQyNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimi/9KwXFALzJcusxZDPZ7St73YdoUNWYEeT ttGI9cs2Cq6aCMr3hU2NSmS7qbvqNShiXjFYnOOHtYHTcYdHXAwe8+97DwFoVwMS j4qA8QhEGd4Ouy8cSe0bxflOnSAqcdcbRXV4ANAfKEMVDZVVlIi8SRGSZq3Hfq44 BDEAUNObVPaTTbvs4LQOgDfANT+fWLzo7cZ9QMJ3jyG5HfSB8DX44Vplj37JTi/N R7pTCZq02/abUOuAR3u3OyPqO90SinLeNMa+cV2XnI140NDUt8bTR4MgfF4fs5vU 8YsAlVLoKj1poTf50xsEvc+McXADMBknveDz89LRYksHhKmXAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJbCrxZmcrsa2ZESWmeP6PpRweiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzA4NzY2YmQtZGFkOC0z MWEzLWEzYWQtYzgzN2EwMzI4NzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEoG1/Fd61NgH/53Xt+heK8VPoAxDiqtQQxVZAspbzp5fAQxNhadVB7 I4/JnN5/GJOHtLxIFtHl84JFZLb+L9ve1Jxoq+jRSnGQ1bN4of5lSAxfN7C6R/rg 4l9tBU1szWCJfaxlhMz/VLI88qgxZTMIW6d0lxXm8oTDFgtT3J6kxEWa/qR6MCEV 2err1Psp6r+XdevX9yWjiCr1oDP8jlUYwLjpvbPrsjOmE8+ZqHd1UtlY6auNbR47 AnFAlOaUNJBeAUdoYRtpgmWq4RyEsrL4KBnBzCHTWvou/FzkY3A4UE5oS1YeqqSY EH/bQeIevFkoNwm4ABIjGYOdcozbJCE= -----END CERTIFICATE-----Generated at Sun Jan 11 01:47:42 2026 by rpki-client