This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85af895f-0757-3ea8-a007-a06abab08648.roa File: 85af895f-0757-3ea8-a007-a06abab08648.roa (raw, json) Hash identifier: oibdb1WQ3eGBZmtmgRKd4BbpWRJLARyJubhjlrOWAZw= Subject key identifier: 29:A7:A6:9D:F1:EE:8E:0E:A8:A6:65:32:6E:9F:23:6A:93:08:D1:1D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BCF006986A28ED36AA52CDE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85af895f-0757-3ea8-a007-a06abab08648.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 19905 IP address blocks: 173.28.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:69:86:a2:8e:d3:6a:a5:2c:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=201d1a7a-fd47-4554-b08b-3f55cf0e46eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:22:b4:20:af:49:c2:fe:78:05:04:f8:4e:bd: fe:03:2f:4e:ba:85:74:6b:55:e2:15:6a:cf:63:09: 54:ed:e1:71:36:49:3b:ed:3f:fe:49:13:57:70:b3: c1:50:ac:b6:1a:f6:58:4e:55:13:fa:82:54:92:27: 73:5d:65:65:1c:c5:8a:73:76:7d:47:81:77:40:82: 74:66:1e:94:18:33:89:6a:54:11:bf:ef:78:31:67: 2a:2a:37:bd:99:f5:e1:a2:71:fc:87:89:78:4b:7e: 8f:32:77:8a:3e:cd:13:59:08:75:04:2d:1d:16:51: 25:1c:d9:78:a6:0f:0d:b0:59:87:82:32:2d:13:fa: 5a:2b:33:3c:11:c6:16:fc:7e:96:0a:c6:fc:17:40: 8c:bd:83:fb:76:a5:98:ff:f1:16:c5:59:74:50:a4: be:f3:13:a3:61:58:63:eb:2c:b5:88:98:5b:71:ee: 88:86:ec:22:8b:5c:4a:54:6b:70:9b:30:2f:41:4a: be:59:fb:73:c4:5f:1d:ac:39:fa:2c:28:4c:03:e1: 84:9a:b4:fd:e7:97:20:3d:72:63:20:f0:aa:b4:85: 19:f7:ad:5a:30:5f:46:3d:59:67:3c:d2:b5:2d:83: 60:94:30:cf:02:6d:ee:1a:b4:ff:3a:79:75:60:93: 67:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A7:A6:9D:F1:EE:8E:0E:A8:A6:65:32:6E:9F:23:6A:93:08:D1:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85af895f-0757-3ea8-a007-a06abab08648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e1:45:eb:8e:80:eb:6f:9b:9d:00:06:0b:5d:51:82:73:e4: e3:47:70:b1:cb:9c:cc:ae:4e:0b:8f:64:55:62:9f:c5:40:4a: 66:5c:e2:88:b5:b5:b9:76:4a:07:b0:a5:d9:77:71:71:c2:b1: 02:60:65:fd:d4:80:9b:6f:ab:6d:23:3b:1c:d5:71:98:32:4e: 9b:c7:92:91:63:cc:aa:86:c5:4a:87:1d:66:99:b8:5e:06:b1: 8c:da:d8:d3:d6:ad:32:39:fa:06:99:11:71:06:80:61:09:bf: 0f:58:aa:f2:3e:53:6c:03:97:4c:8a:da:2e:c0:12:ee:a3:86: ea:83:0c:f6:83:6d:2a:3c:e6:bc:5c:e4:57:16:83:c7:a1:71: c8:79:f1:ab:0c:cc:b9:f5:4b:5a:2b:44:ef:e2:ea:31:36:6f: 4b:d0:85:60:c0:e5:fc:7d:22:fd:22:a6:6f:91:37:86:25:8c: 0c:77:fa:b7:43:b4:f5:99:b4:a8:19:cc:72:50:3b:00:17:f4: 38:4c:90:bc:a7:a0:6d:64:6d:5f:ca:06:a6:6e:32:5b:cf:6a: 2c:d0:81:6e:f6:28:aa:40:e5:ca:a1:c4:9a:51:4d:18:ac:30: 34:2c:b2:cf:e8:c5:6c:72:77:97:b1:79:a6:24:12:54:71:b2: 28:fc:92:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAGmGoo7TaqUs3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk MjAxZDFhN2EtZmQ0Ny00NTU0LWIwOGItM2Y1NWNmMGU0NmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSK0IK9Jwv54BQT4Tr3+Ay9OuoV0a1XiFWrP YwlU7eFxNkk77T/+SRNXcLPBUKy2GvZYTlUT+oJUkidzXWVlHMWKc3Z9R4F3QIJ0 Zh6UGDOJalQRv+94MWcqKje9mfXhonH8h4l4S36PMneKPs0TWQh1BC0dFlElHNl4 pg8NsFmHgjItE/paKzM8EcYW/H6WCsb8F0CMvYP7dqWY//EWxVl0UKS+8xOjYVhj 6yy1iJhbce6Ihuwii1xKVGtwmzAvQUq+WftzxF8drDn6LChMA+GEmrT955cgPXJj IPCqtIUZ961aMF9GPVlnPNK1LYNglDDPAm3uGrT/Onl1YJNnwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmnpp3x7o4OqKZlMm6fI2qTCNEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVhZjg5NWYtMDc1Ny0z ZWE4LWEwMDctYTA2YWJhYjA4NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrhReuOgOtvm50ABgtdUYJz5ONHcLHLnMyuTguPZFVin8VASmZc4oi1 tbl2Sgewpdl3cXHCsQJgZf3UgJtvq20jOxzVcZgyTpvHkpFjzKqGxUqHHWaZuF4G sYza2NPWrTI5+gaZEXEGgGEJvw9YqvI+U2wDl0yK2i7AEu6jhuqDDPaDbSo85rxc 5FcWg8ehcch58asMzLn1S1orRO/i6jE2b0vQhWDA5fx9Iv0ipm+RN4YljAx3+rdD tPWZtKgZzHJQOwAX9DhMkLynoG1kbV/KBqZuMlvPaizQgW72KKpA5cqhxJpRTRis MDQsss/oxWxyd5exeaYkElRxsij8kq4= -----END CERTIFICATE-----Generated at Tue Nov 25 10:33:28 2025 by rpki-client