This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7128d07d-b18f-3683-83ca-af8830ba0bec.roa File: 7128d07d-b18f-3683-83ca-af8830ba0bec.roa (raw, json) Hash identifier: wKlVIe77oCK9lecvebTTzYNO3h0T2wKPta1efLb01OI= Subject key identifier: 72:E9:CD:FE:08:68:0A:CD:1E:11:42:0A:E2:69:07:39:6B:B9:BC:46 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C417683252C7481F47CC0B3C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7128d07d-b18f-3683-83ca-af8830ba0bec.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 19905 IP address blocks: 173.23.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:83:25:2c:74:81:f4:7c:c0:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=592d6f63-4cee-4243-9ebd-1b9693e18c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:74:62:55:7b:3b:72:f4:92:a5:d4:f4:4b: 4e:2a:a0:68:46:b4:a0:56:cb:00:c1:00:01:20:9a: f3:13:86:d0:64:25:c5:36:22:4a:4f:6b:85:d4:3a: bb:62:0c:8f:36:00:aa:13:9c:1b:4c:8e:d2:37:ed: 2c:6a:90:80:86:ac:ee:fd:f6:86:97:7d:bb:4d:5c: b9:0b:19:1c:0d:92:f9:a7:83:c5:05:7b:2e:98:aa: f4:a5:23:4f:5e:9c:fa:6e:50:2d:95:2b:b3:4e:91: 9f:56:f7:0d:ca:c2:d8:91:04:2c:95:f9:a0:69:42: a2:4d:73:c7:ee:3e:32:08:dd:da:3f:3c:f8:c4:b6: d3:cd:42:dd:8d:5d:1f:0b:fd:a3:8c:df:90:5c:89: 5d:08:fe:61:6f:3e:02:e0:4e:2f:f4:11:75:a5:d2: a2:b8:1e:99:c3:af:fb:f8:2a:ba:76:91:18:42:50: 3a:96:a6:a6:01:d7:1b:0c:48:78:1f:12:73:82:8c: 2c:f5:47:33:3b:91:f8:f5:6f:02:81:1a:e9:f7:3d: 18:7e:fa:21:d3:06:a2:c0:59:d2:23:aa:42:06:91: 16:c1:fd:48:fb:94:47:8d:ad:69:28:7a:04:a6:b2: c6:46:6d:38:4e:c6:f5:b2:65:79:52:27:d9:03:78: 91:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E9:CD:FE:08:68:0A:CD:1E:11:42:0A:E2:69:07:39:6B:B9:BC:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7128d07d-b18f-3683-83ca-af8830ba0bec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:21:87:d5:61:44:a5:ec:cb:c0:ae:80:54:ef:99:d7:3a:f5: 48:59:d5:00:1c:93:bb:4f:e6:03:75:e1:f4:a6:57:81:4e:2f: d1:b1:42:8e:a4:44:cd:64:57:50:cc:d3:6b:0e:61:d8:36:50: 57:07:e2:36:45:e2:53:d7:cb:fc:f4:a6:70:db:40:97:af:0e: 6a:3b:0b:2e:12:31:ab:30:a8:d2:a0:a3:ed:7e:79:46:52:c8: 99:9f:89:af:75:e7:c2:72:01:43:2d:56:74:3f:42:dd:e8:ca: f7:46:75:40:e4:cb:32:e0:8a:6d:dd:f4:b9:aa:84:6b:d2:47: a3:da:f8:11:4f:a5:74:e5:13:2f:91:2b:23:be:a3:0b:19:a1: 6f:13:1a:8b:0f:15:65:17:61:8f:8f:72:2b:a7:16:7e:b1:02: ea:59:7a:ad:76:dd:6b:0c:c9:df:c5:bc:f7:4b:30:fe:ee:f5: 38:f7:b4:8c:29:10:02:6b:42:62:ab:08:16:54:3c:15:65:a5: 06:af:33:92:cf:ac:21:db:b6:75:df:7e:18:99:ac:0b:43:13: c0:21:d7:0a:ab:ac:f9:68:74:cb:52:31:2b:dc:b0:c0:10:9f: 7d:fc:95:1e:6e:09:6b:82:49:49:3b:41:13:11:66:e6:c7:b6: 45:9b:e3:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdoMlLHSB9HzAs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk NTkyZDZmNjMtNGNlZS00MjQzLTllYmQtMWI5NjkzZTE4Yzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJl0YlV7O3L0kqXU9EtOKqBoRrSgVssAwQAB IJrzE4bQZCXFNiJKT2uF1Dq7YgyPNgCqE5wbTI7SN+0sapCAhqzu/faGl327TVy5 CxkcDZL5p4PFBXsumKr0pSNPXpz6blAtlSuzTpGfVvcNysLYkQQslfmgaUKiTXPH 7j4yCN3aPzz4xLbTzULdjV0fC/2jjN+QXIldCP5hbz4C4E4v9BF1pdKiuB6Zw6/7 +Cq6dpEYQlA6lqamAdcbDEh4HxJzgows9UczO5H49W8CgRrp9z0Yfvoh0waiwFnS I6pCBpEWwf1I+5RHja1pKHoEprLGRm04Tsb1smV5UifZA3iREwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLpzf4IaArNHhFCCuJpBzlrubxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzEyOGQwN2QtYjE4Zi0z NjgzLTgzY2EtYWY4ODMwYmEwYmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrReIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEhh9VhRKXsy8CugFTvmdc69UhZ1QAck7tP5gN14fSmV4FOL9GxQo6k RM1kV1DM02sOYdg2UFcH4jZF4lPXy/z0pnDbQJevDmo7Cy4SMaswqNKgo+1+eUZS yJmfia9158JyAUMtVnQ/Qt3oyvdGdUDkyzLgim3d9LmqhGvSR6Pa+BFPpXTlEy+R KyO+owsZoW8TGosPFWUXYY+PciunFn6xAupZeq123WsMyd/FvPdLMP7u9Tj3tIwp EAJrQmKrCBZUPBVlpQavM5LPrCHbtnXffhiZrAtDE8Ah1wqrrPlodMtSMSvcsMAQ n338lR5uCWuCSUk7QRMRZubHtkWb43E= -----END CERTIFICATE-----Generated at Sun Jan 11 09:45:52 2026 by rpki-client